CVE-2008-0745

Directory traversal vulnerability in aides/index.php in DomPHP 0.82 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

Directory traversal

Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include arbitrary files via a .. dot dot in the 1 subpage parameter in a categories.inc.php, b news.inc.php, c other.inc.php, d permissions.inc.php, e templates.inc.php, and f...

CVE-2008-0545

CVE-2008-0545 describes multiple directory traversal vulnerabilities in Bubbling Library 1.32. The issue allows remote attackers to include and execute arbitrary local files via a .. in the uri parameter passed to dispatcher/framework/ templates (yui-menu.tpl.php, simple.tpl.php, advanced.tpl.php...

Aria 0.99-6 (effect.php page) Local File Inclusion Vulnerability

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-002 Application: aria-0.99-6 Web based ERP Versions Affected: aria-0.99-6 Vendor URL: http://www.tucows.net/ Bug: Local File Include Exploits: YES Reported: 09.01.2008 Vendor Response: None Date of Public...

DEBIAN-CVE-2008-0195

WordPress 2.0.11 and earlier allows remote attackers to obtain sensitive information via an empty value of the page parameter to certain PHP scripts under wp-admin/, which reveals the path in various error messages...

CVE-2008-0195

WordPress 2.0.11 and earlier allows remote attackers to obtain sensitive information via an empty value of the page parameter to certain PHP scripts under wp-admin/, which reveals the path in various error messages...

CVE-2008-0186

Cross-site scripting XSS vulnerability in index.php in NetRisk 1.9.7 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter, possibly related to CVE-2008-0144...

CVE-2007-6582

Directory traversal vulnerability in index.php in mBlog 1.2 allows remote attackers to read arbitrary files via a .. dot dot in the page parameter in a page mode action...

CVE-2007-5802

CVE-2007-5802 affects Firewolf Technologies Synergiser 1.2 RC1 and earlier. A directory traversal in index.php allows remote attackers to include and execute arbitrary local files by supplying a .. in the page parameter. This may enable including a local PHP script with a duplicate function decla...

Directory traversal

Directory traversal vulnerability in index.php in Artmedic CMS 3.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...

CVE-2007-5297

Cross-site scripting XSS vulnerability in index.php in Minki 1.30 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2007-4764

CVE-2007-4764 affects Pawfaliki 0.5.1, where the PHP script pawfaliki.php is vulnerable to a directory-traversal via the page parameter. The root cause is improper handling of relative path components (..), enabling remote attackers to list arbitrary files. The vulnerability is documented in mult...

CVE-2007-3128

SQL injection vulnerability in content.php in WSPortal 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the page parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in htdocs/php.php in OpenConcept Back-End CMS 0.4.7 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Arizona Dream Livre d'or livor 2.5 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-7012

scart.cgi in SCart 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter of a showtext action...

Directory traversal

Directory traversal vulnerability in index.php in Guernion Sylvain Portail Web Php aka Gsylvain35 Portail Web, PwP allows remote attackers to read arbitrary files via a .. dot dot in the page parameter. NOTE: this issue was later reported for 2.5.1.1...

CVE-2006-6951

CVE-2006-6951 describes a cross-site scripting (XSS) flaw in OdysseusBlog’s blog.php, exploitable by supplying a crafted value for the page parameter. Remote attackers could inject arbitrary script/HTML when the affected page is viewed, as reported in the connected documents. The sources confirm ...

EV0134.txt

New eVuln Advisory: Doika guestbook 'page' XSS Vulnerability http://evuln.com/vulns/134/summary.html --------------------Summary---------------- eVuln ID: EV0134 CVE: CVE-2006-4325 Software: Doika guestbook Sowtware's Web Site: http://doika.net/ Versions: 2.5 Critical Level: Harmless Type:...

CVE-2006-4610

PHP remote file inclusion vulnerability in index.php in GrapAgenda 0.11 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the page parameter...