Searching nph maillistpl software vulnerabilities

Cross-site scripting (XSS) vulnerability in Biz

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cgi.


Directory traversal vulnerability in nph-mr.cgi

vulnerability | Mailreadercom | Directory | nph-mrcgi | traversal |

Directory traversal vulnerability in nph-mr.cgi in Mailreader.com 2.3.20 through 2.3.31 allows remote attackers to view arbitrary files via .. (dot dot) sequences and a null byte (%00) in the configLanguage parameter.


The default configuration of BizDesign ImageFol

configuration | ImageFolio | BizDesign | default |

The default configuration of BizDesign ImageFolio 2.23 through 2.26 does not control access to (1) admin/setup.cgi, which allows remote attackers to create an administrative account, or (2) admin/nph-build.cgi, which allows remote attackers to cause a denial of service (CPU consumption).


Software vulnerabilities results 1 to 4 of 4     
Page: 1