OSVDB: Open Sourced Vulnerability Database

Browse Database - By Creditee Kacper

Researcher Name:

Researcher Company:

Researcher Country:

Unknown

Vulnerabilities Types:

RFI:	195
Other:	2
SQLInjection:	2

Displaying vulnerabilities 61 - 100 of 199 in total

<< Back to Browse

« Previous 1 2 3 4 5 6 7 Next »

OSVDB ID	Disclosure Date	Title
31144 [CLOSE] OSVDB ID : 31144 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to ViewServerPage.class.php not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState ViewServerPage.class.php base_path Parameter Remote File Inclusion
31145 [CLOSE] OSVDB ID : 31145 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to WelcomeEmailPage.class.php not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState WelcomeEmailPage.class.php base_path Parameter Remote File Inclusion
31146 [CLOSE] OSVDB ID : 31146 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to RegistrarModule.class.php not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState RegistrarModule.class.php base_path Parameter Remote File Inclusion
31147 [CLOSE] OSVDB ID : 31147 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to SolidStateModule.class.php not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState SolidStateModule.class.php base_path Parameter Remote File Inclusion
31148 [CLOSE] OSVDB ID : 31148 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to authorizeaim.class.php not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState authorizeaim.class.php base_path Parameter Remote File Inclusion
31149 [CLOSE] OSVDB ID : 31149 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to AAIMConfigPage.class.php not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState AAIMConfigPage.class.php base_path Parameter Remote File Inclusion
31184 [CLOSE] OSVDB ID : 31184 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the AccountsPage.class.php script not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState AccountsPage.class.php base_path Parameter Remote File Inclusion
31185 [CLOSE] OSVDB ID : 31185 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the AddInvoicePage.class.php script not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState AddInvoicePage.class.php base_path Parameter Remote File Inclusion
31186 [CLOSE] OSVDB ID : 31186 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the AddIPAddressPage.class.php script not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState AddIPAddressPage.class.php base_path Parameter Remote File Inclusion
31187 [CLOSE] OSVDB ID : 31187 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the AddPaymentPage.class.php script not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState AddPaymentPage.class.php base_path Parameter Remote File Inclusion
31188 [CLOSE] OSVDB ID : 31188 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the AddTaxRulePage.class.php script not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState AddTaxRulePage.class.php base_path Parameter Remote File Inclusion
31189 [CLOSE] OSVDB ID : 31189 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the AssignDomainPage.class.php script not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState AssignDomainPage.class.php base_path Parameter Remote File Inclusion
31190 [CLOSE] OSVDB ID : 31190 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the AssignHostingPage.class.php script not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState AssignHostingPage.class.php base_path Parameter Remote File Inclusion
31191 [CLOSE] OSVDB ID : 31191 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the AssignProductPage.class.php script not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState AssignProductPage.class.php base_path Parameter Remote File Inclusion
31192 [CLOSE] OSVDB ID : 31192 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the BillingPage.class.php script not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState BillingPage.class.php base_path Parameter Remote File Inclusion
31193 [CLOSE] OSVDB ID : 31193 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the BillingPaymentPage.class.php script not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState BillingPaymentPage.class.php base_path Parameter Remote File Inclusion
31194 [CLOSE] OSVDB ID : 31194 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the BrowseAccountsPage.class.php script not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState BrowseAccountsPage.class.php base_path Parameter Remote File Inclusion
31195 [CLOSE] OSVDB ID : 31195 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the BrowseInvoicesPage.class.php script not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState BrowseInvoicesPage.class.php base_path Parameter Remote File Inclusion
31196 [CLOSE] OSVDB ID : 31196 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the ConfigureEditUserPage.class.php script not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState ConfigureEditUserPage.class.php base_path Parameter Remote File Inclusion
31197 [CLOSE] OSVDB ID : 31197 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the ConfigureNewUserPage.class.php script not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState ConfigureNewUserPage.class.php base_path Parameter Remote File Inclusion
31198 [CLOSE] OSVDB ID : 31198 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the ConfigureNewUserReceiptPage.class.php script not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState ConfigureNewUserReceiptPage.class.php base_path Parameter Remote File Inclusion
31199 [CLOSE] OSVDB ID : 31199 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the ConfigureUsersPage.class.php script not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState ConfigureUsersPage.class.php base_path Parameter Remote File Inclusion
31200 [CLOSE] OSVDB ID : 31200 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the DeleteAccountPage.class.php script not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState DeleteAccountPage.class.php base_path Parameter Remote File Inclusion
