Stefan Schurtz

The issue allows remote attackers to inject arbitrary web script or HTML via the `PATH INFO` parameter to API endpoints such as "index.php" and "loader.php".

The issue allows remote attackers to inject arbitrary web script or HTML via the `Title`, `Content`, or `New category` field to "wordpress/" or the query string to "wordpress/". This can lead to cross-site scripting (XSS) attacks.

The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the PATH INFO to various files, including "themes/default/tile search/index.tmpl.php", "login.php", "search.php", "password reminder.php", "login.php/jscripts/infusion", "login.php/mods/ standard/flowplayer", "browse.php/jscripts/infusion/framework/fss", "registration.php/themes/default/ie styles.css", "about.php", or "themes/default/social/basic profile.tmpl.php".

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `redirect to` parameter to "wp-login.php".

The issue concerns SQL injection vulnerabilities in the selectUserIdByLoginPass function. Remote attackers can execute arbitrary SQL commands via the `login` parameter to "sys/login/index" or the `memberLoginName` parameter to "sys/login/member".

The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the `to group` parameter to "group.php" or the `id` parameter to "vcard.php".

A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the `from` parameter in preferences.php.

The issue allows remote attackers to download and execute an arbitrary program onto a client machine via a crafted HTML document, due to the MASetupCaller ActiveX control not properly implementing unspecified methods.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `serendipity[textarea]` parameter in the serendipity admin image selector.php file. This issue might be related to cross-site request forgery (CSRF).

The issue allows remote attackers to execute arbitrary SQL commands via the `serendipity[plugin to conf]` parameter in the serendipity admin.php file. This might be related to cross-site request forgery (CSRF).

The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the `time[0][0]` parameter in the forensics/base qry main.php file.

The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters, including the `url` parameter to "top.php" or the `time[0][0]` parameter to "forensics/base qry main.php". This occurs because the parameters are not properly handled in an error page, leading to potential cross-site scripting (XSS) attacks.

The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the PATH INFO to "group.php", or the `target language` or `target flag` parameter to "translate.php".

The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved by manipulating the PATH INFO to specific API endpoints, such as "forum/register.php" or "forum/logon.php".

A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. (dot dot) in the ` ID` parameter to either "catalog/shopping cart.php" or "catalog/content.php" endpoints.

The issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to index.php in specific actions, such as teachers.html or teachers/. This can lead to cross-site scripting (XSS) attacks.