[SA19026] 4images "template" Parameter File Inclusion Vulnerability

TITLE: 4images "template" Parameter File Inclusion Vulnerability SECUNIA ADVISORY ID: SA19026 VERIFY ADVISORY: http://secunia.com/advisories/19026/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: 4images 1.x http://secunia.com/product/8373/...

CVE-2006-0899

Directory traversal vulnerability in index.php in 4Images 1.7.1 and earlier allows remote attackers to read and include arbitrary files via ".." dot dot sequences in the template parameter...

CVE-2006-0899

Directory traversal vulnerability in index.php in 4Images 1.7.1 and earlier allows remote attackers to read and include arbitrary files via ".." dot dot sequences in the template parameter...

CVE-2006-0899

The vulnerability CVE-2006-0899 affects 4Images

4Images 1.7.1 - Local File Inclusion Remote Code Execution

4Images 1.7.1 - Local File Inclusion Remote Code Execution this works regardless of magicquotesgpc settings Sun-Tzu: "Having doomed spies, doing certain things openly for purposes of deception, and allowing our spies to know of them and report them to the enemy." / short explaination: directory...

4Images <= 1.7.1 (Local Inclusion) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ================================================================ 4Images this works regardless of magicquotesgpc settings Sun-Tzu: "Having doomed spies, doing certain things openly for purposes of deception, and allowing our spies to know ...

4Images 1.7.1 - Local File Inclusion / Remote Code Execution

this works regardless of magicquotesgpc settings Sun-Tzu: "Having doomed spies, doing certain things openly for purposes of deception, and allowing our spies to know of them and report them to the enemy." / short explaination: directory traversal in "template" argument, ex:...