Fisher762

**Name of the Vulnerable Software and Affected Versions** WeBid auction script version 0.5.4 **Description** The issue allows remote attackers to obtain SQL query logs due to insufficient access control. This is possible because sensitive information is stored under the web root, enabling attackers to access logs via a direct request for logs/cron.log. **Recommendations** For WeBid auction script version 0.5.4, consider restricting access to the logs directory to prevent unauthorized access to sensitive information. As a temporary workaround, restrict access to the logs/cron.log file until a more permanent solution is implemented.

**Name of the Vulnerable Software and Affected Versions** WeBid auction script version 0.5.4 **Description** The issue allows remote attackers to modify arbitrary cascading style sheets (CSS) files via a certain request with the `file` parameter set to `style.css`. This can probably be leveraged for cross-site scripting (XSS) attacks. **Recommendations** For WeBid auction script version 0.5.4, avoid using the `file` parameter to access `style.css` until a fix is available. As a temporary workaround, consider restricting access to the `eledicss.php` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** WeBid auction script version 0.5.4 **Description** The issue allows remote attackers to execute arbitrary SQL commands via the `username` in the admin panel. **Recommendations** For WeBid auction script version 0.5.4, update to a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Open Auto Classifieds version 1.4.3b **Description** The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via two main vectors: the `id` parameter to "listings.php" and the `username` field to "login.php". **Recommendations** For Open Auto Classifieds version 1.4.3b, consider restricting access to the "listings.php" and "login.php" scripts until a patch is available. As a temporary workaround, avoid using the `id` parameter in "listings.php" and the `username` field in "login.php" to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Brim version 2.0 **Description** A cross-site scripting (XSS) issue exists in the Bookmarks plugin, allowing remote authenticated users to inject arbitrary web script or HTML via the `name` parameter in an `addItemPost` action to "index.php". **Recommendations** For Brim version 2.0, consider restricting access to the `addItemPost` action in "index.php" to minimize the risk of exploitation, and avoid using the `name` parameter until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Brim version 2.0.0 **Description** The issue allows remote authenticated users to execute arbitrary SQL commands. This is possible due to a SQL injection vulnerability in the Tasks plugin when the `magic quotes gpc` setting is disabled. The vulnerability can be exploited via an arbitrary field in a search action to the "index.php" endpoint. **Recommendations** For Brim version 2.0.0, consider disabling the Tasks plugin until a patch is available, or ensure that the `magic quotes gpc` setting is enabled to mitigate the risk of SQL injection attacks.

**Name of the Vulnerable Software and Affected Versions** cpLinks version 1.03 **Description** The issue allows remote attackers to inject arbitrary web script or HTML via the `search text` and `search category` parameters in the "search.php" file. This reportedly occurs in a forced SQL error message. **Recommendations** For cpLinks version 1.03, consider restricting the input for the `search text` and `search category` parameters to prevent arbitrary web script or HTML injection until a patch is available. As a temporary workaround, avoid using the `search text` and `search category` parameters in the affected "search.php" file.

**Name of the Vulnerable Software and Affected Versions** cpLinks version 1.03 **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is possible via the `admin username` parameter to "admin/index.php" and the `search text` and `search category` parameters to "search.php", when magic quotes gpc is disabled. **Recommendations** For cpLinks version 1.03, consider disabling the use of the `admin username`, `search text`, and `search category` parameters until a patch is available. Additionally, enabling magic quotes gpc can help mitigate the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** phpDirectorySource version 1.1.06 **Description** The issue concerns SQL injection vulnerabilities. Remote attackers can execute arbitrary SQL commands. This is possible via the `lid` parameter to "show.php" and the `login` parameter to "admin.php" when `magic quotes gpc` is disabled. **Recommendations** For phpDirectorySource version 1.1.06, consider disabling the `magic quotes gpc` feature to prevent SQL injection attacks, or update the `show.php` and `admin.php` files to properly sanitize the `lid` and `login` parameters. As a temporary workaround, restrict access to the "show.php" and "admin.php" files until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Shop-Script versions 2.0 and possibly other versions **Description** The issue allows remote attackers to read arbitrary files via a .. (dot dot) in the `aux page` parameter in the index.php file. **Recommendations** For Shop-Script version 2.0, consider restricting access to the `aux page` parameter in the index.php file until a patch is available. As a temporary workaround, avoid using the `aux page` parameter with .. (dot dot) sequences in the index.php file to minimize the risk of exploitation.