OSVDB: The Open Source Vulnerability Database

Creditee: RoMaNcYxHaCkEr

Known Contact Information:

(as of 2007-12-12)

Known Affiliations:

None at this time

Disclosed Vulnerabilities (24):

Disc. Date	OSVDB ID	CVEID	Title
2009-02-09	52051	2009-0530	SnippetMaster includes/vars.inc.php _SESSION[SCRIPT_PATH] Parameter Remote File Inclusion
2009-02-09	52052	2009-0530	SnippetMaster includes/tar_lib/pcltar.lib.php g_pcltar_lib_dir Parameter Remote File Inclusion
2009-02-09	52053	2009-0529	SnippetMaster index.php language Parameter XSS
2009-02-09	51944	2009-0527	AdaptCMS Lite plugins/rss_importer_functions.php sitepath Parameter Remote File Inclusion
2009-02-09	51943	2009-0526	AdaptCMS Lite index.php Multiple Parameter XSS
2009-02-05	52545	2009-0764 2009-0763 2009-0765 2009-0766 2009-0767	Kipper index.php charm Parameter XSS
2008-06-14	46408	2008-2912	Contenido CMS /backend_search.php contenido_path Parameter Remote File Inclusion
2008-06-14	46409	2008-2912	Contenido CMS /cronjobs/move_articles.php cfg[path][contenido] Parameter Remote File Inclusion
2008-06-14	46411	2008-2912	Contenido CMS /cronjobs/optimize_database.php cfg[path][contenido] Parameter Remote File Inclusion
2008-06-14	46412	2008-2912	Contenido CMS /cronjobs/run_newsletter_job.php cfg[path][contenido] Parameter Remote File Inclusion
2008-06-14	46413	2008-2912	Contenido CMS /cronjobs/send_reminder.php cfg[path][contenido] Parameter Remote File Inclusion
2008-06-14	46414	2008-2912	Contenido CMS /cronjobs/session_cleanup.php cfg[path][contenido] Parameter Remote File Inclusion
2008-06-14	46415	2008-2912	Contenido CMS /cronjobs/setfrontenduserstate.php cfg[path][contenido] Parameter Remote File Inclusion
2008-06-14	46416	2008-2912	Contenido CMS /includes/include.newsletter_jobs_subnav.php cfg[path][templates] Parameter Remote File Inclusion
2008-06-14	46417	2008-2912	Contenido CMS /plugins/content_allocation/includes/include.right_top.php cfg[path][templates] Parameter Remote File Inclusion
2008-06-14	46418	2008-2912	Contenido CMS /includes/include.newsletter_jobs_subnav.php Multiple Parameter Remote File Inclusion
2008-06-14	46419	2008-2912	Contenido CMS /plugins/content_allocation/includes/include.right_top.php Multiple Parameter Remote File Inclusion
2008-06-14	46420	2008-2911	Contenido CMS /index.php Multiple Parameter XSS
2008-03-17	43285	2008-1416	PHPauction GPL includes/converter.inc.php include_path Parameter Remote File Inclusion
2008-03-17	43286	2008-1416	PHPauction GPL includes/messages.inc.php include_path Parameter Remote File Inclusion
2008-03-17	43287	2008-1416	PHPauction GPL includes/settings.inc.php include_path Parameter Remote File Inclusion
2008-02-22	42135	2008-0167	phpQLAdmin ezmlm.php _SESSION[path] Parameter Remote File Inclusion
2008-02-22	42136	2008-1067	phpQLAdmin tools/update_translations.php _SESSION[path] Parameter Remote File Inclusion
2007-12-12	39153	2007-6325	Fastpublish CMS designconfig.php config[fsBase] Parameter Remote File Inclusion

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.