CVE-2005-1438

PHP remote file inclusion vulnerability in main.php in osTicket allows remote attackers to execute arbitrary PHP code via the includedir parameter...

CVE-2005-1438

The connected documents confirm a Remote File Include vulnerability in osTicket variants, specifically CVE-2005-1438, via the include_dir parameter in main.php. The issue affects osTicket versions up to 1.2.7 (per Tenable NASL “osTicket <= 1.2.7 Multiple Vulnerabilities”) and is included among...

CVE-2005-1438

PHP remote file inclusion vulnerability in main.php in osTicket allows remote attackers to execute arbitrary PHP code via the includedir parameter...

CVE-2005-1438: Undefined Security Weakness

PHP remote file inclusion vulnerability in main.php in osTicket allows remote attackers to execute arbitrary PHP code via the includedir parameter...

CVE-2005-1447: Undefined Security Weakness

PHP remote file inclusion vulnerability in main.php in SitePanel 2.6.1 and earlier SitePanel2 allows remote attackers to execute arbitrary PHP code via the p parameter...

CVE-2005-1444: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in SitePanel 2.6.1 and earlier SitePanel2 allows remote attackers to inject arbitrary web script or HTML via 1 the v, show, or secname parameters to main.php, 2 the inadmin, newsev, or postid parameters to 5.php, or 3 the id parameter to 0.php...

CVE-2005-0222

main.php in Gallery 2.0 Alpha allows remote attackers to gain sensitive information by changing the value of g2subView parameter, which reveals the path in an error message...

CVE-2005-0887: Undefined Security Weakness

Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code via the menuAction variable in 1 functions.inc.php or 2 main.php, which causes code to be injected into an eval statement...

CVE-2005-0222

The CVE-2005-0222 entry concerns Gallery 2.0 Alpha where main.php exposes sensitive path information via the g2_subView parameter, enabling remote information disclosure. The underlying issue is a lack of proper validation/error handling that reveals the file path in an error message when g2_subV...

CVE-2005-0222: Undefined Security Weakness

main.php in Gallery 2.0 Alpha allows remote attackers to gain sensitive information by changing the value of g2subView parameter, which reveals the path in an error message...