Simo64

The issue allows remote attackers to upload arbitrary PHP code to the phpquiz/img quiz folder via the `upload`, `ok update`, `image`, and `path` parameters in the back/upload img.php and admin/upload img.php files. This might require directory traversal sequences in the `path` parameter.

The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved through the `univers` parameter in "score.php" and the `quiz id` parameter in "home.php", which is accessed through the "front/" URI.

A direct static code injection issue allows remote attackers to inject arbitrary PHP code in config.inc.php via modified configuration settings.

A remote file inclusion issue allows remote attackers to execute arbitrary PHP code via a URL in the `cmsdir` parameter to "starnet/modules/include/include.php".

The issue concerns an unrestricted file upload vulnerability. This vulnerability allows remote attackers to upload and execute arbitrary files with executable extensions.

The issue allows remote attackers to execute arbitrary PHP code. This can be achieved by providing a URL in the `cmsdir` parameter to specific API endpoints, such as "/starnet/modules/sn allbum/slideshow.php" and "/starnet/themes/editable/main.inc.php".

The issue allows remote attackers to read arbitrary files via a .. (dot dot) in the `dir` parameter of the images.php file in the starnet/editors/htmlarea/popups directory.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `idsite` parameter in the view com.php file.

The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via several parameters in different files, including the `tablewidth` parameter in "counter.php", the `newdays` parameter in "links.php", and the `tableborder`, `menucolor`, `textcolor`, and `bodycolor` parameters in "menu.inc.php".

The issue allows remote attackers to execute arbitrary SQL commands via the `offset` and `limit` parameters, `newdays` parameter in a new action, and the `link id` parameter in a deadlink action. This can also be used for path disclosure by forcing a SQL error or to modify PHP files using OUTFILE.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `forumid` parameter.

A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML via the `title` parameter in the header.php file.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `offset` parameter in the "view.php" file.

The issue allows remote attackers to obtain the installation path via an invalid `template` parameter, which reveals the path in an error message.

The issue allows remote attackers to inject arbitrary web script or HTML via the `template` parameter in index.php, potentially leading to cross-site scripting (XSS) attacks.

The issue allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the `gallery` and `template` parameters.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `img` parameter in the big.php file.

The issue allows remote attackers to obtain the installation path in an error message. This can be achieved by making a direct request to API endpoints such as "big.php" and "upgrade.php".

The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the index.php file. This is caused by ".." sequences in the `p` parameter, which is not properly sanitized. The vulnerability arises from an rtrim function call with the arguments in the wrong order.

The issue allows remote attackers to obtain sensitive information via an invalid `p` parameter. This is achieved by revealing the path in an error message.