201 matches found
CVE-2006-3195
Cross-site scripting XSS vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the template parameter...
CVE-2006-3194
Directory traversal vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot sequence and trailing null %00 byte in the 1 gallery and 2 template parameter...
CVE-2006-3196
index.php in singapore 0.10.0 and earlier allows remote attackers to obtain the installation path via an invalid template parameter, which reveals the path in an error message...
CVE-2006-3050
Directory traversal vulnerability in detail.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to read arbitrary files via a .. dot dot sequence and trailing null %00 byte in the template parameter...
CVE-2006-3050
Directory traversal vulnerability in detail.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to read arbitrary files via a .. dot dot sequence and trailing null %00 byte in the template parameter...
Loudblog < 0.42 template Parameter Traversal
The remote host is running Loudblog, a PHP application for publishing podcasts and similar media files. The version of Loudblog installed on the remote host fails to sanitize input to the 'template' parameter of the 'index.php' script before returning the contents of the file in a dynamic web pag...
[SA19026] 4images "template" Parameter File Inclusion Vulnerability
TITLE: 4images "template" Parameter File Inclusion Vulnerability SECUNIA ADVISORY ID: SA19026 VERIFY ADVISORY: http://secunia.com/advisories/19026/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: 4images 1.x http://secunia.com/product/8373/...
Directory traversal
Directory traversal vulnerability in index.php in 4Images 1.7.1 and earlier allows remote attackers to read and include arbitrary files via ".." dot dot sequences in the template parameter...
CVE-2006-0899
Directory traversal vulnerability in index.php in 4Images 1.7.1 and earlier allows remote attackers to read and include arbitrary files via ".." dot dot sequences in the template parameter...
Directory traversal
Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows remote attackers to 1 read arbitrary files or trigger an error message path disclosure via ".." or invalid names in the archive parameter to index.php, or 2 include arbitrary files via the template parameter to...
CVE-2005-1198
Directory traversal vulnerability in apexec.pl for Anaconda Foundation Directory allows remote attackers to read arbitrary files via hex-encoded null characters %00 in the middle of ".." sequences in the template parameter...
PT-2005-2161 · Calendarscript · Calendarscript
Name of the Vulnerable Software and Affected Versions: CalendarScript version 3.20 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the template parameter in the calendar.pl file. This issue is disputed by the vendor...
QuikStore Shopping Cart quikstore.cgi template Parameter Traversal Arbitrary File Access
The CGI 'quickstore.cgi' is installed. This CGI has a well known security flaw that lets an attacker read arbitrary files with the privileges of the HTTP daemon. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Date: Tue, 23 Dec 2003 20:27:51 +0800 From: DrPonidi Haryanto Subject:...
CVE-2003-1425
guestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the template parameter...
CVE-2001-0997
Textor Webmasters Ltd listrec.pl CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the TEMPLATE parameter...
sendtemp.pl Read Access to Files
Exploit for cgi platform in category web applications ================================ sendtemp.pl Read Access to Files ================================ !/usr/bin/perl -w sendtemp.pl: A part of the Amaya Web development server contains a file disclosure vulnerability, which allows remote, read...
sendtemp.pl - Read Access to Files
!/usr/bin/perl -w sendtemp.pl: A part of the Amaya Web development server contains a file disclosure vulnerability, which allows remote, read access to files on the servers file system, as whichever user the httpd is running as. The Vulnerability is really quite simple.. When the templ argument i...
CVE-1999-0467
The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter...
CVE-1999-0467
The CVE-1999-0467 issue affects the Webcom CGI Guestbook programs wguest.exe and rguest.exe, where the template parameter can be used by a remote attacker to read arbitrary files. Public sources (NVD, Red Hat, CVE List) consistently describe an unauthenticated, remote file-read vulnerability affe...
WebCom datakommunikation Guestbook 0.1 - 'rguest.exe' Arbitrary File Access
source: https://www.securityfocus.com/bid/2024/info The freeware guestbook package from freeware.webcom.se provides a web-based guestbook feature, using CGI. Some versions of this guestbook undetermined at the time of writing are vulnerable to an attack allowing an intruder to retrieve the conten...