Web-provence

Sl Site

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2006-4656

  • EPSS 8.37%
  • Published 09.09.2006 00:04:00
  • Last modified 03.04.2025 01:03:51

PHP remote file inclusion vulnerability in admin/editeur/spaw_control.class.php in Web Provence SL_Site 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter. NOTE: CVE analysis suggests that this...

7.5

CVE-2006-2013

Exploit
  • EPSS 0.96%
  • Published 25.04.2006 12:50:00
  • Last modified 03.04.2025 01:03:51

SQL injection vulnerability in page.php in SL_site 1.0 allows remote attackers to execute arbitrary SQL commands via the id_page parameter. NOTE: this issue could be used to produce resultant XSS from an error message.

5

CVE-2006-2014

Exploit
  • EPSS 1.03%
  • Published 25.04.2006 12:50:00
  • Last modified 03.04.2025 01:03:51

Directory traversal vulnerability in gallerie.php in SL_site 1.0 allows remote attackers to list images in arbitrary directories via ".." sequences in the rep parameter, which is used to construct a directory name in admin/config.inc.php. NOTE: this...

2.6

CVE-2006-2015

Exploit
  • EPSS 0.62%
  • Published 25.04.2006 12:50:00
  • Last modified 03.04.2025 01:03:51

Cross-site scripting (XSS) vulnerability in SL_site 1.0 allows remote attackers to inject arbitrary web script or HTML via the recherche parameter in recherche.php. NOTE: other XSS vectors, as reported in the original disclosure, are resultant from ...