Vulnerabilities (CVE)

Filtered by vendor Includer.cgi Subscribe
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2005-1355 1 Includer.cgi 1 Includer.cgi 2025-04-03 5.0 MEDIUM N/A
includer.cgi in The Includer allows remote attackers to read arbitrary files via a full pathname in the argument, a similar vulnerability to CVE-2005-0801.
CVE-2005-0801 1 Includer.cgi 1 Includer.cgi 2025-04-03 5.0 MEDIUM N/A
Directory traversal vulnerability in includer.cgi in The Includer allows remote attackers to read arbitrary files via (1) a .. (dot dot) or (2) a full pathname in the URL.
CVE-2005-1356 1 Includer.cgi 1 Includer.cgi 2025-04-03 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in includer.cgi script in The Includer allows remote attackers to inject arbitrary web script or HTML via the argument.