CVE-2010-4988

PHP remote file inclusion vulnerability in modchatting/themes/default/header.php in Family Connections Who is Chatting 2.2.3 allows remote attackers to execute arbitrary PHP code via a URL in the TMPLpath parameter...

PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution

PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution !/usr/bin/php ?php / Found this after getting my inet back and noticing this http://www.milw0rm.com/exploits/6085 . The only problem with the remote command execution there is that it actually requires registerglobals = on. I saw the GLOBAL...

e107chat-rfi.txt

E107 Chat Module 123FlashChat Remote File Inclusion Vulnerability AUTHOR : bycasper41 Mekan : Cyber-Warrior.Org MAİL : [email protected] Download: http://www.123flashchat.com/download/e107modfor123flashchat6.8.0.zip DORKS : "123flashchat.php" EXPLOITS :...

CVE-2008-1171

Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter to 1 123flashchat.php and 2 phpbbloginchat.php. NOTE: CVE disputes this issue because $phpbbrootpath is explicitl...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter to 1 123flashchat.php and 2 phpbbloginchat.php. NOTE: CVE disputes this issue because $phpbbrootpath is explicitl...

CVE-2008-1171

CVE-2008-1171 concerns multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB. An attacker could trigger code execution via a URL in the phpbb_root_path parameter to (1) 123flashchat.php and (2) phpbb_login_chat.php. The CVE notes a dispute: phpbb_root_path is e...

WebED 0.0.9 (index.php) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================ WebED 0.0.9 index.php Remote File Disclosure Vulnerability ============================================================ WebED v0.0.9 index.php Remote File Disclosure...

CVE-2007-6085

Multiple cross-site scripting XSS vulnerabilities in index.php in VigileCMS 1.4 allow remote attackers to inject arbitrary web script or HTML via the message field in the 1 vedipm or 2 livechat module...