CVE-2006-5100: Undefined Security Weakness

PHP remote file inclusion vulnerability in parse/parser.php in WEB//NEWS aka webnews 1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the WNBASEDIR parameter...

webnews <= v1.4 (WN_BASEDIR) Remote File Inclusion Exploit

============================================================================================== webnews = v1.4 WNBASEDIR Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Version : v1.4...

WEB//NEWS <= 1.4 (parser.php) Remote File Include Vulnerability

No description provided by source. ============================================================================================== webnews = v1.4 WNBASEDIR Remote File Inclusion Exploit =============================================================================================== Critical Level :...

WEB//NEWS <= 1.4 (parser.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications =============================================================== WEB//NEWS = 1.4 parser.php Remote File Include Vulnerability ===============================================================...

Web//News 1.4 - 'parser.php' Remote File Inclusion (1)

============================================================================================== webnews = v1.4 WNBASEDIR Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Version : v1.4...

WebNews 1.4 - parser.php Remote File Inclusion (1)

WebNews 1.4 - parser.php Remote File Inclusion 1 ============================================================================================== webnews = v1.4 WNBASEDIR Remote File Inclusion Exploit ===============================================================================================...

phpCMS XSS

The remote host runs phpCMS, a content management system written in PHP. This version is vulnerable to cross-site scripting due to a lack of sanitization of user-supplied data in parser.php script. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a...

CVE-2005-1840: Undefined Security Weakness

Directory traversal vulnerability in class.layoutphpcms.php in phpCMS 1.2.x before 1.2.1pl2 allows remote attackers to read or include arbitrary files, as demonstrated using a .. dot dot in the language parameter to parser.php...

CVE-2004-1203

The CVE concerns phpCMS prior to 1.2.1. When non-stealth and debug modes are enabled, parsing in parser.php allows remote attackers to obtain the web server’s installation path by supplying an invalid file parameter, causing information disclosure. Affected software: phpCMS 1.2.1 and earlier. Roo...

CVE-2004-1202

CVE-2004-1202 affects phpCMS up to version 1.2.1, where parser.php fails to sanitize user input in the file parameter, enabling cross-site scripting (XSS). Multiple connected sources confirm this vulnerability in phpCMS and link it to XSS via parser.php with non-stealth and debug modes. Impact is...

CVE-2004-1203: Undefined Security Weakness

parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to gain sensitive information via an invalid file parameter, which reveals the web server's installation path...

CVE-2004-1202: Undefined Security Weakness

Cross-site scripting XSS vulnerability in parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to inject arbitrary web script or HTML via the file parameter...

phpCMS parser.php file Parameter XSS

The remote host runs phpCMS, a content management system written in PHP. This version is vulnerable to cross-site scripting due to a lack of sanitization of user-supplied data in parser.php script. Successful exploitation of this issue may allow an attacker to execute malicious script code on a...