CVE-2007-4485

CVE-2007-4485 affects Butterfly online visitors counter 1.08. The vulnerability arises in visitor.php where, when used with certain older PHP versions and improper handling of the SERVER superglobal, an attacker can cause a remote PHP code execution by supplying a URL in _SERVER[DOCUMENT_ROOT]. T...

CVE-2007-4485

PHP remote file inclusion vulnerability in visitor.php in Butterfly online visitors counter 1.08, when used with certain older versions of PHP with improper SERVER superglobal handling, allows remote attackers to execute arbitrary PHP code via a URL in the SERVERDOCUMENTROOT parameter. NOTE: it...

Butterfly online vistors counter 1.08 RFI

App Name : Butterfly online vistors counter v.1.08 HomePage : http://www.phoenix.frihost.net/butterfly/readme.php Vuln type : Remote File Include RFI Vulnerability Discovered by : iNs Vuln Code: visitor.php includeonce $SERVER"DOCUMENTROOT" . "/butterfly/custom.php"; // include settings POC:...

Design/Logic Flaw

WordPress before 2.2.2 allows remote attackers to redirect visitors to other websites and potentially obtain sensitive information via 1 the wphttpreferer parameter to wp-pass.php, related to the wpgetreferer function in wp-includes/functions.php; and possibly other vectors related to 2...

CVE-2003-0521

CVE-2003-0521 is a documented XSS vulnerability in cPanel 6.4.2 where a URL containing script is logged and displayed in the Error Log or Latest Visitors screens, enabling remote attackers to inject arbitrary HTML and potentially gain privileges. The CVSS vector (AV:N/AC:M/Au:N/C:P/I:P/A:P) yield...

CVE-2003-0521

Cross-site scripting XSS vulnerability in cPanel 6.4.2 allows remote attackers to insert arbitrary HTML and possibly gain cPanel administrator privileges via script in a URL that is logged but not properly quoted when displayed via the 1 Error Log or 2 Latest Visitors screens...