579 matches found
phpCMS 1.1.7 - parser.php Remote File Inclusion
phpCMS 1.1.7 - parser.php Remote File Inclusion source: https://www.securityfocus.com/bid/21768/info phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...
phpCMS 1.1.7 - class.search_PHPcms.php Remote File Inclusion
phpCMS 1.1.7 - class.searchPHPcms.php Remote File Inclusion source: https://www.securityfocus.com/bid/21768/info phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromis...
phpCMS 1.1.7 - class.cache_PHPcms.php Remote File Inclusion
phpCMS 1.1.7 - class.cachePHPcms.php Remote File Inclusion source: https://www.securityfocus.com/bid/21768/info phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise...
phpCMS 1.1.7 - 'parser.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/21768/info phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks a...
UApplication Uguestbook 1.0 - 'index.asp' SQL Injection
source: https://www.securityfocus.com/bid/21426/info Uapplication Uguestbook is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access...
DMXReady Site Engine Manager 1.0 - 'index.asp' SQL Injection
source: https://www.securityfocus.com/bid/21064/info DMXReady Site Engine Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...
FunkyASP Glossary 1.0 - 'Glossary.asp' SQL Injection
source: https://www.securityfocus.com/bid/21055/info FunkyASP Glossary is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...
Inventory Manager - Multiple Input Validation Vulnerabilities
Inventory Manager - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/21069/info Inventory Manager is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize...
ASPIntranet 2.1 - 'default.asp' SQL Injection
source: https://www.securityfocus.com/bid/21061/info ASPIntranet is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...
NewP News Publishing System 1.0 - 'Class.Database.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/20893/info NewP News Publishing system is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other...
RSSonate - Project_Root Remote File Inclusion
RSSonate - ProjectRoot Remote File Inclusion source: https://www.securityfocus.com/bid/20849/info RSSonate is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and th...
The Search Engine Project 0.942 - Configfunction.php Remote File Inclusion
The Search Engine Project 0.942 - Configfunction.php Remote File Inclusion source: https://www.securityfocus.com/bid/20831/info The Search Engine Project is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow a...
Evandor Easy notesManager 0.0.1 - 'login.php?Username' SQL Injection
source: https://www.securityfocus.com/bid/20803/info Easy notesManager is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application, access or...
PHPMyConferences 8.0.2 - Init.php Remote File Inclusion
PHPMyConferences 8.0.2 - Init.php Remote File Inclusion source: https://www.securityfocus.com/bid/20741/info phpMyConference is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise th...
ClanLite - conf-php.php Remote File Inclusion
ClanLite - conf-php.php Remote File Inclusion source: https://www.securityfocus.com/bid/20672/info ClanLite is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and t...
Bloq 0.5.4 - rdf.php?page[path] Remote File Inclusion
Bloq 0.5.4 - rdf.php?pagepath Remote File Inclusion source: https://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the...
Bloq 0.5.4 - '/files/mainfile.php?page[path]' Remote File Inclusion
source: https://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the application and the underlying system; other attacks a...
HAMweather 3.9.8 - template.php Script Code Injection
HAMweather 3.9.8 - template.php Script Code Injection source: https://www.securityfocus.com/bid/20311/info HAMweather is prone to a script-code-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the...
PHP Web Scripts Easy Banner - 'functions.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/20295/info Easy Banner is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are als...
Geotarget - script.php Remote File Inclusion
Geotarget - script.php Remote File Inclusion source: https://www.securityfocus.com/bid/20272/info Geotarget is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and t...