CVE-2010-3425

Cross-site scripting XSS vulnerability in UserControls/Popups/frmHelp.aspx in SmarterStats 5.3, 5.3.3819, and possibly other 5.3 versions, allows remote attackers to inject arbitrary web script or HTML via the url parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Haudenschilt Family Connections CMS FCMS 2.2.3 allow remote attackers to execute arbitrary PHP code via a URL in the currentuserid parameter to 1 familynews.php and 2 settings.php...

PHP Classifieds ADS - 'sid' Blind SQL Injection

Title: PHP CLASSIFIEDS ADS Price: $49 Link : http://www.sellatsite.com/sellatsite/phpclass.asp Author: BorN To K!LL - h4ck3r 3xploit: /detail.php?sid=Blind-Injection 3xample: http://www.example.com/classi/detail.php?sid=80 and 1=1-- // True ,, http://www.example.com/classi/detail.php?sid=80 and...

CVE-2010-3205

PHP remote file inclusion vulnerability in index.php in Textpattern CMS 4.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Pecio CMS 2.0.5 allow remote attackers to execute arbitrary PHP code via a URL in the template parameter to 1 post.php, 2 article.php, 3 blog.php, or 4 home.php in pectemplates/nova-blue/...

Remote file inclusion

PHP remote file inclusion vulnerability in home.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in MyBackup 1.4.0 allows remote authenticated users to execute arbitrary PHP code via a URL in the maincontent parameter...

Sql injection

SQL injection vulnerability in myLDlinker.php in the myLinksDump Plugin 1.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the url parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-2852

Cross-site scripting XSS vulnerability in modules/headlines/magpierss/scripts/magpiedebug.php in RunCms 2.1, when the Headlines module is enabled, allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2010-2852

Cross-site scripting XSS vulnerability in modules/headlines/magpierss/scripts/magpiedebug.php in RunCms 2.1, when the Headlines module is enabled, allows remote attackers to inject arbitrary web script or HTML via the url parameter...

WordPress myLDlinker Plugin - SQL Injection Vulnerability

This myLDlinker plugin is prone to an SQL injection vulnerability. It allows remote attackers to execute arbitrary SQL commands via the URL parameter. Solution Update the plugin...

Mozilla Thunderbird < 3.0.6 Multiple Vulnerabilities

The installed version of Thunderbird is earlier than 3.0.6. Such versions are potentially affected by the following security issues : - Multiple memory safety bugs could result in memory corruption, potentially resulting in arbitrary code execution. MFSA 2010-34 - The array class used to store CS...

CVE-2009-4928

PHP remote file inclusion vulnerability in config.php in TotalCalendar 2.4 allows remote attackers to execute arbitrary PHP code via a URL in the incdir parameter, a different vector than CVE-2006-1922 and CVE-2006-7055...

Directory traversal

Multiple directory traversal vulnerabilities in index.php in Linker IMG 1.0 and earlier allow remote attackers to read and execute arbitrary local files via a URL in the 1 cooklan cookie parameter $landir variable or possibly 2 Sdbtype parameter. NOTE: this was originally reported as remote file...

CVE-2010-2341

PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta allows remote attackers to execute arbitrary PHP code via a URL in the tplbasedir parameter...

CVE-2010-2315

PHP remote file inclusion vulnerability in picturelib.php in SmartISoft phpBazar 2.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cat parameter...

CVE-2010-2289

Open redirect vulnerability in dana/home/homepage.cgi in Juniper Networks IVE 6.5R1 Build 14599 and 6.5R2 Build 14951 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the Location parameter...

CVE-2010-2146

PHP remote file inclusion vulnerability in banned.php in Visitor Logger allows remote attackers to execute arbitrary PHP code via a URL in the VLincludepath parameter...

CVE-2010-2146

PHP remote file inclusion vulnerability in banned.php in Visitor Logger allows remote attackers to execute arbitrary PHP code via a URL in the VLincludepath parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Snipe Gallery 3.1.5 allow remote attackers to execute arbitrary PHP code via a URL in the cfgadminpath parameter to 1 index.php, 2 view.php, 3 image.php, 4 search.php, 5 admin/index.php, 6 admin/gallery/index.php, 7 admin/gallery/view.php, 8...