PT-2006-5969 · Phpwebsite · Phpwebsite

Name of the Vulnerable Software and Affected Versions: phpWebSite version 0.10.2 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the PHPWS SOURCE DIR parameter in multiple PHP files, including init.php, users.php, Cookie.php, forms.php, Groups.php,...

phpWebSite 0.x - Image File Processing Arbitrary '.PHP' File Upload

source: https://www.securityfocus.com/bid/12653/info phpWebSite is reported prone to a remote arbitrary PHP file upload vulnerability. The issue presents itself due to a lack of sanitization performed on image files that are uploaded when submitting an announcement. A remote attacker may exploit...

CVE-2004-1655

Cross-site scripting XSS vulnerability in phpWebsite 0.9.3-4 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 CMpid parameter in the comments module or 2 the subject or message fields in the notes module...