ARSC Really Simple Chat 3.3 - Remote File Inclusion Cross-Site Scripting

ARSC Really Simple Chat 3.3 - Remote File Inclusion Cross-Site Scripting = ARSC Really Simple Chat V3.3 Remote File Inclsion & Cross Site Scripting Vulnerability = Author : Zer0 Thunder = Home : http://colombohackers.com = Download : http://sourceforge.net/projects/arsc/ = Date : 06/25/2010 Remot...

CVE-2009-2792: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in plugings/pagecontent.php in Really Simple CMS RSCMS 0.3a allows remote attackers to include and execute arbitrary local files via a .. dot dot in the PT parameter...

Lunascape RSS reader arbitrary script execution vulnerability

Overview A vulnerability exists in the web browser Lunascape's RSS reader. An arbitrary script embedded in RSS feeds could be executed as the output of RSS information is not properly handled. Impact Arbitrary JavaScript could be executed within Lunascape's RSS reader. Solution None...

CVE-2007-5953

Unspecified vulnerability in Really Simple CalDAV Store RSCDS before 0.9.0 allows attackers to obtain sensitive information via unspecified vectors...

CVE-2007-5953: Undefined Security Weakness

Unspecified vulnerability in Really Simple CalDAV Store RSCDS before 0.9.0 allows attackers to obtain sensitive information via unspecified vectors...

CVE-2007-1982

Multiple PHP remote file inclusion vulnerabilities in Really Simple PHP and Ajax RSPA 2007-03-23 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 IncludeFilePHPClass, 2 ClassPath, and 3 class parameters to a rspa/framework/Controllerv5.php, and b...

CVE-2007-1982

Multiple PHP remote file inclusion vulnerabilities in Really Simple PHP and Ajax RSPA 2007-03-23 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 IncludeFilePHPClass, 2 ClassPath, and 3 class parameters to a rspa/framework/Controllerv5.php, and b...

CVE-2007-1982: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Really Simple PHP and Ajax RSPA 2007-03-23 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 IncludeFilePHPClass, 2 ClassPath, and 3 class parameters to a rspa/framework/Controllerv5.php, and b...

CVE-2007-1851: Undefined Security Weakness

Multiple directory traversal vulnerabilities in Really Simple PHP and Ajax RSPA 2007-03-23 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the class parameter to 1 Controllerv4.php or 2 Controllerv5.php...

CVE-2002-0463: Undefined Security Weakness

home.php in ARSC Really Simple Chat 1.0.1 and earlier allows remote attackers to determine the full pathname of the web server via an invalid language in the arsclanguage parameter, which leaks the pathname in an error message...

[ARL02-A07] ARSC Really Simple Chat System Information Path Disclosure Vulnerability

+/--------------- ALPER Research Labs -----/--------/+ +/--------------- Security Advisory ----/---------/+ +/--------------- ID: ARL02-A07 ---/----------/+ +/--------------- [email protected] --/-----------/+ Advisory Information -------------------- Name : ARSC Really Simple Chat System...