Browse CVEs

HIGH 7.5 CVE-2010-1114 Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attackers to execute arbitrary PHP code via a … Web Server Creator Web Portal No fix yet Fix from $1,9502010-03-25 MEDIUM 5.0 CVE-2010-1115 Directory traversal vulnerability in news/include/customize.php in Web Server Creator - Web Portal 0.1 allows remote attackers to read arbitrary file… Web Server Creator Web Portal No fix yet Fix from $1,6002010-03-25 HIGH 7.5 CVE-2008-6543 Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parameter to (1) index.php3, (2) lo… Quick Classifieds No fix yet Fix from $1,9502009-03-30 HIGH 7.5 CVE-2008-6545 PHP remote file inclusion vulnerability in news/include/createdb.php in Web Server Creator Web Portal 0.1 allows remote attackers to execute arbitrar… Web Server Creator Web Portal No fix yet Fix from $1,9502009-03-30 MEDIUM 5.0 CVE-2007-4937 CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin name… Cs Guestbook No fix yet Fix from $1,6002007-09-18 MEDIUM 5.0 CVE-2007-1144 Directory traversal vulnerability in jwpn-photos.php in J-Web Pics Navigator 2.0 allows remote attackers to list arbitrary directories via a .. (dot … J Web Pics Navigator No fix yet Fix from $1,6002007-03-02 HIGH 7.5 CVE-2007-0361 PHP remote file inclusion vulnerability in mep/frame.php in PHPMyphorum 1.5a allows remote attackers to execute arbitrary PHP code via a URL in the c… Phpmyphorum No fix yet Fix from $1,9502007-01-19 HIGH 7.5 CVE-2006-4746 PHP remote file inclusion vulnerability in news/include/customize.php in Web Server Creator 0.1 allows remote attackers to execute arbitrary PHP code… Web Server Creator No fix yet Fix from $1,9502006-09-13 MEDIUM 6.8 CVE-2006-4754 Cross-site scripting (XSS) vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary web script or HTML via the alb… Phprog Patch available Fix from $1,6002006-09-13 MEDIUM 5.0 CVE-2006-4753 Directory traversal vulnerability in index.php in PHProg before 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the lang pa… Phprog Patch available Fix from $1,6002006-09-13 HIGH 7.5 CVE-2006-4678 PHP remote file inclusion vulnerability in News Evolution 3.0.3 allows remote attackers to execute arbitrary PHP code via the _NE[AbsPath] parameter … News Evolution Mitigation only Fix from $1,9502006-09-11 HIGH 7.5 CVE-2006-4622 PHP remote file inclusion vulnerability in annonce.php in AnnonceV (aka annoncesV) 1.1 allows remote attackers to execute arbitrary PHP code via a UR… Annoncev No fix yet Fix from $1,9502006-09-07 HIGH 7.5 CVE-2006-3168 SQL injection vulnerability in CS-Forum before 0.82 allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) debut parameters… Cs Forum after 0.81 Fix from $1,9502006-06-23 MEDIUM 5.0 CVE-2006-3170 CS-Forum before 0.82 allows remote attackers to obtain sensitive information via unspecified manipulations, possibly involving an empty collapse[] or… Cs Forum after 0.81 Fix from $1,6002006-06-23 MEDIUM 5.0 CVE-2006-3171 CRLF injection vulnerability in CS-Forum before 0.82 allows remote attackers to inject arbitrary email headers via a newline character in the email p… Cs Forum after 0.81 Fix from $1,6002006-06-23 HIGH 7.5 CVE-2002-2217 Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal (WSC-WebPortal) 0.1 allow remote attackers to execute arbitrary… Web Server Creator No fix yet Fix from $1,9502002-12-31