MyBloggie 2.1.x - 'MyBloggie_Root_Path' Remote File Inclusion

source: https://www.securityfocus.com/bid/19449/info MyBloggie is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in...

MyBloggie: Multiple XSS Vulnerabilities

=========================================================== MyBloggie: Multiple XSS Vulnerabilities =========================================================== Technical University of Vienna Security Advisory TUVSA-0603-002, March 9, 2006 ==========================================================...

[SA18594] WeBWorK Arbitrary Command Execution Vulnerability

TITLE: WeBWorK Arbitrary Command Execution Vulnerability SECUNIA ADVISORY ID: SA18594 VERIFY ADVISORY: http://secunia.com/advisories/18594/ CRITICAL: Less critical IMPACT: System access WHERE: From remote SOFTWARE: WeBWorK Online Homework Delivery System 2.x http://secunia.com/product/6953/...

mailman XSS in create script

From the 2.1.3 release notes: Closed a cross-site scripting exploit in the create cgi script...

BLNews 2.1.3 - Remote File Inclusion

source: https://www.securityfocus.com/bid/7677/info It has been reported that BLNews is prone to a remote file include vulnerability. This is due to the incorrection initilization of some PHP headers within the application. As a result, an attacker may be capable of executing arbitrary PHP comman...

BLNews 2.1.3 - Remote File Inclusion

BLNews 2.1.3 - Remote File Inclusion source: https://www.securityfocus.com/bid/7677/info It has been reported that BLNews is prone to a remote file include vulnerability. This is due to the incorrection initilization of some PHP headers within the application. As a result, an attacker may be...

PHP source code injection in BLNews

Product: BLNews Version: 2.1.3 OffSite: http://www.blnews.de/ Problem: PHP source code injection -------------------------------------------- Vulnerability: ------------admin/objects.inc.php4------------ if $itheme!="blubb" include"$Serverpath/admin/tools.inc.php4";...