OSVDB: Open Sourced Vulnerability Database

Creditee: SirGod

Known Contact Information:

None at this time

Known Affiliations:

Mortal Team (as of 2009-04-27)

Disclosed Vulnerabilities (21):

Disc. Date	OSVDB ID	CVEID	Title
2009-08-05	56807	2009-4978	MyBackup down.php filename Parameter Traversal Arbitrary File Access
2009-08-05	56808	2009-4977	MyBackup index.php main_content Parameter Remote File Inclusion
2009-07-30	56660	2009-2784	dit.cms menus/left_rightslideopen/index.php sitemap Parameter Traversal Local File Inclusion
2009-07-30	56661	2009-2784	dit.cms menus/side_pullout/index.php sitemap Parameter Traversal Local File Inclusion
2009-07-30	56662	2009-2784	dit.cms menus/side_slideopen/index.php sitemap Parameter Traversal Local File Inclusion
2009-07-30	56663	2009-2784	dit.cms menus/top_dropdown/index.php sitemap Parameter Traversal Local File Inclusion
2009-07-30	56664	2009-2784	dit.cms menus/topside/index.php sitemap Parameter Traversal Local File Inclusion
2009-07-30	56665	2009-2784	dit.cms menus/left_rightslideopen/index.php path Parameter Remote File Inclusion
2009-07-30	56666	2009-2784	dit.cms menus/side_pullout/index.php path Parameter Remote File Inclusion
2009-07-30	56667	2009-2784	dit.cms menus/side_slideopen/index.php path Parameter Remote File Inclusion
2009-07-30	56668	2009-2784	dit.cms menus/simple/index.php path Parameter Remote File Inclusion
2009-07-30	56669	2009-2784	dit.cms menus/top_dropdown/index.php path Parameter Remote File Inclusion
2009-07-30	56670	2009-2784	dit.cms menus/topside/index.php path Parameter Remote File Inclusion
2009-04-27	54111	2009-1486	Flatchat pmscript.php with Parameter Traversal Local File Inclusion
2009-03-26	52954	2009-1248	Acute Control Panel themes/container.php theme_directory Parameter Remote File Inclusion
2009-03-26	52955	2009-1248	Acute Control Panel themes/header.php theme_directory Parameter Remote File Inclusion
2009-03-26	52956	2009-1247	Acute Control Panel index.php username Parameter SQL Injection
2009-03-16	52778	2009-1024	PHPLinkAdmin edlink.php linkid Parameter SQL Injection
2009-03-16	52761	2009-1038	YAP comments.php image_id Parameter SQL Injection
2009-03-16	52762	2009-1038	YAP admin/index.php user Parameter SQL Injection
2009-03-16	52779	2009-1025	PHPLinkAdmin linkadmin.php page Parameter Remote File Inclusion

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.