CVE-2005-4861: Improper Authentication

functions.php in Ragnarok Online Control Panel ROCP 4.3.4a allows remote attackers to bypass authentication by requesting accountmanage.php with a trailing "/login.php" PHPSELF value, which is not properly handled by the CHECKAUTH function...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Olate Download od 3.4.2 allow remote attackers to inject arbitrary web script or HTML via 1 the PHPSELF variable in modules/core/uim.php and 2 url tags in a comment in modules/core/fldm.php...

CVE-2007-4541

Multiple cross-site scripting XSS vulnerabilities in Olate Download od 3.4.2 allow remote attackers to inject arbitrary web script or HTML via 1 the PHPSELF variable in modules/core/uim.php and 2 url tags in a comment in modules/core/fldm.php...

CVE-2007-4541

Multiple cross-site scripting XSS vulnerabilities in Olate Download od 3.4.2 allow remote attackers to inject arbitrary web script or HTML via 1 the PHPSELF variable in modules/core/uim.php and 2 url tags in a comment in modules/core/fldm.php...

CVE-2007-4541: Cross-Site Request Forgery (CSRF)

Multiple cross-site scripting XSS vulnerabilities in Olate Download od 3.4.2 allow remote attackers to inject arbitrary web script or HTML via 1 the PHPSELF variable in modules/core/uim.php and 2 url tags in a comment in modules/core/fldm.php...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in the Sirius 1.0 theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in the 1 Blix 0.9.1 and 2 Blix 0.9.1 Rus themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

CVE-2007-4483

Cross-site scripting XSS vulnerability in index.php in the WordPress Classic 1.5 theme in WordPress before 2.1.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in the WordPress Classic 1.5 theme in WordPress before 2.1.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

CVE-2007-4482

Cross-site scripting XSS vulnerability in index.php in the Pool 1.0.7 theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

CVE-2007-4480

CVE-2007-4480 affects the Sirius 1.0 WordPress theme. The vulnerability is a Cross-Site Scripting (XSS) in index.php via PATH_INFO (PHP_SELF), allowing remote attackers to inject arbitrary script/HTML. No exploitation details are provided; remediation is to update the theme (patch/version update ...

CVE-2007-4483

CVE-2007-4483 affects the WordPress Classic theme (1.5) prior to WordPress 2.1.3. The issue is a cross-site scripting (XSS) flaw in index.php via PATH_INFO (PHP_SELF). Impact: remote attackers can inject arbitrary web script or HTML.Remediation: update the WordPress Classic theme (or apply the fi...

CVE-2007-4483

Cross-site scripting XSS vulnerability in index.php in the WordPress Classic 1.5 theme in WordPress before 2.1.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

CVE-2007-4483

Cross-site scripting XSS vulnerability in index.php in the WordPress Classic 1.5 theme in WordPress before 2.1.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

CVE-2007-4482

The CVE-2007-4482 entry describes a Cross-site scripting (XSS) vulnerability in the Pool theme for WordPress v1.0.7, exploitable via PATH_INFO (PHP_SELF) in index.php. The vulnerability could allow remote attackers to inject arbitrary web script or HTML. Affected component: Pool theme (WordPress)...

CVE-2007-4482: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in the Pool 1.0.7 theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

CVE-2007-4481: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in the 1 Blix 0.9.1 and 2 Blix 0.9.1 Rus themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

CVE-2007-4483: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in the WordPress Classic 1.5 theme in WordPress before 2.1.3 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

CVE-2007-4480: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in the Sirius 1.0 theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

Vulnerability in theme Blix 0.9.1 for WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в темах Blix 0.9.1 и Blix 0.9.1 Rus для WordPress. XSS: http://site/index.php/223E3Cscript3Ealertdocument.cookie3C/script3E Уязвимость связана с недостаточной фильтрацией переменной PHPSELF. Дополнительная информаци...