MyNews 1.2 'basepath' Parameter Multiple Remote File Include Vulnerabilities

MyNews 1.2 is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user- supplied input. Exploiting these issues may allow a remote attacker to obtain sensitive information or to execute arbitrary script code in the context of the Web server...

Digital College <= 1.1 Multiple RFI Vulnerabilities - Active Check

Digital College is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Digital College 'basepath' Parameter Multiple Remote File Include Vulnerabilities

Digital College is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow a remote attacker to obtain sensitive information or to execute arbitrary script code in the context of the Web...

PT-2011-4695

Name of the Vulnerable Software and Affected Versions TaskFreak! version multi-mysql-0.6 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as include/language/zh/register info.php,...

CVE-2011-3722

Coppermine Photo Gallery CPG 1.5.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by include/inspekt.php and certain other files...

EasySiteEdit 'sublink.php' Remote File Include Vulnerability

EasySiteEdit is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible. OpenVAS Vulnerability Test $Id:...

PT-2011-4612

Name of the Vulnerable Software and Affected Versions Coppermine Photo Gallery version 1.5.12 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by exploiting files such as include/inspekt.php, which reveals the...

EasySiteEdit 'sublink.php' Remote File Include Vulnerability

EasySiteEdit is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2011-3722: Exposure of Sensitive Information to an Unauthorized Actor

Coppermine Photo Gallery CPG 1.5.12 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by include/inspekt.php and certain other files...

PlaySMS 'apps_path[themes]' Parameter Multiple Remote File Include Vulnerabilities

PlaySMS is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow a remote attacker to obtain sensitive information or to execute arbitrary script code in the context of the webserver...

PlaySMS 'apps_path[themes]' Parameter Multiple Remote File Include Vulnerabilities

PlaySMS is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

WordPress Adsense Extreme Plugin 'adsensextreme[lang]' Parameter Remote File Include Vulnerability

The Adsense Extreme plug-in for WordPress is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

LightNEasy v2.3.3 - Local File Include Vulnerability

Document Title: =============== LightNEasy v2.3.3 - Local File Include Vulnerability References Source: ==================== LightNEasy v2.3.3 Release Date: ============= 2011-09-21 Vulnerability Laboratory ID VL-ID: ==================================== 50 Product & Service Introduction:...

WordPress TheCartPress Plugin 'tcp_class_path' Parameter Remote File Include Vulnerability

TheCartPress plug-in for WordPress is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

WordPress Filedownload Plugin 0.1 - Remote File Disclosure Vulnerability

TheCartPress plugin's "download.php" parameter is prone to remote file include vulnerability. It allows an attacker to include a remote file and get access to the server. It causes such problems as sensitive information disclosure, corss-site scripting attacks, code execution on the web server...

WordPress Annonces Plugin 1.2.0.0 - Remote File Inclusion

WordPress Annonces plugin is prone to remote file include vulnerability. It allows an attacker to include a remote file and get access to the server. Solution Upgrade the plugin...

StarDevelop.LiveHelp 2.0 Local File Inclusion

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

StarDevelop.LiveHelp <= v2.0 (index.php) Local File Include Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

La Poste FR Website - Local File Include Vulnerability

Document Title: =============== La Poste FR Website - Local File Include Vulnerability Release Date: ============= 2011-09-10 Vulnerability Laboratory ID VL-ID: ==================================== 266 Product & Service Introduction: =============================== La Poste is the mail service of...

PHPEIP CMS local include vulnerability-vulnerability warning-the black bar safety net

Test version: PHPEIP Content Management System CMS 2 0 1 0 Vulnerabilities page: member/ajax.php errorreporting0; if! defined‘PHPEIPAJAXHEADER’ chdir‘../’; require‘includes/applicationtop.php’; define‘PHPEIPAJAXHEADER’,"member/ajax.php’; requireonceDIRFSROOT.”xajax/xajax.inc.php”; $xajax = new...