Lucene search
+L

468 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/03/12 12:00 a.m.•5 views

CVE-2005-0720: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in admin/header.php in PHP mcNews 1.3 allows remote attackers to execute arbitrary PHP code by modifying the skinfile parameter to reference a URL on a remote web server that contains the code...

7.5CVSS6.5AI score0.0278EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/02/20 12:00 a.m.•4 views

CVE-2004-1559: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 redirectto, text, popupurl, or popuptitle parameters to wp-login.php, 2 redirecturl parameter to admin-header.php, 3 popuptitle, popupurl, content, or posttit...

4.3CVSS5.9AI score0.06465EPSS
SaveExploits7References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/02/12 12:00 a.m.•3 views

CVE-2004-1420: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in header.php in WHM AutoPilot 2.4.6.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 sitetitle or 2 httpimages parameter...

4.3CVSS5.9AI score0.04049EPSS
SaveExploits3References1
OSV
OSV
•added 2004/12/31 5:00 a.m.•20 views

CVE-2004-1559

Multiple cross-site scripting XSS vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 redirectto, text, popupurl, or popuptitle parameters to wp-login.php, 2 redirecturl parameter to admin-header.php, 3 popuptitle, popupurl, content, or posttit...

5.8AI score
SaveExploits0References7
NVD
NVD
•added 2004/05/29 4:00 a.m.•28 views

CVE-2004-2038

Cross-site scripting XSS vulnerability in Land Down Under LDU before LDU 700 allows remote attackers to inject arbitrary web script or HTML via a BBcode img tag in 1 functions.php, 2 header.php or 3 auth.inc.php...

4.3CVSS5.7AI score0.02539EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2003/05/22 12:00 a.m.•4 views

CVE-2003-0320: Undefined Security Weakness

header.php in ttCMS 2.3 and earlier allows remote attackers to inject arbitrary PHP code by setting the ttcmsuseradmin parameter to "1" and modifying the adminroot parameter to point to a URL that contains a Trojan horse header.inc.php script...

7.5CVSS6AI score0.05332EPSS
SaveExploits1References1
exploitpack
exploitpack
•added 2003/05/17 12:00 a.m.•14 views

ttCMS 2.22.3 - header.php Remote File Inclusion

ttCMS 2.22.3 - header.php Remote File Inclusion source: https://www.securityfocus.com/bid/7625/info A remote file include vulnerability has been reported for ttCMS. Due to insufficient sanitization of some user-supplied variables by the 'header.php' script, it is possible for a remote attacker to...

7.5AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2003/05/17 12:00 a.m.•29 views

ttCMS 2.2/2.3 - 'header.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/7625/info A remote file include vulnerability has been reported for ttCMS. Due to insufficient sanitization of some user-supplied variables by the 'header.php' script, it is possible for a remote attacker to include a malicious PHP file in a URL...

7.5CVSS5.8AI score0.05332EPSS
SaveExploits1
Rows per page
Query Builder