Searching platinum software vulnerabilities

Cross-site scripting vulnerability in E-Blah Pl

vulnerability | Cross-site | attackers | arbitrary | scripting | Platinum | referer | allows | script | remote | E-Blah | inject | HTML | via | web |

Cross-site scripting vulnerability in E-Blah Platinum 9.7 allows remote attackers to inject arbitrary web script or HTML via the referer (HTTP_REFERER), which is not sanitized when the log file is viewed by the administrator using "Click Log".


PHP remote file inclusion vulnerability in incl

include/commonphp | vulnerability | include_path | parameter | attackers | arbitrary | inclusion | Platinum | I-Rater | execute | remote | allows | code | file | PHP | via | URL |

PHP remote file inclusion vulnerability in include/common.php in I-Rater Platinum allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter.


PHP remote file include vulnerability in admin/

admin/config_settingstplphp | vulnerability | include_path | parameter | attackers | arbitrary | Platinum | include | execute | I-RATER | remote | allows | code | file | PHP | via | URL |

PHP remote file include vulnerability in admin/config_settings.tpl.php in I-RATER Platinum allows remote attackers to execute arbitrary code via a URL in the include_path parameter. NOTE: this is a different vector, and possibly a different vulnerability, than CVE-2006-1929.


PHP remote file inclusion vulnerability in publ

public_includes/pub_popup/popup_finduserphp | vulnerability | inclusion | Platinum | Dragon | remote | file | Blue | PHP |

PHP remote file inclusion vulnerability in public_includes/pub_popup/popup_finduser.php in PHP Blue Dragon Platinum 2.8.0 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter.


Panda Platinum Internet Security 2006 10.02.01

Internet | Security | Platinum | Panda |

Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 stores service executables under the product's installation directory with weak permissions, which allows local users to obtain LocalSystem privileges by modifying (1) WebProxy.exe or (2) PAVSRV51.EXE.


Panda Platinum Internet Security 2006 10.02.01

Internet | Security | Platinum | Panda |

Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers in generated URLs that are not filtered if the user replies to a message, which might allow remote attackers to determine mail usage patterns.


The Panda Platinum Internet Security 2006 10.02

Internet | Security | Platinum | Panda |

The Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses predictable URLs for the spam classification of each message, which allows remote attackers to cause Panda to classify arbitrary messages as spam via a web page that contains IMG tags with the predictable URLs. NOTE: this issue could also be regarded as a cross-site request forgery (CSRF) vulnerability.


user.php in BoastMachine 3.0 platinum allows re

authenticated | demonstrated | BoastMachine | privileges | edit_post | parameter | modified | platinum | userphp | allows | remote | action | users | gain | via |

user.php in BoastMachine 3.0 platinum allows remote authenticated users to gain privileges via a modified id parameter, as demonstrated by an edit_post action.


Software vulnerabilities results 1 to 9 of 9     
Page: 1