Joomla! Component LMO 1.0b2 - Remote File Inclusion

Application : LMO - Joomla! Component URL : http://forge.joomla.org/sf/projects/lmo Variable $mosConfigabsolutepath not sanitized: xpl works with registerglobals=on in components/comlmo/lmo.php on line 11-12 $lmodateipfad=$mosConfigabsolutepath."/administrator/components/comlmo/";...

[Full-disclosure] JetPhoto Multiple Cross-Site Scripting Vulnerabilitie

Advisory 11 Title: JetPhoto Multiple Cross-Site Scripting Vulnerabilitie Author: 0ozeuso0 Arturo Z. Contact: [email protected] Website: www.elitemexico.org Date: 10/04/06 Risk: Medium Vendor Url: http://www.jetphotosoft.com Affected Software: JetPhoto Non Affected: Info: this bug consists of...