Album Photo Sans Nom 1.6 - Getimg.php Remote File Inclusion

Album Photo Sans Nom 1.6 - Getimg.php Remote File Inclusion source: https://www.securityfocus.com/bid/20441/info Album Photo Sans Nom is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to...

BlueShoes Framework 4.6 - 'GoogleSearch.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20450/info BlueShoes Framework is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks...

PHP Event Calendar 1.41.5 - index.php Multiple Cross-Site Scripting Vulnerabilities

PHP Event Calendar 1.41.5 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/20001/info PHP Event Calendar is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issu...

HLstats 1.34 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/19771/info HLstats is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may help an attacker steal cookie-based authentication credentials and launch...

eyeOS 0.8.x - Session Remote Command Execution

source: https://www.securityfocus.com/bid/16537/info The eyeOS system is prone to a remote command-execution vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied data. An attacker can exploit this issue to execute arbitrary commands in the context of...