CVE-2008-4600

CVE-2008-4600 affects PokerMax Poker League Tournament Script 0.13. The flaw allows remote attackers to bypass authentication and gain administrative access by setting the ValidUserAdmin cookie in configure.php. Base CVSS2 score 7.5 (NETWORK, low complexity, no user interaction). No remediation d...

CVE-2008-4600: Undefined Security Weakness

configure.php in PokerMax Poker League Tournament Script 0.13 allows remote attackers to bypass authentication and gain administrative access by setting the ValidUserAdmin cookie...

CVE-2007-0591

CVE-2007-0591 describes a PHP remote file inclusion in Vu Le An Virtual Path (VirtualPath) 1.0. The vulnerability occurs in configure.php via the phpbb_root_path parameter, enabling remote PHP code execution. Documents do not specify affected versions beyond 1.0, impact details beyond the describ...

CVE-2007-0591: Undefined Security Weakness

PHP remote file inclusion vulnerability in configure.php in Vu Le An Virtual Path VirtualPath 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

Virtual Path PHPBB模块configure.php远程文件包含漏洞

Virtual Path是一款基于PHP的WEB应用程序。 Virtual Path不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Configure.PHP'脚本对用户提交的'phpbbrootpath'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Virtual Path 1.0 目前没有解决方案提供： http://sourceforge.net/project/showfiles.php?groupid=143240...

Virtual Path 1.0 (vp/configure.php) Remote File Include Vulnerability

No description provided by source. +===================================================================== + Virtual Path phpBB == v1.0 | +===================================================================== + Downlaoad S :http://sourceforge.net/projects/virtualpath/ |...

Virtual Path 1.0 (vp/configure.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Virtual Path 1.0 vp/configure.php Remote File Include Vulnerability =====================================================================...

CVE-2006-4749

CVE-2006-4749 describes multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpATM) 1.20 and earlier. The flaw allows remote attackers to execute arbitrary PHP code via the include_location parameter in files including activate.php, configure.php, fileop.php, geti...

CVE-2005-3556: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in PHPlist 2.10.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 listname parameter in a admin/editlist.php, 2 title parameter in b admin/spageedit.php, 3 title field in c admin/template.php, 4 filter, 5 delete...