Aesthetico

**Name of the Vulnerable Software and Affected Versions** TotalCalendar versions 2.30 and earlier **Description** A remote file inclusion issue in index.php allows remote attackers to execute arbitrary code via a URL in the `inc dir` parameter. **Recommendations** For TotalCalendar versions 2.30 and earlier, update to a version later than 2.30 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** DreamCost HostAdmin versions 3.1 and earlier **Description** The issue allows remote attackers to execute arbitrary PHP code via a URL in the `path` parameter to API endpoints such as "functions.php" and "members.php". **Recommendations** For DreamCost HostAdmin versions 3.1 and earlier, consider restricting access to the vulnerable API endpoints "functions.php" and "members.php" to minimize the risk of exploitation. Avoid using the `path` parameter in these endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Top XL versions 1.1 and earlier **Description** The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to security breaches. This is achieved via the `pass` and `pass2` parameters in "add.php" or the `id` parameter in "members/index.php". **Recommendations** For Top XL versions 1.1 and earlier, consider restricting access to the "add.php" and "members/index.php" scripts until a fix is available. As a temporary workaround, avoid using the `pass`, `pass2`, and `id` parameters in the affected API endpoints.

**Name of the Vulnerable Software and Affected Versions** SiteDepth CMS versions 3.01 and earlier **Description** The issue allows remote attackers to execute arbitrary PHP code via a URL in the `SD DIR` parameter. This is a result of a PHP remote file inclusion vulnerability in the constants.php file. **Recommendations** For SiteDepth CMS versions 3.01 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** phpFaber TopSites versions 2.0.9 and earlier **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `i cat` or `method` parameters in the "index.php" file. **Recommendations** For versions 2.0.9 and earlier, update to a version later than 2.0.9 to resolve the issue. As a temporary workaround, consider restricting access to the "index.php" file or validating and sanitizing the `i cat` and `method` parameters to prevent SQL injection attacks.

**Name of the Vulnerable Software and Affected Versions** Ralf Image Gallery (RIG) versions 0.7.4 through 0.9 **Description** The issue allows remote attackers to conduct PHP remote file inclusion and directory traversal attacks when register globals is enabled. This can be achieved via URLs or ".." sequences in the `dir abs src` parameter in files such as "check entry.php", "admin album.php", "admin image.php", and "admin util.php", and the `dir abs admin src` parameter in "admin album.php" and "admin image.php". This issue can also be leveraged to conduct cross-site scripting (XSS) attacks. **Recommendations** For Ralf Image Gallery (RIG) versions 0.7.4 through 0.9, consider disabling the register globals setting to prevent exploitation. Additionally, restrict access to the `check entry.php`, `admin album.php`, `admin image.php`, and `admin util.php` files, and avoid using the `dir abs src` and `dir abs admin src` parameters in the affected API endpoints until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** SixCMS versions prior to 6.0.6patch2 **Description** The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary script code or HTML via the `page` parameter in the list.php file. **Recommendations** For versions prior to 6.0.6patch2, update to version 6.0.6patch2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** SixCMS versions prior to 6.0.6patch2 **Description** The issue allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the `template` parameter. This is a directory traversal vulnerability in the detail.php file. **Recommendations** For versions prior to 6.0.6patch2, update to version 6.0.6patch2 or later to resolve the issue. As a temporary workaround, consider restricting access to the detail.php file or disabling the use of the `template` parameter until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** ZMS versions 2.9 and earlier **Description** A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `raw` parameter in the search field when `register globals` is enabled. **Recommendations** For ZMS versions 2.9 and earlier, disable the `register globals` setting to prevent exploitation. Additionally, restrict access to the search field to minimize the risk of arbitrary web script or HTML injection.

**Name of the Vulnerable Software and Affected Versions** DreamAccount versions 3.1 and earlier **Description** The issue allows remote attackers to execute arbitrary PHP code when register globals is enabled. This is achieved by providing a URL in the `da path` parameter within specific scripts, including `auth.cookie.inc.php`, `auth.header.inc.php`, and `auth.sessions.inc.php`. **Recommendations** For DreamAccount versions 3.1 and earlier, disable the register globals setting to prevent exploitation. Consider updating the software to a version where this issue is resolved, if available. As a temporary workaround, restrict access to the `auth.cookie.inc.php`, `auth.header.inc.php`, and `auth.sessions.inc.php` scripts to minimize the risk of exploitation. Avoid using the `da path` parameter in these scripts until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** dotWidget CMS versions 1.0.6 and earlier **Description** The issue allows remote attackers to execute arbitrary PHP code when register globals is enabled. This can be achieved via a URL in the `file path` parameter in several API endpoints, including "index.php", "feedback.php", and "printfriendly.php". **Recommendations** For dotWidget CMS versions 1.0.6 and earlier, consider disabling the register globals setting to prevent exploitation. Additionally, restrict access to the `file path` parameter in the affected API endpoints until a fix is available.

**Name of the Vulnerable Software and Affected Versions** phpMyAgenda versions 3.0 Final and earlier **Description** The issue allows remote attackers to execute arbitrary PHP code via a URL in the `rootagenda` parameter in the agenda.php3 file. **Recommendations** For phpMyAgenda versions 3.0 Final and earlier, consider restricting access to the agenda.php3 file until a patch is available. As a temporary workaround, avoid using the `rootagenda` parameter in the affected endpoint. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ActualAnalyzer Lite versions 2.72 and earlier ActualScripts Gold versions 7.63 and earlier ActualScripts Server versions 8.23 and earlier **Description** The issue allows remote attackers to execute arbitrary code via a URL in the `rf` parameter. This is a result of a remote file inclusion vulnerability in the direct.php file. **Recommendations** For ActualAnalyzer Lite versions 2.72 and earlier, update to a version later than 2.72. For ActualScripts Gold versions 7.63 and earlier, update to a version later than 7.63. For ActualScripts Server versions 8.23 and earlier, update to a version later than 8.23.