Pblang

11 CVEs across 1 Pblang products. Browse Pblang vulnerabilities, severities, and proof-of-concept exploits.

Pblang products with known CVEs

Product	CVEs
Pblang	11

Pblang CVEs — newest first
CVE	Published	Summary
`CVE-2007-3096`	2007-06-06	Directory traversal vulnerability in login.php in PBLang (PBL) 4.67.16.a and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and…
`CVE-2007-1052`	2007-02-21	PHP remote file inclusion vulnerability in index.php in PBLang (PBL) 4.60 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the db…
`CVE-2006-5062`	2006-09-28	PHP remote file inclusion vulnerability in templates/pb/language/lang_nl.php in PBLang (PBL) 4.66z and earlier allows remote attackers to execute arbitrary PHP…
`CVE-2005-3919`	2005-11-30	Cross-site scripting (XSS) vulnerability in PBLang 4.65 allows remote attackers to inject arbitrary web script or HTML via multiple fields in (1) UCP.php and (…
`CVE-2005-2895`	2005-09-14	setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to obtain sensitive information via a %00 (a null byte) in the u parameter…
`CVE-2005-2894`	2005-09-14	Cross-site scripting (XSS) vulnerability in the user registration in PBLang 4.65, and possibly earlier versions, allows remote attackers to inject arbitrary we…
`CVE-2005-2893`	2005-09-14	Direct static code injection vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to execute arbitrary PHP cod…
`CVE-2005-2892`	2005-09-14	Directory traversal vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to read arbitrary files via ".." sequ…
`CVE-2005-0526`	2005-05-02	Multiple cross-site scripting (XSS) vulnerabilities in PBLang 4.65 allow remote attackers to inject arbitrary web script or HTML via (1) the search string to s…
`CVE-2005-0631`	2005-03-01	delpm.php in PBLang 4.63 allows remote authenticated users to delete arbitrary PM files by modifying the "id" and "a" parameters.
`CVE-2005-0630`	2005-03-01	sendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full pathname in the orig parameter.