181 matches found
Sql injection
SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the theme parameter...
PT-2013-4462
Name of the Vulnerable Software and Affected Versions Web Dorado Spider Video Player plugin version 2.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the theme parameter in the settings.php file. Recommendations For version 2.1, update the...
Directory traversal
Directory traversal vulnerability in admin/preview.php in Limny 3.0.0 allows remote attackers to read arbitrary files via a ..%2F encoded dot dot slash in the theme parameter...
PT-2012-2187
Name of the Vulnerable Software and Affected Versions Limny version 3.0.0 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by providing a ..%2F encoded dot dot slash in the theme parameter of the admin/preview.php file...
CVE-2011-5210: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in admin/preview.php in Limny 3.0.0 allows remote attackers to read arbitrary files via a ..%2F encoded dot dot slash in the theme parameter...
PT-2011-1874
Name of the Vulnerable Software and Affected Versions MailForm version 1.2 Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter in the index.php file. Recommendations For MailForm version 1.2, consider restricting access to the index.php fil...
CVE-2010-4939: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in index.php in MailForm 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter...
MailForm 1.2 Remote File Inclusion
Exploit Title: MailForm Remote File Include Date: 14-8-2010 Author: LoSt.HaCkEr / aDaMTRoJaN Software Link: http://scripts.bdr130.net/files/any/MailForm.zip Version: v 1.2 Tested on: Windows XP CVE : هكر المسيب Contact: LoSt.HaCkEratyahoodotcom /0r/ [email protected]...
MailForm 1.2 Remote File Include Vulnerability
Exploit for php platform in category web applications ============================================== MailForm 1.2 Remote File Include Vulnerability ============================================== Exploit Title: MailForm Remote File Include Date: 14-8-2010 Author: LoSt.HaCkEr / aDaMTRoJaN Software...
DEBIAN-CVE-2010-2275
Cross-site scripting XSS vulnerability in dijit/tests/testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the theme parameter, as demonstrated by an attack against dijit/tests/form/testButton.html...
CVE-2010-2275
Cross-site scripting XSS vulnerability in dijit/tests/testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the theme parameter, as demonstrated by an attack against dijit/tests/form/testButton.html...
CVE-2010-2275: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in dijit/tests/testCommon.js in Dojo Toolkit SDK before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the theme parameter, as demonstrated by an attack against dijit/tests/form/testButton.html...
GR Board v1.8.6.1 stab (page.php?theme) Remote File Inclusion
Exploit for php platform in category web applications =========================================================================== GR Board v1.8.6.1 stab page.php?theme Remote File Inclusion Vulnerability ===========================================================================...
Tribisur Multiple Vulnerabilities
Tribisur is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-0958: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in modules/hayoo/index.php in Tribisur 2.1, 2.0, and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary files via directory traversal sequences in the theme parameter. NOTE: some of these details are obtained from...
CVE-2008-6295
Multiple cross-site scripting XSS vulnerabilities in Camera Life 2.6.2b8 allow remote attackers to inject arbitrary web script or HTML via the q parameter to 1 search.php and 2 rss.php; the query string after the image name in 3 photos/photo; the path parameter to 4 folder.php; page parameter and...
CVE-2008-6265: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in portfolio/css.php in Cyberfolio 7.12.2 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter...
CVE-2009-0595: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter...
CVE-2009-0444: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in GRBoard 1.8, when registerglobals is enabled and magicquotesgpc is disabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 theme parameter to a 179squareboxpdslist/view.php, b 179squareboxminishopexpand/view.php, c...