PHP remote file inclusion vulnerability in lire.php in Sire 2.0 nws allows remote attackers to execute arbitrary PHP code via a URL in the rub parameter. Date published : 2006-04-11 http://www.securityfocus.com/bid/17428 http://www.securityfocus.com/archive/1/430301/100/0/threaded
PHP remote file inclusion vulnerability in spip_login.php3 in SPIP 1.8.3 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. Date published : 2006-04-11 http://www.securityfocus.com/bid/17423 http://www.securityfocus.com/archive/1/430443/100/0/threaded
Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows remote attackers to inject arbitrary web script or HTML via the page parameter to load.php. Date published : 2006-04-11 http://www.securityfocus.com/bid/17430 http://www.securityfocus.com/archive/1/430376/100/0/threaded
Buy.php in Aweb Scripts Seller uses predictable cookies for authentication based on the time and the script number, which allows remote attackers to bypass authentication. Date published : 2006-04-11 http://www.securityfocus.com/bid/17417 http://securitytracker.com/id?1015878
Cross-site scripting (XSS) vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the banner parameter in view mode. Date published : 2006-04-11...
Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the (1) url, (2) city, (3) state, or (4) country parameters. NOTE: the provenance...
Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the (1) Your Name, (2) E-Mail, or (3) Comments fields when posting a message....
Cross-site scripting (XSS) vulnerability in Gallery before 1.5.3 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. Date published : 2006-04-11 http://www.securityfocus.com/bid/17437 http://sourceforge.net/project/shownotes.php?release_id=408602&group_id=7130
The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to overwrite arbitrary files via a symlink attack on temporary files in /var/tmp/fbps-[PID]. Date published...
SQL injection vulnerability in members.php in XBrite Members 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Date published : 2006-04-11 http://www.securityfocus.com/bid/17424 https://www.exploit-db.com/exploits/1655
Unspecified vulnerability in GlobalSCAPE Secure FTP Server before 3.1.4 Build 01.10.2006 allows attackers to cause a denial of service (application crash) via a "custom command" with a long argument. Date published : 2006-04-11 http://www.securityfocus.com/bid/17398...
Multiple SQL injection vulnerabilities in MWNewsletter 1.0.0b allow remote attackers to execute arbitrary SQL commands via the (1) user_email parameter to (a) unsubscribe.php or (b) subscribe.php; or the (2) user_name parameter to subscribe.php. NOTE:...
SQL injection vulnerability in MWNewsletter 1.0.0b allows remote attackers to execute arbitrary SQL commands via the user_name parameter to unsubscribe.php. Date published : 2006-04-11 http://www.securityfocus.com/bid/17412 http://archives.neohapsis.com/archives/bugtraq/2006-04/0447.html
Cross-site scripting (XSS) vulnerability in subscribe.php in MWNewsletter 1.0.0b allows remote attackers to inject arbitrary web script or HTML via the user_name parameter. Date published : 2006-04-11 http://www.securityfocus.com/bid/17412 http://archives.neohapsis.com/archives/bugtraq/2006-04/0447.html