dotWidget for articles 2.0 - '/admin/index.php' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/18479/info dotWidget for Articles is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote fil...

Ovidentia 5.6.x5.8 - search.php?babInstallPath Remote File Inclusion

Ovidentia 5.6.x5.8 - search.php?babInstallPath Remote File Inclusion source: https://www.securityfocus.com/bid/18232/info Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues...

Ovidentia 5.6.x5.8 - vacadm.php?babInstallPath Remote File Inclusion

Ovidentia 5.6.x5.8 - vacadm.php?babInstallPath Remote File Inclusion source: https://www.securityfocus.com/bid/18232/info Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues...

phpBB 2.0.x - template.php Remote File Inclusion

phpBB 2.0.x - template.php Remote File Inclusion source: https://www.securityfocus.com/bid/18255/info The phpBB application is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this iss...

PHP ManualMaker 1.0 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/18244/info PHP ManualMaker is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to execute arbitrary HTML and script code...

Ovidentia 5.6.x/5.8 - 'vacadm.php?babInstallPath' Remote File Inclusion

source: https://www.securityfocus.com/bid/18232/info Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and...

Ovidentia 5.6.x/5.8 - 'vacadmb.php?babInstallPath' Remote File Inclusion

source: https://www.securityfocus.com/bid/18232/info Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and...

MyBloggie 2.1.x - 'MyBloggie_Root_Path' Remote File Inclusion

source: https://www.securityfocus.com/bid/19449/info MyBloggie is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in...

vBulletin 3.0.10 - Portal.php SQL Injection

vBulletin 3.0.10 - Portal.php SQL Injection source: https://www.securityfocus.com/bid/18197/info vBulletin is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...

PHPMyDesktop/Arcade 1.0 - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/18185/info phpMyDesktop|arcade is prone to a local file-include vulnerability. This may allow unauthorized users to view files and to execute local scripts. An attacker may also be able to execute arbitrary code by way of uploaded images...

Alt-N MDaemon 2-8 - IMAP Remote Buffer Overflow

Alt-N MDaemon 2-8 - IMAP Remote Buffer Overflow source: https://www.securityfocus.com/bid/18129/info Alt-N MDaemon IMAP Server is susceptible to a remote buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied input before copying it to...

Mini-NUKE 2.3 - Your_Account.asp Multiple SQL Injections

Mini-NUKE 2.3 - YourAccount.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/18126/info Mini-NUKE is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...

Alt-N MDaemon 2-8 - IMAP Remote Buffer Overflow

source: https://www.securityfocus.com/bid/18129/info Alt-N MDaemon IMAP Server is susceptible to a remote buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. This iss...

Chipmunk Directory - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18119/info Chipmunk Directory is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the...

Cosmoshop 8.10.788.11.106 - Lshop.cgi SQL Injection

Cosmoshop 8.10.788.11.106 - Lshop.cgi SQL Injection source: https://www.securityfocus.com/bid/18024/info Cosmoshop is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful...

Cosmoshop 8.10.78/8.11.106 - 'Lshop.cgi' SQL Injection

source: https://www.securityfocus.com/bid/18024/info Cosmoshop is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

BoastMachine 3.1 - 'admin.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/18012/info BoastMachine is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the...

PHPODP 1.5 - ODP.php Cross-Site Scripting

PHPODP 1.5 - ODP.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17976/info phpODP is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

EImagePro - 'subList.asp?CatID' SQL Injection

source: https://www.securityfocus.com/bid/17911/info EImagePro is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploits could allow an attacker to compromis...

Creative Software UK Community Portal 1.1 - 'DiscView.php?forum_id' SQL Injection

source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...