207 matches found
Directory traversal
Multiple directory traversal vulnerabilities in cpCommerce 1.1.0 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the language parameter in a language action to the default URI, which is not properly handled in actions/language.act.php, or 2 the action...
CVE-2007-0769
Cross-site scripting XSS vulnerability in register.php in Phorum 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the vendor disputes this vulnerability, stating that "The characters are escaped properly...
MyBace Light (hauptverzeichniss) Remote File Inclusion
+-------------------------------------------------------------------- + + MyBace Light hauptverzeichniss Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/384/MyBaceLighthauptverzeichnissRemoteFileInclusion.htm...
Connect Daily Web Calendar Software Multiple XSS vuln.
Connect Daily Web Calendar Software Multiple XSS vuln. Vuln. discovered by : r0t Date: 27 march 2006 vendor:http://www.mhsoftware.com/connectdaily.htm affected versions:3.2.9 and prior orginal advisory:http://pridels.blogspot.com/2006/03/connect-daily-multiple-xss-vuln.html Vuln. description:...
cSupport "pg" SQL inj.
cSupport "pg" SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/csupport-pg-sql-inj.html Vendor:www.forperfect.com Product link:http://www.forperfect.com/csupport/ affected vesion:1.0 and prior Vuln. Description: Input passed to the "pg"...
CVE-2005-2336
Cross-site scripting XSS vulnerability in Hiki 0.8.0 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via "missing pages" in which the page name is not properly escaped, a different vulnerability than CVE-2005-2803...
CVE-2005-2336
Cross-site scripting XSS vulnerability in Hiki 0.8.0 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via "missing pages" in which the page name is not properly escaped, a different vulnerability than CVE-2005-2803...