Telekorn Signkorn Guestbook 1.x - 'entry.php?dir_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may allow the attacker to compromise the application and the underlying system; other attack...

IDevSpot iSupport 1.8 - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19964/info IDevSupport iSupport is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and the underlying system; other...

Telekorn Signkorn Guestbook 1.x - 'smile.php?dir_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/19977/info Telekorn Signkorn Guestbook is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. This may allow the attacker to compromise the application and the underlying system; other attack...

Ractive Popper 1.41 - Childwindow.Inc.php Remote File Inclusion

Ractive Popper 1.41 - Childwindow.Inc.php Remote File Inclusion source: https://www.securityfocus.com/bid/19972/info Ractive Popper is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to...

IDevSpot iSupport 1.8 - index.php Remote File Inclusion

IDevSpot iSupport 1.8 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/19964/info IDevSupport iSupport is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromi...

IDevSpot iSupport 1.8 - 'open_tickets.php?ticket_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19963/info IDevSpot iSupport is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to...

XHP CMS 0.5.1 - index.php Cross-Site Scripting

XHP CMS 0.5.1 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19948/info XHP CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal cookie-based...

TextAds - 'error.php?error' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19932/info TextAds is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspectin...

Vikingboard 0.1b - 'help.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19916/info Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch oth...

TWiki 4.0.x - Viewfile Directory Traversal

TWiki 4.0.x - Viewfile Directory Traversal source: https://www.securityfocus.com/bid/19907/info Twiki is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerab...

AckerTodo 4.0 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19894/info AckerTodo is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue would allow an attacker to steal cookie-based credentials and to launch other attacks. Version 4.0 is...

TWiki 4.0.x - 'Viewfile' Directory Traversal

source: https://www.securityfocus.com/bid/19907/info Twiki is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected...

SoftBB 0.1 - Page Cross-Site Scripting

SoftBB 0.1 - Page Cross-Site Scripting source: https://www.securityfocus.com/bid/19847/info SoftBB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in...

PHP-Nuke MyHeadlines 4.3.1 Module - Cross-Site Scripting

source: https://www.securityfocus.com/bid/19825/info PHP-Nuke MyHeadlines module is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

In-portal In-Link 2.3.4 - 'ADODB_DIR.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19824/info In-portal In-link is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in...

In-portal In-Link 2.3.4 - ADODB_DIR.php Remote File Inclusion

In-portal In-Link 2.3.4 - ADODBDIR.php Remote File Inclusion source: https://www.securityfocus.com/bid/19824/info In-portal In-link is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary...

ToendaCMS 0.x/1.0.x - Remote File Inclusion

source: https://www.securityfocus.com/bid/19806/info ToendaCMS is prone a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the conte...

VBZoom 1.11 - 'profile.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19803/info VBZooM is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context o...

[ECHO_ADV_46$2006] ExBB v1.9.1 (exbb[home_path]) Multiple Remote File Inclusion

ECHO.OR.ID ------------------------------------------------------------------------------ ECHOADV46$2006 ExBB v1.9.1 exbbhomepath Multiple Remote File Inclusion ------------------------------------------------------------------------------ Author : Ahmad Maulana a.k.a Matdhule Date Found : August...

EZContents 2.0.3 - calendar.php?GLOBALS[language_home] Remote File Inclusion

EZContents 2.0.3 - calendar.php?GLOBALSlanguagehome Remote File Inclusion source: https://www.securityfocus.com/bid/19776/info ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these...