Drake CMS 0.3.7 - 404.php Local File Inclusion

Drake CMS 0.3.7 - 404.php Local File Inclusion source: https://www.securityfocus.com/bid/23215/info Drake CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute...

Weekly Drawing Contest 0.0.1 - Check_Vote.php Local File Inclusion

Weekly Drawing Contest 0.0.1 - CheckVote.php Local File Inclusion source: https://www.securityfocus.com/bid/22937/info Weekly Drawing Contest is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized...

SQLiteManager 1.2 - Local File Inclusion

SQLiteManager 1.2 - Local File Inclusion source: https://www.securityfocus.com/bid/22727/info SQLiteManager is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute loca...

Active Calendar 1.2 - showcode.php Local File Inclusion

Active Calendar 1.2 - showcode.php Local File Inclusion source: https://www.securityfocus.com/bid/22704/info Active Calendar is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files...

Active Calendar 1.2 - 'showcode.php' Local File Inclusion

source: https://www.securityfocus.com/bid/22704/info Active Calendar is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. Version 1.2.0 is vulnerable;...

Pickle 0.3 - 'download.php' Local File Inclusion

source: https://www.securityfocus.com/bid/22703/info picKLE is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. Version 0.3 is vulnerable to this...

XT:Commerce 3.04 - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/22698/info xt:Commerce is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. xt:Commerce 3.04 and prior...

XT:Commerce 3.04 - index.php Local File Inclusion

XT:Commerce 3.04 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/22698/info xt:Commerce is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execu...

eXtreme-fusion 4.02 - Fusion_Forum_View.php Local File Inclusion

eXtreme-fusion 4.02 - FusionForumView.php Local File Inclusion source: https://www.securityfocus.com/bid/21621/info eXtreme-fusion is prone to a local file-include vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized...

HP-UX PHSS_35143 : s700_800 11.23 OV DP5.50 IA-64 patch - CORE packet

s700800 11.23 OV DP5.50 IA-64 patch - CORE packet : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP OpenView Storage Data Protector running on HP-UX, IBM AIX, Linux, Microsoft Windows, and Solaris. This vulnerability...

HP-UX PHSS_35142 : s700_800 11.X OV DP5.50 PA-RISC patch - CORE packet

s700800 11.X OV DP5.50 PA-RISC patch - CORE packet : The remote HP-UX host is affected by multiple vulnerabilities : - A potential security vulnerability has been identified with HP OpenView Storage Data Protector running on HP-UX, IBM AIX, Linux, Microsoft Windows, and Solaris. This vulnerabilit...

CVE-2006-5414

Barry Nauta BRIM before 1.2.1 allows remote authenticated users to read information from other users via a modified URL...

Blursoft Blur6ex 0.3.462 - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/17554/info Blur6ex is prone to a local file-include vulnerability that may allow an unauthorized user to view files and to execute local scripts. http://www.example.com/blur6ex-0.3.462/index.php?shard=/../../../../../local-file%00...

Blursoft Blur6ex 0.3.462 - index.php Local File Inclusion

Blursoft Blur6ex 0.3.462 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/17554/info Blur6ex is prone to a local file-include vulnerability that may allow an unauthorized user to view files and to execute local scripts...

MyBB 1.0.2/1.0.3 - 'Managegroup.php' SQL Injection

source: https://www.securityfocus.com/bid/16689/info MyBB is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise the...

HP-UX PHSS_33659 : HP OpenView Event Correlation Services (OV ECS), Remote Unauthorized Privileged Access (HPSBMA01225 SSRT051030 rev.2)

s700800 11.X OV ECS3.31 Patch for Aug-05 : A potential vulnerability has been identified with HP OpenView Event Correlation Services OV ECS. This vulnerability could be exploited remotely by an unauthorized user to gain privileged access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

FlatNuke 2.5.6 - 'ID' Directory Traversal

source: https://www.securityfocus.com/bid/14702/info FlatNuke is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An unauthorized user can retrieve arbitrary files by supplying directory traversal strings '.....

EMC Navisphere Manager 6.x - Directory Traversal / Information Disclosure

source: https://www.securityfocus.com/bid/14487/info EMC Navisphere Manager is affected by directory traversal and information disclosure vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A remote unauthorized user can disclose the...

EMC Navisphere Manager 6.x - Directory Traversal Information Disclosure

EMC Navisphere Manager 6.x - Directory Traversal Information Disclosure source: https://www.securityfocus.com/bid/14487/info EMC Navisphere Manager is affected by directory traversal and information disclosure vulnerabilities. These issues are due to a failure in the application to properly...

Comdev eCommerce 3.0 - 'WCE.download.php' Directory Traversal

source: https://www.securityfocus.com/bid/14479/info Comdev eCommerce is prone to a directory traversal vulnerability. A remote unauthorized user can disclose the contents of arbitrary local files through the use of directory traversal strings '../' relative to the Web application's root path...