CVE-2015-4181: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in getfile.php in phpMyBackupPro 2.1 through 2.5 allows remote attackers to read arbitrary files via a .. dot dot in the view parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this...

CVE-2015-4180: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in getfile.php in phpMyBackupPro 2.1 through 2.4 allows remote attackers to read arbitrary files via a .. dot dot in the view parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this...

PT-2017-6742

Name of the Vulnerable Software and Affected Versions phpMyBackupPro versions 2.1 through 2.5 Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the view parameter in the get file.php file. This is due to an incomplete fix. Recommendations For phpMyBackupPro...

PT-2017-6741

Name of the Vulnerable Software and Affected Versions phpMyBackupPro versions 2.1 through 2.4 Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the view parameter in the get file.php file. This is due to an incomplete fix. Recommendations For phpMyBackupPro...

Joomla com_kide plugin 'view' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'view' parameter of the Joomla comkide plugin. An attacker can exploit the vulnerability to access or modify database data...

Website Broker Script 3.02 - view Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Website Broker Script v3.02 - SQL Injection Google Dork: N/A Date: 06.03.2017 Vendor Homepage: http://www.phpscriptsmall.com/ Software : http://www.phpscriptsmall.com/product/website-broker-script/ Demo:...

CVE-2016-0769

Multiple SQL injection vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow 1 remote administrators to execute arbitrary SQL commands via the delid parameter or remote authenticated users to execute arbitrary SQL commands via the 2 view, 3 mark, or 4 change parameter...

PT-2015-5314

Name of the Vulnerable Software and Affected Versions Joomla! CMSJunkie J-ClassifiedsManager component affected versions not specified Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the view parameter to the "/classifieds"...

CVE-2015-1478: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the view parameter to /classifieds...

CVE-2013-1770

Cross-site scripting XSS vulnerability in viewsview.php in Ganglia Web 3.5.7 allows remote attackers to inject arbitrary web script or HTML via the viewname parameter...

XSS in the view parameter of several actions

The following XSS issues were detected by a customer. /changelog?max=30&view=cru%22;alert4015891;//%22&@asv=cru /project/CR?max=30&projectKey=CR&view=all";alert3166631;//"&@asv=all /user/c30626?max=30&name=c30626&view=all";alert1287220;//"&@asv=all...

XSS in the view parameter of several actions

The following XSS issues were detected by a customer. /changelog?max=30&view=cru%22;alert4015891;//%22&@asv=cru /project/CR?max=30&projectKey=CR&view=all";alert3166631;//"&@asv=all /user/c30626?max=30&name=c30626&view=all";alert1287220;//"&@asv=all...

CVE-2012-6561

Cross-site scripting XSS vulnerability in engine/lib/views.php in Elgg before 1.8.5 allows remote attackers to inject arbitrary web script or HTML via the view parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2012-6561: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in engine/lib/views.php in Elgg before 1.8.5 allows remote attackers to inject arbitrary web script or HTML via the view parameter to index.php. NOTE: some of these details are obtained from third party information...

PT-2013-2015

Name of the Vulnerable Software and Affected Versions Elgg versions prior to 1.8.5 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the view parameter to "index.php". Recommendations For versions prior to 1.8.5, update to version 1.8....

DEBIAN-CVE-2013-0332

Multiple directory traversal vulnerabilities in ZoneMinder 1.24.x before 1.24.4 allow remote attackers to read arbitrary files via a .. dot dot in the 1 view, 2 request, or 3 action parameter...

PT-2012-5307

Name of the Vulnerable Software and Affected Versions Free Realty versions 3.1-0.6 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the view parameter to "agentdisplay.php" or the edit parameter to "admin/admin.php". Recommendations For Fre...

CVE-2012-1213

Cross-site scripting XSS vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra Collaboration Suite ZCS 6.x before 6.0.15 and 7.x before 7.1.3 allows remote attackers to inject arbitrary web script or HTML via the view parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in zimbra/h/calendar in Zimbra Web Client in Zimbra Collaboration Suite ZCS 6.x before 6.0.15 and 7.x before 7.1.3 allows remote attackers to inject arbitrary web script or HTML via the view parameter...

PT-2012-3136

Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite ZCS versions 6.x through 6.0.14 Zimbra Collaboration Suite ZCS versions 7.x through 7.1.2 Description A cross-site scripting XSS issue exists in the Zimbra Web Client, specifically in the zimbra/h/calendar component...