David Vieira-Kurz

The issue allows remote attackers to execute arbitrary code. This is due to a Cross-Site Scripting (XSS) flaw in Xinha, which is included in the Serendipity package. The vulnerability can be exploited via the `backend.php` file in the `plugins/ExtendedFileManager` directory.

The issue allows a malicious user to trigger remote code execution by crafting the value for the `response type` parameter, which is executed as Spring SpEL when processing authorization requests using the whitelabel views.

The issue allows remote attackers to spoof the location bar's URL via a crafted web site.

The issue allows remote attackers to inject arbitrary web script or HTML via various crafted inputs, including database names, SQL queries, and column types, in multiple panels and dialogs, such as the Database Synchronize panel, Database rename panel, table overview panel, view creation dialog, table search dialog, and create index dialog.

The issue allows remote authenticated users to inject arbitrary PHP code into config/custom/base.ini.php via the `ftpserver` parameter in the "FTP-Server field" to the `sicore/updates/optionssav` operation for "index.php".

The issue allows remote attackers to read arbitrary files via a .. (dot dot) in the `page` parameter of the print.php file.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `comment secure` parameter in the profile comments.php file.

The issue allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the `PHPSESSID` cookie.

A session fixation issue allows remote attackers to hijack web sessions by setting the `PHPSESSID` parameter.

Name of the Vulnerable Software and Affected Versions: eggblog versions 3.1.0 and earlier Description: A session fixation issue allows remote attackers to hijack web sessions by setting the `PHPSESSID` parameter. Recommendations: For versions 3.1.0 and earlier, update to a version later than 3.1.0 to resolve the issue.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `username` parameter in the atmail.php file.

A session fixation issue allows remote attackers to hijack web sessions by setting the `PHPSESSID` cookie.

A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the `Suchzeile` parameter in the index cms.php file.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `entry` parameter in the guestbook.php file.

A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the `entry` parameter in the guestbook.php file. This might be related to SQL injection.

The issue allows remote attackers to execute arbitrary PHP code via a URL in the `path` parameter to API endpoints such as "functions.php" and "members.php".

The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to certain API endpoints, specifically (1) "get password.php" or (2) "login up.php3".

The issue allows remote attackers to inject arbitrary web script or HTML via vulnerable parameters. Specifically, the parameters `page`, `page id`, and `language` are affected. This can lead to cross-site scripting (XSS) attacks.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `sessid` parameter in the "index.php" file.

Name of the Vulnerable Software and Affected Versions: phpComasy CMS versions 0.7.9pre and earlier Description: The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the `username` or `password` parameters in the index.php file. Recommendations: For phpComasy CMS versions 0.7.9pre and earlier, consider updating to a version that contains a fix for this issue, as using earlier versions poses a significant risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.