CVE-2006-1478: Undefined Security Weakness

Directory traversal vulnerability in 1 initiate.php and 2 possibly other PHP scripts in Turnkey Web Tools PHP Live Helper 1.8, and possibly later versions, allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the language cookie, as...

CVE-2006-1477: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Live Helper 1.8 allow remote attackers to include and execute arbitrary PHP code via the abspath parameter in 1 initiate.php, 2 waiting.php, 3 welcome.php, 4 admin/index.php, 5 javascript.php, 6 checkchat.php, and 7...

Cross site scripting

Cross-site scripting XSS vulnerability in statusimage.php in PHP Live! 3.0 allows remote attackers to inject arbitrary web script or HTML via the baseurl parameter...

CVE-2006-1373

Cross-site scripting XSS vulnerability in statusimage.php in PHP Live! 3.0 allows remote attackers to inject arbitrary web script or HTML via the baseurl parameter...

CVE-2006-1373

Cross-site scripting XSS vulnerability in statusimage.php in PHP Live! 3.0 allows remote attackers to inject arbitrary web script or HTML via the baseurl parameter...

CVE-2006-1373

CVE-2006-1373 affects PHP Live! 3.0, specifically status_image.php, where the base_url parameter is not properly sanitized, enabling cross-site scripting (XSS). The underlying issue is insufficient input sanitization, allowing an attacker to inject arbitrary script to run in a user’s browser and ...

CVE-2006-1373: Undefined Security Weakness

Cross-site scripting XSS vulnerability in statusimage.php in PHP Live! 3.0 allows remote attackers to inject arbitrary web script or HTML via the baseurl parameter...

PHP Live! XSS status_image.php

Date: 03/22/2006 Vendor: OSI Codes Product: PHP Live! Versions: tested 3.0 Vulnerability: Cross Site Scripting Location: statusimage.php Exploit: /phplive/js/statusimage.php?baseurl=scriptalertdocument.cookie/script Stumbled across this while auditing a web server, vendor has been notified...

PHP Live! 3.0 Status_Image.PHP Cross-Site Scripting Vulnerability

PHP Live! 3.0 StatusImage.PHP Cross-Site Scripting Vulnerability. CVE-2006-1373. Webapps exploit for php platform source: http://www.securityfocus.com/bid/17184/info PHP Live! is prone to a cross-site scripting vulnerability. This issue is due to a lack of proper sanitization of user-supplied...

CVE-2004-2485

CVE-2004-2485 affects PHP Live! prior to 2.8.2. It describes an unspecified vulnerability that allows remote attackers to include arbitrary files and directories via unspecified attack vectors, with potential arbitrary PHP code execution as implied by related Nessus text. The vulnerability detail...

CVE-2004-2485

Unspecified vulnerability in PHP Live! before 2.8.2, due to a "major security problem," allows remote attackers to include arbitrary files and directories via unspecified attack vectors...

CVE-2004-2485: Undefined Security Weakness

Unspecified vulnerability in PHP Live! before 2.8.2, due to a "major security problem," allows remote attackers to include arbitrary files and directories via unspecified attack vectors...

CVE-2004-2485

Unspecified vulnerability in PHP Live! before 2.8.2, due to a "major security problem," allows remote attackers to include arbitrary files and directories via unspecified attack vectors...

[SA13420] PHP Live! Unspecified Vulnerability

TITLE: PHP Live! Unspecified Vulnerability SECUNIA ADVISORY ID: SA13420 VERIFY ADVISORY: http://secunia.com/advisories/13420/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: PHP Live! 2.x http://secunia.com/product/4373/ DESCRIPTION: A vulnerability with an unknown impa...

PHP Live! < 2.8.2 Remote Configuration File Include

Binary data 2447.prm...

PHP Live! directory/conf File Include Unspecified Issue

The remote host is running PHP Live! a live support system for websites. The remote version of this software contains an unspecified flaw that could allow an attacker to include a configuration file hosted on a third-party server. An attacker may exploit this flaw to execute arbitrary PHP code on...