CVE-2013-2057

YaBB through 2.5.2: 'guestlanguage' Cookie Parameter Local File Include Vulnerability...

LiveZilla 'mobile/php/translation/index.php' 'g_language' Parameter Local File Inclusion

The version of LiveZilla installed on the remote web server fails to properly sanitize user-supplied input to the 'glanguage' parameter of the 'mobile/php/translation/index.php' script. A remote, unauthenticated attacker can exploit this issue to view arbitrary files or execute arbitrary PHP code...

Flyspeck lang Parameter Local File Inclusion

The remote host is running Flyspeck, a commercial PHP application for editing web pages. The version of Flyspeck installed on the remote host fails to filter user-supplied input to the 'lang' parameter of the 'includes/database/examples/addressbook.php' script before using it to include PHP code...

Jinzora name Parameter Local File Inclusion

The remote host is running Jinzora, a web-based media streaming and management system written in PHP. The version of Jinzora installed on the remote host fails to filter user-supplied input to the 'name' variable in the 'index.php' script when 'op' is set before using it to include PHP code...

Exponent CMS index.php view Parameter Local File Inclusion

The remote host is running Exponent CMS, an open source content management system written in PHP. The version of Exponent CMS installed on the remote host fails to properly sanitize user-supplied input to the 'view' parameter before using it in the 'modules/calendarmodule/class.php' script to...

Coppermine Photo Gallery index.php file Parameter Local File Inclusion

The version of Coppermine Gallery installed on the remote host fails to properly sanitize input to the 'file' parameter of the 'index.php' script before using it in a PHP 'includeonce' function. Regardless of PHP's 'registerglobals' setting, an unauthenticated attacker may be able to exploit this...