2934 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in BolinOS 4.6.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to a system/actionspages/b/contentFiles/gBImageViewer.php, 2 ForEditor parameter to b system/actionspages/b/contentFiles/gBselectorContents.php,...
CVE-2008-1556
Multiple cross-site scripting XSS vulnerabilities in BolinOS 4.6.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to a system/actionspages/b/contentFiles/gBImageViewer.php, 2 ForEditor parameter to b system/actionspages/b/contentFiles/gBselectorContents.php,...
CVE-2008-1511
Multiple PHP remote file inclusion vulnerabilities in ooComments 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the PathToComment parameter for 1 classes/classadmin.php and 2 classes/classcomments.php. NOTE: the provenance of this information is unknown; the details are...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in W-Agora 4.0 allow remote attackers to execute arbitrary PHP code via a URL in the bndirdefault parameter to 1 adduser.php, 2 createforum.php, 3 createuser.php, 4 deletenotes.php, 5 deleteuser.php, 6 editforum.php, 7 mailusers.php, 8...
CVE-2008-1466
CVE-2008-1466 affects W-Agora 4.0 and allows remote PHP code execution through remote file inclusion. The vulnerability is triggered by a URL parameter bn_dir_default passed to one of nine scripts (add_user.php, create_forum.php, create_user.php, delete_notes.php, delete_user.php, edit_forum.php,...
CVE-2008-1405
PHP remote file inclusion vulnerability in code/display.php in fuzzylime cms 3.01 allows remote attackers to execute arbitrary PHP code via a URL in the admindir parameter...
Fuzzylime CMS 3.01 - admindir Remote File Inclusion
Fuzzylime CMS 3.01 - admindir Remote File Inclusion .-----------------------------------------------------------------------------. | vuln.: fuzzylime cms = 3.01 Remote File Inclusion Vulnerability | | download: http://cms.fuzzylime.co.uk/ | | dork: "powered by fuzzylime" | | | | author:...
CVE-2008-1171
Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter to 1 123flashchat.php and 2 phpbbloginchat.php. NOTE: CVE disputes this issue because $phpbbrootpath is explicitl...
Remote file inclusion
PHP remote file inclusion vulnerability in tourney/index.php in phpMyTourney 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in main.php in Barryvan Compo Manager 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the pageURL parameter...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absoluteurl parameter to 1 components/xmlparser/loadparser.php; 2 admin.php, 3 categories.php, 4 categoriesadd.php, 5...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in phpQLAdmin 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the SESSIONpath parameter to 1 ezmlm.php and 2 tools/updatetranslations.php...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Quantum Game Library 0.7.2c allow remote attackers to execute arbitrary PHP code via a URL in the CONFIGgameroot parameter to 1 serverrequest.php and 2 qlib/smarty.inc.php...
CVE-2008-1067
Multiple PHP remote file inclusion vulnerabilities in phpQLAdmin 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the SESSIONpath parameter to 1 ezmlm.php and 2 tools/updatetranslations.php...
CVE-2008-1059
PHP remote file inclusion vulnerability in modules/syntaxhighlight.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter...
CVE-2008-1061
Multiple cross-site scripting XSS vulnerabilities in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 text parameter to a warning.php, b notice.php, and c inset.php in view/sniplets/, and possibly d modules/execute.php; the ...
Open redirect
Open redirect vulnerability in spyce/examples/redirect.spy in Spyce - Python Server Pages PSP 2.1.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...
Directory traversal
Directory traversal vulnerability in Download.php in XPWeb 3.0.1, 3.3.2, and possibly other versions, allows remote attackers to read arbitrary files via a .. dot dot in the url parameter...