CodeGrrl Applications Remote File Inclusion Vulnerabilities

The remote host appears to be running at least one of the PHP applications from CodeGrrl - PHPCalendar, PHPClique, PHPFanBase, or PHPQuotes. Under certain conditions, these applications fail to sanitize input to the 'siteurl' parameter of the 'protection.php' script before using it in a PHP...

Pearl Forums 2.0 - index.php Local File Inclusion

Pearl Forums 2.0 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/15433/info Pearl Forums is prone to a local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to...

PHPWCMS 1.2.5 -DEV - Multiple Cross-Site Scripting Vulnerabilities

PHPWCMS 1.2.5 -DEV - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15440/info phpwcms is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...

midicartSQL.txt

Midicart sql injection ================== product descriptionfrom site:- ================== MidiCart is a Try-Before-You-Buy Shopping Cart Software, that provides all you need to create, operate, and maintain a professional Internet shop. MidiCart ASP and PHP Shopping Cart is extremely easy to us...

Alstrasoft Template Seller Pro 3.25 - Remote File Inclusion

source: https://www.securityfocus.com/bid/15441/info Template Seller Pro is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary remote PHP code on an...

Help Center Live 1.01.22.0 - module.php Local File Inclusion

Help Center Live 1.01.22.0 - module.php Local File Inclusion source: https://www.securityfocus.com/bid/15404/info Help Center Live is prone to a local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...

Oracle DBMS_ASSERT and the October 2005 CPU

Whilst there are problems with the Oracle October 2005 Critical Patch Update, it's not all bad news.... There is a great deal of evidence in this patch that Oracle are beginning to treat security properly. They've introduced a new package PL/SQL package DBMSASSERT into the RDBMS. Whilst DBMSASSER...

Invision Power Board (IP.Board) 2.1 - admin.php Multiple Cross-Site Scripting Vulnerabilities

Invision Power Board IP.Board 2.1 - admin.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15344/info Invision Power Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitiz...

XMB Forum 1.9.3 - 'u2u.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15342/info XMB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

OSTE 1.0 - Remote File Inclusion

source: https://www.securityfocus.com/bid/15340/info OSTE is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary remote PHP code on an affected computer wi...

GoSmart Multiple Vulnerabilities

GoSmart is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHP 4.x - PHPInfo Cross-Site Scripting

PHP 4.x - PHPInfo Cross-Site Scripting source: https://www.securityfocus.com/bid/15248/info PHP is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary scrip...

PHP 4.x - PHPInfo Cross-Site Scripting

source: https://www.securityfocus.com/bid/15248/info PHP is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

phpFaber CMS 1.3.36 - Htmlarea.php Cross-Site Scripting

phpFaber CMS 1.3.36 - Htmlarea.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20821/info phpFaber CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

PBLang 4.65 - Multiple Cross-Site Scripting Vulnerabilities

PBLang 4.65 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15223/info PBLang is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverag...

FlatNuke 2.5.x - index.php Cross-Site Scripting

FlatNuke 2.5.x - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15176/info FlatNuke is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

Mantis Bug Tracker 0.19.21.0 - Bug_sponsorship_list_view_inc.php File Inclusion

Mantis Bug Tracker 0.19.21.0 - Bugsponsorshiplistviewinc.php File Inclusion source: https://www.securityfocus.com/bid/15212/info Mantis is prone to a remote and local file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacke...

phpMyAdmin < 2.6.4-pl3 Multiple Vulnerabilities

The version of phpMyAdmin installed on the remote host is affected by a local file inclusion vulnerability that can be exploited by an unauthenticated attacker to read arbitrary files, and possibly even to execute arbitrary PHP code on the affected host subject to the permissions of the web serve...

saPHP Lesson - 'add.php?forumid' SQL Injection

source: https://www.securityfocus.com/bid/15185/info saphp Lesson is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise ...

MySource 2.14 - mail.php?PEAR_PATH Remote File Inclusion

MySource 2.14 - mail.php?PEARPATH Remote File Inclusion source: https://www.securityfocus.com/bid/15133/info MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...