Searching pineapple software vulnerabilities

SQL injection vulnerability in comment.php in P

vulnerability | Technologies | commentphp | Pineapple | injection | Lore | SQL |

SQL injection vulnerability in comment.php in Pineapple Technologies Lore 1.5.6 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter.


Cross-site scripting (XSS) vulnerability in aut

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in auth.php in Pineapple Technologies QuizShock 1.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via encoded special characters in the forward_to parameter, as demonstrated using "<"<".


Multiple PHP remote file inclusion vulnerabilit

vulnerabilities | Technologies | arbitrary | Pineapple | attackers | inclusion | Multiple | execute | remote | allow | code | file | Lore | URL | via | PHP |

Multiple PHP remote file inclusion vulnerabilities in Pineapple Technologies Lore 1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) lang_path parameter to third_party/phpmailer/class.phpmailer.php or the (2) get_plugin_file_path parameter to third_party/smarty/libs/plugins/function.html_checkboxes.php. NOTE: the affected files might be from other software packages, so this might not be a vulnerability in Lore itself. NOTE: (1) might be the same issue as CVE-2006-5734.4.


Software vulnerabilities results 1 to 4 of 4     
Page: 1