Michael Brooks

The issue is related to a cross-site scripting (XSS) vulnerability in the nonjs interface of CGI:IRC. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the `R` parameter. Multiple vulnerabilities in the CGI:IRC package may lead to a breach of protected information integrity, and exploitation can be done remotely.

The issue allows remote attackers to conduct cross-site scripting (XSS) attacks against logged-out users via a crafted URI, specifically by creating a clickable link for a `javascript:` or `data:` URI in the URL field.

Name of the Vulnerable Software and Affected Versions: Enhanced CTorrent versions 3.3.2 and earlier CTorrent version 1.3.4 Description: The issue is related to a stack-based buffer overflow in the `btFiles::BuildFromMI` function, which can be triggered by a Torrent file containing a long path. This can cause a denial of service (crash) and potentially allow remote attackers to execute arbitrary code. Recommendations: For Enhanced CTorrent versions 3.3.2 and earlier, consider updating to a newer version that addresses this issue. For CTorrent version 1.3.4, consider updating to a newer version that addresses this issue. As a temporary workaround, consider restricting the handling of Torrent files with long paths to minimize the risk of exploitation.

The issue allows remote attackers to spoof critical variables by performing an extract operation on the SERVER superglobal array in the security/xamppsecurity.php file. This can be demonstrated by setting the `REMOTE ADDR` variable to 127.0.0.1, potentially allowing attackers to manipulate the system.

The issue allows remote attackers to hijack the authentication of administrators for various requests, including shutting down the server, sending ping packets, enabling network services, configuring a proxy server, and modifying other settings. This is achieved via parameters in the query string.

A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the `proxy` parameter in a `deny log` manage action. This could potentially lead to unauthorized access or control of the affected system.

The issue concerns multiple insecure methods in the Web On Windows (WOW) ActiveX control. Remote attackers can create and overwrite arbitrary files using the `WriteIniFileString` method, execute arbitrary programs via the `ShellExecute` method, read from the registry, and write to the registry. It is also possible to use these methods together to execute arbitrary code.

A cross-site request forgery (CSRF) issue allows remote attackers to perform unauthorized actions as the administrator via a link or IMG tag to "tbl structure.php" with a modified `table` parameter. This can be leveraged to conduct SQL injection attacks and execute arbitrary code.

The issue concerns multiple cross-site request forgery (CSRF) vulnerabilities. These vulnerabilities allow remote attackers to execute arbitrary code and perform various administrative actions. Specifically, the vulnerabilities can be exploited through the following API endpoints: "frontend/x2/cron/editcronsimple.html" by manipulating the `command1` parameter, "frontend/x2/sql/adddb.html", "frontend/x2/sql/adduser.html", and "frontend/x2/ftp/doaddftp.html".

The CAPTCHA implementation uses a code bg.jpg background image and the PHP `ImageString` function in a way that produces an insufficient number of different images. This allows remote attackers to pass the CAPTCHA test via an automated attack using a table of all possible image checksums and their corresponding digit strings.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML. The issue is disputed by the vendor, who claims the affected variable is `$ SERVER['PHP SELF']` and states that this is not an Etomite-specific exploit.

The issue allows remote attackers to execute arbitrary PHP code via a URL in the `fileOreonConf` parameter to (1) "MakeXML.php" or (2) "MakeXML4statusCounter.php" in include/monitoring/engine/.

The issue allows remote attackers to conduct directory traversal attacks and include and execute arbitrary local files via a .. (dot dot backslash) in the `config` parameter. This is due to an incomplete blacklist vulnerability in the main.php file.

The issue allows remote attackers to execute arbitrary SQL commands. This is possible via the `username` parameter in index.php when magic quotes gpc is disabled.

The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the `host` parameter to "diagdns.php" and the `host` parameter, and possibly the `port` parameter to "diagconnect.php".

A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by providing a base64-encoded value of the `admin` parameter to the "shop/admin.php" endpoint.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting a SQL injection vulnerability in the Sources/Search.php file when MySQL 5 is used. The vulnerability can be triggered via the `userspec` parameter in a search2 action to "index.php".

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `id` parameter in the compare product.php file.

The issue allows remote attackers to execute arbitrary code via the `action` parameter, which is supplied to an `eval` function call in files such as `cart.php` and `page.php`.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `id` parameter in the user.php file.