Design/Logic Flaw

BilboBlog 0.2.1 allows remote attackers to obtain sensitive information via 1 an enablecache=false query string to footer.php or 2 a direct request to pagination.php, which reveals the installation path in an error message...

CVE-2008-3304

BilboBlog 0.2.1 allows remote attackers to obtain sensitive information via 1 an enablecache=false query string to footer.php or 2 a direct request to pagination.php, which reveals the installation path in an error message...

CVE-2006-4639

Multiple PHP remote file inclusion vulnerabilities in C-News.fr C-News 1.0.1 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the path parameter in 1 formulairecommentaires.php, 2 affichage/listenews.php, 3 affichage/newscomplete.php,...