Quick Classifieds 1.0 - 'include/adminHead.inc?DOCUMENT_ROOT' Remote File Inclusion

source: https://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; othe...

Quick Classifieds 1.0 - 'include/sendit.php3?DOCUMENT_ROOT' Remote File Inclusion

source: https://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; othe...

ooComments 1.0 - classesclass_comments.php?PathToComment Remote File Inclusion

ooComments 1.0 - classesclasscomments.php?PathToComment Remote File Inclusion source: https://www.securityfocus.com/bid/28401/info ooComments is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an...

ooComments 1.0 - classesclass_admin.php?PathToComment Remote File Inclusion

ooComments 1.0 - classesclassadmin.php?PathToComment Remote File Inclusion source: https://www.securityfocus.com/bid/28401/info ooComments is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an...

ooComments 1.0 - '/classes/class_admin.php?PathToComment' Remote File Inclusion

source: https://www.securityfocus.com/bid/28401/info ooComments is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attac...

W-Agora 4.0 - delete_user.php?bn_dir_default Remote File Inclusion

W-Agora 4.0 - deleteuser.php?bndirdefault Remote File Inclusion source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...

W-Agora 4.0 - add_user.php?bn_dir_default Remote File Inclusion

W-Agora 4.0 - adduser.php?bndirdefault Remote File Inclusion source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...

W-Agora 4.0 - edit_forum.php?bn_dir_default Remote File Inclusion

W-Agora 4.0 - editforum.php?bndirdefault Remote File Inclusion source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...

W-Agora 4.0 - reorder_forums.php?bn_dir_default Remote File Inclusion

W-Agora 4.0 - reorderforums.php?bndirdefault Remote File Inclusion source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...

Iatek Knowledge Base - content_by_cat.asp SQL Injection

Iatek Knowledge Base - contentbycat.asp SQL Injection source: https://www.securityfocus.com/bid/28376/info Iatek Knowledge Base is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allo...

News-Template 0.5beta - print.php Multiple Cross-Site Scripting Vulnerabilities

News-Template 0.5beta - print.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/28353/info News-Template is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these...

News-Template 0.5beta - 'print.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/28353/info News-Template is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user ...

Iatek Knowledge Base - 'content_by_cat.asp' SQL Injection

source: https://www.securityfocus.com/bid/28376/info Iatek Knowledge Base is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

W-Agora 4.0 - 'create_user.php?bn_dir_default' Remote File Inclusion

source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

W-Agora 4.0 - 'mail_users.php?bn_dir_default' Remote File Inclusion

source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

Iatek PortalApp 4.0 - links.asp SQL Injection

Iatek PortalApp 4.0 - links.asp SQL Injection source: https://www.securityfocus.com/bid/28315/info PortalApp is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Iatek PortalApp 4.0 - 'links.asp' SQL Injection

source: https://www.securityfocus.com/bid/28315/info PortalApp is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

MAXdev My eGallery Module 3.04 - For Xoops gid SQL Injection

MAXdev My eGallery Module 3.04 - For Xoops gid SQL Injection source: https://www.securityfocus.com/bid/28220/info MAXdev My eGallery module for Xoops is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

Chris LaPointe Download Center 1.2 - search Cross-Site Scripting

Chris LaPointe Download Center 1.2 - search Cross-Site Scripting source: https://www.securityfocus.com/bid/28219/info Download Center is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to...

Chris LaPointe Download Center 1.2 - category Cross-Site Scripting

Chris LaPointe Download Center 1.2 - category Cross-Site Scripting source: https://www.securityfocus.com/bid/28219/info Download Center is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to...