31201 [CLOSE] OSVDB ID : 31201 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the DeleteDomainServicePage.class.php script not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState DeleteDomainServicePage.class.php base_path Parameter Remote File Inclusion
31202 [CLOSE] OSVDB ID : 31202 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the DeleteHostingServicePage.class.php script not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState DeleteHostingServicePage.class.php base_path Parameter Remote File Inclusion
31203 [CLOSE] OSVDB ID : 31203 - Disclosed: 2006-09-21 Description: SolidState contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the DeleteInvoicePage.class.php script not properly sanitizing user input supplied to the 'base_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-09-21	SolidState DeleteInvoicePage.class.php base_path Parameter Remote File Inclusion
28038 [CLOSE] OSVDB ID : 28038 - Disclosed: 2006-08-20 Description: SportsPHool contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to 'includes/layout/plain.footer.php' not properly sanitizing user input supplied to the 'mainnav' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-08-20	SportsPHool plain.footer.php mainnav Parameter Remote File Inclusion
28044 [CLOSE] OSVDB ID : 28044 - Disclosed: 2006-08-20 Description: NES Game & NES System contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to includes.php not properly sanitizing user input supplied to the 'phphtmllib' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-08-20	NES Game & NES System includes.php phphtmllib Parameter Remote File Inclusion
28045 [CLOSE] OSVDB ID : 28045 - Disclosed: 2006-08-20 Description: NES Game & NES System contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to tag_utils/divtag_utils.php not properly sanitizing user input supplied to the 'phphtmllib' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-08-20	NES Game & NES System divtag_utils.php phphtmllib Parameter Remote File Inclusion
28046 [CLOSE] OSVDB ID : 28046 - Disclosed: 2006-08-20 Description: NES Game & NES System contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to tag_utils/form_utils.php not properly sanitizing user input supplied to the 'phphtmllib' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-08-20	NES Game & NES System form_utils.php phphtmllib Parameter Remote File Inclusion
28047 [CLOSE] OSVDB ID : 28047 - Disclosed: 2006-08-20 Description: NES Game & NES System contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to tag_utils/html_utils.php not properly sanitizing user input supplied to the 'phphtmllib' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-08-20	NES Game & NES System html_utils.php phphtmllib Parameter Remote File Inclusion
28048 [CLOSE] OSVDB ID : 28048 - Disclosed: 2006-08-20 Description: NES Game & NES System contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to tag_utils/localinc.php not properly sanitizing user input supplied to the 'phphtmllib' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-08-20	NES Game & NES System tag_utils/localinc.php phphtmllib Parameter Remote File Inclusion
28049 [CLOSE] OSVDB ID : 28049 - Disclosed: 2006-08-20 Description: NES Game & NES System contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to widgets/FooterNav.php not properly sanitizing user input supplied to the 'phphtmllib' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-08-20	NES Game & NES System FooterNav.php phphtmllib Parameter Remote File Inclusion
28050 [CLOSE] OSVDB ID : 28050 - Disclosed: 2006-08-20 Description: NES Game & NES System contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to HTMLPageClass.php not properly sanitizing user input supplied to the 'phphtmllib' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-08-20	NES Game & NES System HTMLPageClass.php phphtmllib Parameter Remote File Inclusion
28051 [CLOSE] OSVDB ID : 28051 - Disclosed: 2006-08-20 Description: NES Game & NES System contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to widgets/InfoTable.php not properly sanitizing user input supplied to the 'phphtmllib' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-08-20	NES Game & NES System InfoTable.php phphtmllib Parameter Remote File Inclusion
28052 [CLOSE] OSVDB ID : 28052 - Disclosed: 2006-08-20 Description: NES Game & NES System contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to widgets/localinc.php not properly sanitizing user input supplied to the 'phphtmllib' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-08-20	NES Game & NES System widgets/localinc.php phphtmllib Parameter Remote File Inclusion
28053 [CLOSE] OSVDB ID : 28053 - Disclosed: 2006-08-20 Description: NES Game & NES System contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to NavTable.php not properly sanitizing user input supplied to the 'phphtmllib' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-08-20	NES Game & NES System NavTable.php phphtmllib Parameter Remote File Inclusion
28054 [CLOSE] OSVDB ID : 28054 - Disclosed: 2006-08-20 Description: NES Game & NES System contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to TextNav.php not properly sanitizing user input supplied to the 'phphtmllib' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-08-20	NES Game & NES System TextNav.php phphtmllib Parameter Remote File Inclusion
28282 [CLOSE] OSVDB ID : 28282 - Disclosed: 2006-08-20 Description: Shadows Rising RPG contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to '/core/includes/smarty.inc.php', '/qcms/includes/smarty.inc.php' and '/qlib/smarty.inc.php' scripts not properly sanitizing user input supplied to the 'CONFIG[gameroot]' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-08-20	Shadows Rising RPG smarty.inc.php CONFIG[gameroot] Parameter Remote File Inclusion
28283 [CLOSE] OSVDB ID : 28283 - Disclosed: 2006-08-20 Description: Shadows Rising contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to '/core/includes/security.inc.php' not properly sanitizing user input supplied to the 'CONFIG[gameroot]' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.	2006-08-20	Shadows Rising RPG security.inc.php CONFIG[gameroot] Parameter Remote File Inclusion

« Previous 1 2 3 4 5 6 7 Next »

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.