Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Web News 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the configrootordner parameter to 1 index.php, 2 news.php, or 3 feed.php...

CVE-2007-4329

Multiple PHP remote file inclusion vulnerabilities in Web News 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the configrootordner parameter to 1 index.php, 2 news.php, or 3 feed.php...

Neuron Blog Admin Permission Bypass and Remote File Upload Vulnerability

Neuron Blog Admin Permission Bypass and Remote File Upload Vulnerability ------------------------------------------------------------------------ Script : Neuron Blog Version : 1.1 Site : http://dev.localhost.be/?q=detail-script&id=11 Founder : Rizgar Contact : [email protected] and...

CVE-2007-4327

CVE-2007-4327 affects File Uploader 1.1 with PHP remote file inclusion in the config[root_ordner] parameter used by index.php and datei.php, enabling an attacker to execute arbitrary PHP code. The vulnerability is triggered by supplying a URL in that parameter, allowing remote code execution and ...

CVE-2007-4329

CVE-2007-4329 concerns Web News 1.1, where multiple PHP remote file inclusion vulnerabilities allow an attacker to execute arbitrary PHP code by passing a URL in the config[root_ordner] parameter to one of three scripts: index.php, news.php, or feed.php. The source of the flaw is a lack of proper...

CVE-2007-4329

Multiple PHP remote file inclusion vulnerabilities in Web News 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the configrootordner parameter to 1 index.php, 2 news.php, or 3 feed.php...

fileup-rfi.txt

File Uploader Version 1.1 Remote Command Execution Vulnerability ----------------------------------------------------------------------- Script : File Uploader Version Version : 1.1 Site : http://www.mapos-scripts.de Founder : Rizgar Contact : [email protected] and irc.gigachat.net kurdhack...

webnews-rfi.txt

Web News 1.1 Remote Command Execution Vulnerability ----------------------------------------------------------------------- Script : Web News Version : 1.1 Site : http://www.mapos-scripts.de Founder : Rizgar Contact : [email protected] and irc.gigachat.net kurdhack Thanks : Kurdish Hackers...

File Uploader Version 1.1 Remote Command Execution Vulnerability

File Uploader Version 1.1 Remote Command Execution Vulnerability ----------------------------------------------------------------------- Script : File Uploader Version Version : 1.1 Site : http://www.mapos-scripts.de Founder : Rizgar Contact : [email protected] and irc.gigachat.net kurdhack...

Web News 1.1 Remote Command Execution Vulnerability

Web News 1.1 Remote Command Execution Vulnerability ----------------------------------------------------------------------- Script : Web News Version : 1.1 Site : http://www.mapos-scripts.de Founder : Rizgar Contact : [email protected] and irc.gigachat.net kurdhack Thanks : Kurdish Hackers...

File Uploader 1.1 - index.php?config[root_ordner] Remote File Inclusion

File Uploader 1.1 - index.php?configrootordner Remote File Inclusion source: https://www.securityfocus.com/bid/25253/info File Uploader is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an...

File Uploader 1.1 - 'index.php?config[root_ordner]' Remote File Inclusion

source: https://www.securityfocus.com/bid/25253/info File Uploader is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...

CVE-2007-4173

CVE-2007-4173 describes an SQL injection in duyuruoku.asp of Hunkaray Okul Portali 1.1 . The vulnerability is exploitable via the id parameter, enabling remote attackers to execute arbitrary SQL commands. The provided documents do not specify affected versions beyond 1.1 or provide a concrete rem...

Hunkaray Okul Portali 1.1 - Duyuruoku.asp SQL Injection

Hunkaray Okul Portali 1.1 - Duyuruoku.asp SQL Injection source: https://www.securityfocus.com/bid/25185/info Hunkaray Okul Portali is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

WikiWebWeaver 1.1 beta Upload Shell Vulnerability

Yollubunlar.Org -------------------------------------------------------------------------------- Title : WikiWebWeaver 1.1 beta Upload Shell Upload Vulnerability -------------------------------------------------------------------------------- Author: Yollubunlar.Org cont@ct: [email protected]...

CVE-2007-4101

CVE-2007-4101 affects Madoa Poll 1.1. The vulnerability is described as multiple PHP remote file inclusion weaknesses that let an attacker execute arbitrary PHP code by manipulating the Madoa parameter to one of three scripts: index.php, vote.php, or admin.php. The CVSS data in the related record...

CVE-2007-3991

The CVE-2007-3991 entry concerns multiple cross-site scripting (XSS) vulnerabilities in cv.asp of Asp cvmatik 1.1 and earlier. The issues allow remote attackers to inject arbitrary web script or HTML via the parameters Adiniz (Ady), Soyadiniz (Soyady), Ehliyet, Askerlik, and GSM, among potentiall...

CVE-2007-3887

CVE-2007-3887 describes multiple cross-site scripting (XSS) vulnerabilities in mesaj_formu.asp of ASP Ziyaretci Defteri 1.1, enabling remote attackers to inject arbitrary web script or HTML via the (1) Isim, (2) Mesajiniz, and (3) E-posta fields (likely mapped to isim, mesaj, and posta parameters...

psnews-lfi.txt

o bug /". . . . .-' -...-'/ o o , . o -...--".\ vuln.: PsNews 1.1 show.php newspath Local File Inclusion author: [email protected] download: http://www.strefaphp.net/index.php?page=download&what=download&fid=12 dork: "Powered by PsNews" ; /news/show.php: ... iferegi"://", $newspath die"Nieautoryzowa...

PsNews 1.1 (show.php newspath) Local File Inclusion Vulnerability

No description provided by source. o bug /". . . . .-' -...-'/ o o , . o -...--".\ vuln.: PsNews 1.1 show.php newspath Local File Inclusion author: [email protected] download: http://www.strefaphp.net/index.php?page=download&what=download&fid=12 dork: "Powered by PsNews" ; /news/show.php:...