N/X Web Content Management System 2002 Prerelease 1 menu.inc.php c_path Parameter RFI

No description provided by source. source: http://www.securityfocus.com/bid/6500/info N/X Web Content Management System is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. An attacker may exploit this by supplying a path to a maliciously...

CVE-2006-5666

CVE-2006-5666 is an SQL injection vulnerability in the login parameter of includes/menu.inc.php for E-Annu 1.0. Remote attackers could execute arbitrary SQL commands due to improper input handling. The available documents identify the affected component and likely impact (unauthorized database ac...

CVE-2006-3883

Multiple cross-site scripting XSS vulnerabilities in Gonafish LinksCaffe 3.0 allow remote attackers to inject arbitrary web script or HTML via 1 the tablewidth parameter in a counter.php; 2 the newdays parameter in b links.php; and the 3 tableborder, 4 menucolor, 5 textcolor, and 6 bodycolor...