phpCMS 1.1.7 - parser.php Remote File Inclusion

phpCMS 1.1.7 - parser.php Remote File Inclusion source: https://www.securityfocus.com/bid/21768/info phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...

phpCMS 1.1.7 - class.search_PHPcms.php Remote File Inclusion

phpCMS 1.1.7 - class.searchPHPcms.php Remote File Inclusion source: https://www.securityfocus.com/bid/21768/info phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromis...

phpCMS 1.1.7 - class.cache_PHPcms.php Remote File Inclusion

phpCMS 1.1.7 - class.cachePHPcms.php Remote File Inclusion source: https://www.securityfocus.com/bid/21768/info phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise...

phpCMS 1.1.7 - 'parser.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/21768/info phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks a...

UApplication Uguestbook 1.0 - 'index.asp' SQL Injection

source: https://www.securityfocus.com/bid/21426/info Uapplication Uguestbook is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access...

DMXReady Site Engine Manager 1.0 - 'index.asp' SQL Injection

source: https://www.securityfocus.com/bid/21064/info DMXReady Site Engine Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

FunkyASP Glossary 1.0 - 'Glossary.asp' SQL Injection

source: https://www.securityfocus.com/bid/21055/info FunkyASP Glossary is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Inventory Manager - Multiple Input Validation Vulnerabilities

Inventory Manager - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/21069/info Inventory Manager is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize...

ASPIntranet 2.1 - 'default.asp' SQL Injection

source: https://www.securityfocus.com/bid/21061/info ASPIntranet is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

NewP News Publishing System 1.0 - 'Class.Database.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20893/info NewP News Publishing system is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other...

RSSonate - Project_Root Remote File Inclusion

RSSonate - ProjectRoot Remote File Inclusion source: https://www.securityfocus.com/bid/20849/info RSSonate is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and th...

The Search Engine Project 0.942 - Configfunction.php Remote File Inclusion

The Search Engine Project 0.942 - Configfunction.php Remote File Inclusion source: https://www.securityfocus.com/bid/20831/info The Search Engine Project is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow a...

Evandor Easy notesManager 0.0.1 - 'login.php?Username' SQL Injection

source: https://www.securityfocus.com/bid/20803/info Easy notesManager is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application, access or...

PHPMyConferences 8.0.2 - Init.php Remote File Inclusion

PHPMyConferences 8.0.2 - Init.php Remote File Inclusion source: https://www.securityfocus.com/bid/20741/info phpMyConference is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise th...

ClanLite - conf-php.php Remote File Inclusion

ClanLite - conf-php.php Remote File Inclusion source: https://www.securityfocus.com/bid/20672/info ClanLite is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and t...

Bloq 0.5.4 - rdf.php?page[path] Remote File Inclusion

Bloq 0.5.4 - rdf.php?pagepath Remote File Inclusion source: https://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the...

Bloq 0.5.4 - '/files/mainfile.php?page[path]' Remote File Inclusion

source: https://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the application and the underlying system; other attacks a...

HAMweather 3.9.8 - template.php Script Code Injection

HAMweather 3.9.8 - template.php Script Code Injection source: https://www.securityfocus.com/bid/20311/info HAMweather is prone to a script-code-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the...

PHP Web Scripts Easy Banner - 'functions.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20295/info Easy Banner is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are als...

Geotarget - script.php Remote File Inclusion

Geotarget - script.php Remote File Inclusion source: https://www.securityfocus.com/bid/20272/info Geotarget is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and t...