CVE-2006-2839

CVE-2006-2839 affects WeBWorK Online Homework Delivery System (2.2.0 and earlier) via the PGProblemEditor.pm module. The vulnerability is a directory traversal that allows remote attackers to read and write files outside the templates directory. Exploitation details, affected versions, and precis...

CVE-2006-2839

Directory traversal vulnerability in PG Problem Editor module PGProblemEditor.pm in WeBWorK Online Homework Delivery System 2.2.0 and earlier allows remote attackers to read and write files outside of the templates directory...

CVE-2006-2839: Undefined Security Weakness

Directory traversal vulnerability in PG Problem Editor module PGProblemEditor.pm in WeBWorK Online Homework Delivery System 2.2.0 and earlier allows remote attackers to read and write files outside of the templates directory...

CVE-2006-1224: Undefined Security Weakness

Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via a "%2E." mixed encoding in the pg parameter...

Design/Logic Flaw

PHP remote file include vulnerability in logIT 1.3 and 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-1099

PHP remote file include vulnerability in logIT 1.3 and 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-1099: Undefined Security Weakness

PHP remote file include vulnerability in logIT 1.3 and 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-1013: Undefined Security Weakness

PHP remote file include vulnerability in index.php in SMartBlog aka SMBlog 1.2 allows remote attackers to include and execute arbitrary PHP files via 1 the pg parameter and 2 a query string without a parameter...

Cross site scripting

Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 parent or 2 pg parameter...

CVE-2006-0111

Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 parent or 2 pg parameter...

CVE-2006-0111: Undefined Security Weakness

Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 parent or 2 pg parameter...

CVE-2006-0111

Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the 1 parent or 2 pg parameter...

CVE-2005-4617: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in tickets.php in cSupport 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the pg parameter...

CVE-2005-4306: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 pg, 2 tid, 3 cid, and 4 fid parameters to netboardr.cgi, or 5 cid parameter to search.cgi...

CVE-2005-3156: Undefined Security Weakness

Directory traversal vulnerability in printfaq.php in EasyGuppy Guppy for Windows 4.5.4 and 4.5.5 allows remote attackers to read arbitrary files via ".." sequences in the pg parameter, which is cleansed for XSS but not directory traversal...

CVE-2005-2853: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in GuppY 4.5.3a and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the pg parameter to printfaq.php, or the 2 Referer or 3 User-Agent HTTP headers, which are not properly handled by error.php...

CVE-2005-1130: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Pinnacle Cart allows remote attackers to inject arbitrary web script or HTML via the pg parameter...

PT-2002-1274 · Oracle · Tarantella Enterprise

Name of the Vulnerable Software and Affected Versions: Tarantella Enterprise versions 3.0x through 3.20 Tarantella Enterprise version 3.11.903 Description: The issue allows remote attackers to view directory contents. This is achieved by providing an empty pg parameter in the ttawebtop.cgi script...

CVE-2001-0805: Undefined Security Weakness

Directory traversal vulnerability in ttawebtop.cgi in Tarantella Enterprise 3.00 and 3.01 allows remote attackers to read arbitrary files via a .. dot dot in the pg parameter...

PT-2001-1980 · Oracle · Tarantella Enterprise

Name of the Vulnerable Software and Affected Versions: Tarantella Enterprise versions 3.00 through 3.01 Description: A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by including a .. dot dot in the pg parameter of the ttawebtop.cgi endpoint...