PT-2017-10742

Name of the Vulnerable Software and Affected Versions Cacti version 0.8.8b Description The issue concerns Cross-Site scripting XSS vulnerabilities. Remote attackers can inject arbitrary web script or HTML via the parent id parameter to "tree.php" and drp action parameter to "data sources.php"...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cacti before 0.8.7f, as used in Red Hat High Performance Computing HPC Solution and other products, allow remote attackers to inject arbitrary web script or HTML via the 1 hostname or 2 description parameter to host.php, or 3 the hostid paramet...

CVE-2008-0458: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in function/sources.php in SLAED CMS 2.5 Lite allows remote attackers to include and execute arbitrary local files via a .. dot dot in the newlang parameter to index.php...

SLAED CMS 2.5 Lite - 'newlang' Local File Inclusion

SLAED CMS 2.5 Lite Local file inclusion Script url http://www.slaed.net/uploads/files/public/SLAEDCMS2.5Lite.zip Lets code in function/sources.php: 780: // Format language 781: function getlang$module="" 782: global $multilingual, $currentlang, $language, $usercookiet; 783: if...

SLAED CMS 2.5 Lite - newlang Local File Inclusion

SLAED CMS 2.5 Lite - newlang Local File Inclusion SLAED CMS 2.5 Lite Local file inclusion Script url http://www.slaed.net/uploads/files/public/SLAEDCMS2.5Lite.zip Lets code in function/sources.php: 780: // Format language 781: function getlang$module="" 782: global $multilingual, $currentlang,...