CVE-2006-5831: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel AIOCP 1.3.007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter...

beautifier.txt

ToXiC beautifier: Remote File Inclusion by ToXiC CreW ToXic Security Italian CreW BuG FounD by Drago84 Application Affect: beautifier Source Code: http://www.beautifier.org/php/beautifier-php-full-current.tar.gz Page: HFilexhtml11.php Problem: requireonce"$BEAUTPATH/Beautifier/HFile.php"; Dir :...

Mdweb132-postgres.txt

ToXiC Mdweb132-postgres: Remote File Inclusion by ToXiC CreW ToXic Security Italian CreW BuG FounD by Drago84 Application Affect: Mdweb132-postgres Sorce Code: http://jc.desconnets.free.fr/mdweb/install/windows/mdweb132-postgres-s ans-installeur.zip Page: formorg.inc.php countryinsert.php Problem...

Flatnuke 2.5.8 (userlang) Local Inclusion / Delete All Users Exploit

Exploit for unknown platform in category web applications ==================================================================== Flatnuke 2.5.8 userlang Local Inclusion / Delete All Users Exploit ==================================================================== !/usr/bin/php -q -d shortopentag=o...

Flatnuke 2.5.8 (userlang) Local Inclusion / Delete All Users Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- Flatnuke 2.5.8 "userlang" arbitrary local inclusion/delete all users exploit by rgod [email protected] site: http://retrogod.altervista.o...

Flatnuke 2.5.8 - userlang Local Inclusion Delete All Users

Flatnuke 2.5.8 - userlang Local Inclusion Delete All Users !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i;...

Flatnuke 2.5.8 - 'userlang' Local Inclusion / Delete All Users

!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="...

PHPSecurePages 0.28b - 'secure.php' Remote File Inclusion

============================================================================================== phpsecurepages cfgProgDir Remote File Include Vulnerability =============================================================================================== Critical Level : Dangerous Download from :...

Minerva <= v238 (phpbb_root_path) Remote File Inclusion Exploit

============================================================================================== Minerva = v238 phpbbrootpath Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor site :...

Minerva 2.0.21 build 238a - phpbb_root_path File Inclusion

Minerva 2.0.21 build 238a - phpbbrootpath File Inclusion ============================================================================================== Minerva = v238 phpbbrootpath Remote File Inclusion Exploit...

[Full-disclosure] DotNetNuke HTML Code Injection

Security Advisory: VULN20-09-2006 - http://www.secureshapes.com/advisories/vuln20-09-2006.htm Vendor Security Bulletin: http://dotnetnuke.com/About/WhatIsDotNetNuke/SecurityPolicy/SecurityBulletin no3/tabid/990/Default.aspx DotNetNuke - HTML Code Injection Vulnerability Date: 20/09/2006 Severity:...

CVE-2006-4864

PHP remote file inclusion vulnerability in index.php in All Enthusiast ReviewPost 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the RPPATH parameter...

CVE-2006-4864

The CVE-2006-4864 vulnerability affects All Enthusiast’s ReviewPost 2.5, where index.php allows a remote attacker to execute arbitrary PHP code via a URL in the RP_PATH parameter (a remote file inclusion issue). The referenced PT-2006-5618 entry confirms the vulnerable software/version and descri...

CVE-2006-4864

PHP remote file inclusion vulnerability in index.php in All Enthusiast ReviewPost 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the RPPATH parameter...

CVE-2006-4864: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in All Enthusiast ReviewPost 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the RPPATH parameter...

PT-2006-5618 · All Enthusiast · Reviewpost

Name of the Vulnerable Software and Affected Versions: All Enthusiast ReviewPost version 2.5 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the RP PATH parameter in the index.php file. Recommendations: For All Enthusiast ReviewPost version 2.5, consider...

Somery 0.4.6 - 'skin_dir' Remote File Inclusion

Update: 16:01 09/08/06 Subject: "Somery 0.4skindirRemote File Inclusion Exploit" Vulnerable version: Somery 0.4.6 Operating System: - All OS Vendor URL: Robin de Graaf - [email protected] Somery website - http://somery.danwa.net Description: Somery, also known as the Somery weblogging system...

web3news095rfi.txt

============================================================================================== Web3news Vendor site DOrk : allinurl : /web3news/ ================================================================================================ Discoverd By : SHiKaA Conatact : SHiKaA-athotmail.com...

Web3news 0.95 - PHPSECURITYADMIN_PATH Remote File Inclusion

Web3news 0.95 - PHPSECURITYADMINPATH Remote File Inclusion ============================================================================================== Web3news Vendor site DOrk : allinurl : /web3news/ =========================...

Web3news 0.95 - 'PHPSECURITYADMIN_PATH' Remote File Inclusion

============================================================================================== Web3news Vendor site DOrk : allinurl : /web3news/ ================================================================================================ Discoverd By : SHiKaA Conatact : SHiKaA-athotmail.com...