portfolioCMS any.php file upload vulnerability

portfolioCMS is a content management system CMS based on PHP and MySQL. A security vulnerability exists in portfolioCMS version 1.0.5. An attacker can exploit the vulnerability to upload arbitrary .php files with the help of admin/portfolio.php?newpage=true URI...

CVE-2005-4336

Cross-site scripting XSS vulnerability in ProjectForum 4.7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 fwd parameter in admin/adminsignin.html and 2 originalpageid parameter in admin/newpage.html associated with a group...

CVE-2005-4336

CVE-2005-4336 describes a Cross-site scripting (XSS) vulnerability in ProjectForum 4.7.0 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the parameters (1) fwd in admin/adminsignin.html and (2) originalpageid in admin/newpage.html, associated with a group...