Web News 1.1 - news.php?config[root_ordner] Remote File Inclusion

Web News 1.1 - news.php?configrootordner Remote File Inclusion source: https://www.securityfocus.com/bid/25257/info WebNews is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to...

Web News 1.1 - 'news.php?config[root_ordner]' Remote File Inclusion

source: https://www.securityfocus.com/bid/25257/info WebNews is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

Shoutbox 1.0 - Shoutbox.php Remote File Inclusion

Shoutbox 1.0 - Shoutbox.php Remote File Inclusion source: https://www.securityfocus.com/bid/25254/info Shoutbox is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application a...

Shoutbox 1.0 - 'Shoutbox.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/25254/info Shoutbox is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

VietPHP - '_functions.php?dirpath' Remote File Inclusion

source: https://www.securityfocus.com/bid/25226/info VietPHP is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

VietPHP - 'index.php?language' Remote File Inclusion

source: https://www.securityfocus.com/bid/25226/info VietPHP is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

snif 1.5.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/25212/info The 'snif' program is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting use...

Aceboard forum, SQL injection

Aceboard is prone to a sql injection vulnerability because it fails to properly sanitize user-supplied input into Recherche.php form. An attacker can exploit this issue to modify initial query and reveal information from mysql databse. see u, karmaguedon...

J! Reactions 1.8.1 - comPath Remote File Inclusion

source: https://www.securityfocus.com/bid/25198/info J! Reactions is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are...

J! Reactions 1.8.1 - comPath Remote File Inclusion

J! Reactions 1.8.1 - comPath Remote File Inclusion source: https://www.securityfocus.com/bid/25198/info J! Reactions is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the...

WebDirector - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25166/info WebDirector is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the...

Novell Groupwise 6.5 Webaccess - User.Id Cross-Site Scripting

Novell Groupwise 6.5 Webaccess - User.Id Cross-Site Scripting source: https://www.securityfocus.com/bid/25126/info Novell GroupWise WebAccess is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an...

IT!CMS 0.2 - titletext-ed.php?wndtitle Cross-Site Scripting

IT!CMS 0.2 - titletext-ed.php?wndtitle Cross-Site Scripting source: https://www.securityfocus.com/bid/25129/info IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker...

Global Centre Aplomb Poll 1.1 - 'admin.php?Madoa' Remote File Inclusion

source: https://www.securityfocus.com/bid/25138/info Aplomb Poll is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code...

IT!CMS 0.2 - 'lang-en.php?wndtitle' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25129/info IT!CMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script code ...

Global Centre Aplomb Poll 1.1 - index.php?Madoa Remote File Inclusion

Global Centre Aplomb Poll 1.1 - index.php?Madoa Remote File Inclusion source: https://www.securityfocus.com/bid/25138/info Aplomb Poll is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these...

PHPHostBot 1.05 - Authorize.php Remote File Inclusion

PHPHostBot 1.05 - Authorize.php Remote File Inclusion source: https://www.securityfocus.com/bid/25073/info PhpHostBot is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the...

WordPress Plugin WP-FeedStats 2.1 - HTML Injection

WordPress Plugin WP-FeedStats 2.1 - HTML Injection source: https://www.securityfocus.com/bid/25085/info The WP-FeedStats plugin for WordPress is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker...

Nukedit 4.9.x - 'login.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25081/info Nukedit is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

WordPress Plugin WP-FeedStats 2.1 - HTML Injection

source: https://www.securityfocus.com/bid/25085/info The WP-FeedStats plugin for WordPress is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to execute HTML and script code in the context of...