569 matches found
CVE-2006-2839
Directory traversal vulnerability in PG Problem Editor module PGProblemEditor.pm in WeBWorK Online Homework Delivery System 2.2.0 and earlier allows remote attackers to read and write files outside of the templates directory...
CVE-2006-2839
CVE-2006-2839 affects WeBWorK Online Homework Delivery System (2.2.0 and earlier) via the PGProblemEditor.pm module. The vulnerability is a directory traversal that allows remote attackers to read and write files outside the templates directory. Exploitation details, affected versions, and precis...
Design/Logic Flaw
PHP remote file include vulnerability in logIT 1.3 and 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-1099
PHP remote file include vulnerability in logIT 1.3 and 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-0111
Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 parent or 2 pg parameter...
Cross site scripting
Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 parent or 2 pg parameter...
CVE-2006-0111
Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 parent or 2 pg parameter...
PT-2002-1274 · Oracle · Tarantella Enterprise
Name of the Vulnerable Software and Affected Versions: Tarantella Enterprise versions 3.0x through 3.20 Tarantella Enterprise version 3.11.903 Description: The issue allows remote attackers to view directory contents. This is achieved by providing an empty pg parameter in the ttawebtop.cgi script...
PT-2001-1980 · Oracle · Tarantella Enterprise
Name of the Vulnerable Software and Affected Versions: Tarantella Enterprise versions 3.00 through 3.01 Description: A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by including a .. dot dot in the pg parameter of the ttawebtop.cgi endpoint...