myEvent 1.21.3 - myevent.php Remote File Inclusion

myEvent 1.21.3 - myevent.php Remote File Inclusion source: https://www.securityfocus.com/bid/19246/info myEvent is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containin...

Moskool 1.5 Component - 'Admin.Moskool.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19245/info Moskool is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the context ...

TinyPHPForum 3.6 - Multiple Cross-Site Scripting Vulnerabilities (2)

source: https://www.securityfocus.com/bid/19260/info TinyPHPForum is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user...

Joomla! Component Liga Manager Online 2.0 - Remote File Inclusion

source: https://www.securityfocus.com/bid/19234/info Liga Manager Online Joomla! Component is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote...

Guestbook Mambo Module <== v1.3.0 Multiple Remote File Include Vulnerabilities

--------------------------------------------------------------------------- Guestbook Mambo Module == v1.3.0 Multiple Remote File Include Vulnerabilities --------------------------------------------------------------------------- Author : Matdhule Date : July 27th 2006 Location : Indonesia, Jakar...

Joomla! Plugin JD-WordPress 2.0-1.0 RC2 - wp-comments-post.php Remote File Inclusion

Joomla! Plugin JD-WordPress 2.0-1.0 RC2 - wp-comments-post.php Remote File Inclusion source: https://www.securityfocus.com/bid/19209/info JD-WordPress for Joomla is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can...

Joomla! Plugin JD-WordPress 2.0-1.0 RC2 - 'wp-feed.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19209/info JD-WordPress for Joomla is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and...

MyBulletinBoard (MyBB) 1.x - usercp.php Directory Traversal

MyBulletinBoard MyBB 1.x - usercp.php Directory Traversal source: https://www.securityfocus.com/bid/19195/info MyBulletinBoard is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrar...

MyBulletinBoard (MyBB) 1.x - 'usercp.php' Directory Traversal

source: https://www.securityfocus.com/bid/19195/info MyBulletinBoard is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the...

wwwThreads - calendar.php Cross-Site Scripting

wwwThreads - calendar.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19177/info WWWThreads is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in t...

wwwThreads - 'calendar.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19177/info WWWThreads is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the conte...

LinksCaffe 3.0 - 'links.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/19149/info LinksCaffe is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successf...

Lussumo Vanilla 1.0 - RootDirectory Remote File Inclusion

Lussumo Vanilla 1.0 - RootDirectory Remote File Inclusion source: https://www.securityfocus.com/bid/19127/info Vanilla is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file...

Prince Clan Chess Club 0.8 - 'Include.PCchess.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19138/info Prince Clan Chess Club for Mambo is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and...

Lussumo Vanilla 1.0 - RootDirectory Remote File Inclusion

source: https://www.securityfocus.com/bid/19127/info Vanilla is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the contex...

PHP Live! 3.2.1 - help.php Remote File Inclusion

PHP Live! 3.2.1 - help.php Remote File Inclusion Advisory: PHPLive 3.2 Remote Injection Vulnerability Release Date: 2006/07/23 Author: magnific Discovered: aneurysm.inc security reserach Risk: High Vendor Status: not contacted | no patch available Vendor Site: www.osicodes.com Contact:...

Advanced Poll 2.0.2 - common.inc.php Remote File Inclusion

Advanced Poll 2.0.2 - common.inc.php Remote File Inclusion source: https://www.securityfocus.com/bid/19105/info Advanced Poll is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input to the application. An attacker may leverage this issue to have a...

Advanced Poll 2.0.2 - 'common.inc.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19105/info Advanced Poll is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input to the application. An attacker may leverage this issue to have an arbitrary remote file containing malicious script code...

IDevSpot PHPLinkExchange 1.0 - index.php Remote File Inclusion

IDevSpot PHPLinkExchange 1.0 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/19083/info PHPLinkExchange is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary...

Mambo Module Calendar 1.5.7 - Com_Calendar.php Remote File Inclusion

Mambo Module Calendar 1.5.7 - ComCalendar.php Remote File Inclusion source: https://www.securityfocus.com/bid/19027/info The Calendar module for Mambo is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...