Open Media Collectors Database Multiple Local File Include Vulnerabilities

Open Media Collectors Database OpenDb is prone to multiple local file- include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute arbitrary local scripts in the context of...

SiteX 'THEME_FOLDER' Parameter Multiple Local File Include Vulnerabilities

SiteX is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the...

SiteX 'THEME_FOLDER' Parameter Multiple Local File Include Vulnerabilities

SiteX is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the...

AdvertisementManager 3.1 - req LocalRemote File Inclusion

AdvertisementManager 3.1 - req LocalRemote File Inclusion source: https://www.securityfocus.com/bid/44165/info AdvertisementManager is prone to local and remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues may all...

L2Web LineWeb 1.0.5 - Multiple Input Validation Vulnerabilities

L2Web LineWeb 1.0.5 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/40577/info LineWeb is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include multiple local file-include...

L2Web LineWeb 1.0.5 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/40577/info LineWeb is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include multiple local file-include vulnerabilities, multiple SQL-injection vulnerabilities, and an...

LineWeb 1.0.5 - Multiple Remote Vulnerabilities

LineWeb 1.0.5 - Multiple Remote Vulnerabilities source: https://www.securityfocus.com/bid/37613/info LineWeb is prone to multiple remote vulnerabilities: - Multiple local file-include vulnerabilities - An SQL-injection vulnerability - A security-bypass vulnerability An attacker can exploit these...

LineWeb 1.0.5 - Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/37613/info LineWeb is prone to multiple remote vulnerabilities: - Multiple local file-include vulnerabilities - An SQL-injection vulnerability - A security-bypass vulnerability An attacker can exploit these issues to execute arbitrary local files within t...

Weatimages Directory Traversal and LFI Vulnerabilities

No description provided by source. Weatimages Directory Traversal&Local File Include Vulnerabilities By: e.wiZz! Script info: Site: http://nazarkin.name/projects/weatimages/download.php In the wild... index.php: ... //kill oneself if user trying to access resource with '/../' in path if...

Simple PHP Blog <= 0.5.1 Local File Include vulnerability

No description provided by source. ============================================= INTERNET SECURITY AUDITORS ALERT 2009-005 - Original release date: March 2nd, 2009 - Last revised: December 18th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.8/10 CVSS scored...

SQL-Ledger – several vulnerabilities

============================================ ||| Security Advisory AKLINK-SA-2009-001 ||| ||| CVE-2009-3580 CVE candidate ||| ||| CVE-2009-3581 CVE candidate ||| ||| CVE-2009-3582 CVE candidate ||| ||| CVE-2009-3583 CVE candidate ||| ||| CVE-2009-3584 CVE candidate |||...

[ISecAuditors Security Advisories] Simple PHP Blog <= 0.5.1 Local File Include vulnerability

============================================= INTERNET SECURITY AUDITORS ALERT 2009-005 - Original release date: March 2nd, 2009 - Last revised: December 18th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.8/10 CVSS scored ============================================= I. VULNERABILITY...

QuiXplorer 2.41beta LFI / Traversal / Code Execution

============================================= INTERNET SECURITY AUDITORS ALERT 2009-003 - Original release date: March 2nd, 2009 - Last revised: December 17th, 2009 - Discovered by: Juan Galiana Lara - Severity: 9/10 CVSS scored ============================================= I. VULNERABILITY...

Simple PHP Blog 0.5.1 Local File Inclusion

============================================= INTERNET SECURITY AUDITORS ALERT 2009-005 - Original release date: March 2nd, 2009 - Last revised: December 18th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.8/10 CVSS scored ============================================= I. VULNERABILITY...

F3Site 2009 - '/mod/poll.php?GLOBALS[nlang]' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/37408/info F3Site is prone to multiple local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks ar...

Family Connections Multiple Input Validation Vulnerabilities

Family Connections is prone to multiple input-validation vulnerabilities, including a local file-include issue, an arbitrary file-upload issue, and multiple SQL-injection issues. These issues occur because the application fails to properly sanitize user- supplied input. Exploiting these issues ma...

Family Connections <= 2.1.3 Multiple Input Validation Vulnerabilities

Family Connections is prone to multiple input-validation vulnerabilities, including a local file include LFI issue, an arbitrary file-upload issue, and multiple SQL injection SQLi issues. These issues occur because the application fails to properly sanitize user-supplied input...

Invision Power Board < 3.0.5 Multiple Vulnerabilities

The remote web server hosts a version of Invision Power Board earlier than 3.0.5. Such versions are potentially affected by multiple vulnerabilities : - A local-file include vulnerability affects the 'section' parameter sent to the 'forum/index.php' script. - A SQL injection vulnerability affects...

Invision Power Board < 3.0.5 Multiple Vulnerabilities (deprecated)

Binary data 5260.prm...

Invision Power Board Local File Include and SQL Injection Vulnerabilities

Invision Power Board is prone to a local file-include vulnerability and multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...