CVE-2006-5410

PHP remote file inclusion vulnerability in templates/tmpldfl/scripts/index.php in BoonEx Dolphin 5.2 allows remote attackers to execute arbitrary PHP code via a URL in the dirinc parameter. NOTE: it is possible that this issue overlaps CVE-2006-4189...

CVE-2006-5410

PHP remote file inclusion vulnerability in templates/tmpldfl/scripts/index.php in BoonEx Dolphin 5.2 allows remote attackers to execute arbitrary PHP code via a URL in the dirinc parameter. NOTE: it is possible that this issue overlaps CVE-2006-4189...

CVE-2006-5410

CVE-2006-5410 is a PHP remote file inclusion vulnerability in BoonEx Dolphin 5.2. The issue affects templates/tmpl_dfl/scripts/index.php and allows an attacker to execute arbitrary PHP code by supplying a URL in the dir[inc] parameter. This results in remote code execution with partial confidenti...

BoonexDolphin5.2.txt

// http://www.w4cking.com CREDIT: w4ck1ng.com PRODUCT: Boonex Dolphin 5.2 http://www.boonex.com/products/dolphin/ VULNERABILITY: Remote File Inclusion NOTES: - requires register globals on - requires magic quotes off POC: //templates/tmpldfl/scripts/index.php?dirinc= ADVISORY & EXPLOIT requires...

Boonex Dolphin 5.2 Remote File Inclusion

// http://www.w4cking.com CREDIT: w4ck1ng.com PRODUCT: Boonex Dolphin 5.2 http://www.boonex.com/products/dolphin/ VULNERABILITY: Remote File Inclusion NOTES: - requires register globals on - requires magic quotes off POC: host/path/templates/tmpldfl/scripts/index.php?dirinc=local/remot efile...

Boonex Dolphin 5.2 - index.php Remote Code Execution

Boonex Dolphin 5.2 - index.php Remote Code Execution !/usr/bin/php //templates/tmpldfl/scripts/index.php?dirinc= w4ck1ng - w4ck1ng.com / if!$argv3 die"Usage: php $argv0 host path command\n Usage Example: php $argv0 domain.com /dolphin/ whoami\n"; function send$host, $put global $data; $conn =...

Boonex Dolphin 5.2 - 'index.php' Remote Code Execution

!/usr/bin/php //templates/tmpldfl/scripts/index.php?dirinc= w4ck1ng - w4ck1ng.com / if!$argv3 die"Usage: php $argv0 host path command\n Usage Example: php $argv0 domain.com /dolphin/ whoami\n"; function send$host, $put global $data; $conn = fsockopen gethostbyname$host,"80" ; if!$conn...

[SA21535] Dolphin "dir[inc]" File Inclusion Vulnerability

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

CVE-2006-4189

Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dirinc parameter in 1 index.php, 2 aemodule.php, 3 browse.php, 4 cc.php, 5 click.php, 6 faq.php, 7 gallery.php, 8 im.php, 9 inbox.php, 10 joinform.php, 11...

CVE-2006-4189

Summary: BoonEx Dolphin 5.1 (and Dolphin 5.2 per related CVEs) is affected by PHP remote file inclusion via dir[inc] parameters in multiple scripts (e.g., index.php, aemodule.php, browse.php, cc.php, etc.). The underlying issue is improper inclusion of user-supplied URL input, enabling remote cod...

CVE-2006-4189

Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dirinc parameter in 1 index.php, 2 aemodule.php, 3 browse.php, 4 cc.php, 5 click.php, 6 faq.php, 7 gallery.php, 8 im.php, 9 inbox.php, 10 joinform.php, 11...