TikiWiki Project 1.8 - categorize.php Direct Request Full Path Disclosure

TikiWiki Project 1.8 - categorize.php Direct Request Full Path Disclosure source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such a...

TikiWiki Project 1.8 - 'tiki-index.php?comments_offset & offset' SQL Injections

source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection,...

TikiWiki Project 1.8 - tiki-browse_categories.php?parentId Cross-Site Scripting

TikiWiki Project 1.8 - tiki-browsecategories.php?parentId Cross-Site Scripting source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks...

TikiWiki Project 1.8 - tiki-switch_theme.php?theme Cross-Site Scripting

TikiWiki Project 1.8 - tiki-switchtheme.php?theme Cross-Site Scripting source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as...

TikiWiki Project 1.8 - tiki-index.php?comments_threshold Cross-Site Scripting

TikiWiki Project 1.8 - tiki-index.php?commentsthreshold Cross-Site Scripting source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks suc...

TikiWiki Project 1.8 - 'categorize.php' Direct Request Full Path Disclosure

source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection,...

TikiWiki Project 1.8 - 'tiki-view_faq.php?faqId' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection,...

TikiWiki Project 1.8 - 'tiki-browse_categories.php?parentId' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection,...

TikiWiki Project 1.8 - tiki-user_tasks.php?offset sort_mode SQL Injections

TikiWiki Project 1.8 - tiki-usertasks.php?offset sortmode SQL Injections source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as...

TikiWiki Project 1.8 - imgwiki_up Arbitrary File Upload

TikiWiki Project 1.8 - imgwikiup Arbitrary File Upload source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure,...

TikiWiki Project 1.8 - User Profile Multiple Option Remote Code Injections

TikiWiki Project 1.8 - User Profile Multiple Option Remote Code Injections source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such ...

Nuked-klaN 1.x - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/10104/info Nuked-Klan is prone to multiple vulnerabilities. These issues include information disclosure via inclusion of local files, an issue that may permit remote attackers to corrupt configuration files and an SQL injection vulnerability. - To include...

TikiWiki Project 1.8 - 'tiki-read_article.php?articleId' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection,...

TikiWiki Project 1.8 - 'tiki-usermenu.php?offset' SQL Injection

source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection,...

TikiWiki Project 1.8 - 'tiki-list_file_gallery.php?sort_mode' SQL Injection

source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection,...

TikiWiki Project 1.8 - 'tiki-print_article.php?articleId' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection,...

TikiWiki Project 1.8 - 'tiki-switch_theme.php?theme' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting, HTML injection, SQL injection,...

lcdproc lcdd 0.x4.x - Multiple Vulnerabilities

lcdproc lcdd 0.x4.x - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/10085/info LCDproc Server LCDd has been reported to be prone to multiple remote vulnerabilities. The first issue is reported to exist in the parseallclientmessages function of parse.c, and is due to a lack of...

CVE-2004-0334

InnoMedia VideoPhone allows remote attackers to bypass Basic Authorization via an HTTP request to 1 videophoneadmindetail.asp, 2 videophonesyscfg.asp, 3 videophoneupgrade.asp, or 4 videophonesysctrl.asp that contains a trailing / slash. NOTE: the original report mentioned AXIS 2100 Network Camera...

CVE-2004-1990

Aldo's Web Server aweb 1.5 allows remote attackers to gain sensitive information via an arbitrary character, which reveals the full path and the user running the aweb process, possibly due to a malformed request...