21 matches found
EUVD-2007-4787
Malware in sbrugna...
EUVD-2007-4788
Malware in sbrugna...
EUVD-2007-4923
Malware in sbrugna...
Focus SIS staticpath File Inclusion (CVE-2007-4807)
A remote file inclusion vulnerability has been reported in Focus SIS. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected systems...
Focus/SIS <= 1.0/2.2 - Remote File Inclusion Vulnerabilities
No description provided by source. Focus/SIS =1.0&2.2 Remote file inclusion Download v1.0 : http://unix.freshmeat.net/redir/focussis/64492/urlzip/Focusv1.0.zip v2.2 : http://www.focus-sis.org/download.php?modfunc=file&version=2.2...
CVE-2007-4942
PHP remote file inclusion vulnerability in modules/Discipline/StudentFieldBreakdown.php in Focus/SIS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the FocusPath parameter, a different vector than CVE-2007-4806. NOTE: the provenance of this information is unknown...
Remote file inclusion
PHP remote file inclusion vulnerability in modules/Discipline/StudentFieldBreakdown.php in Focus/SIS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the FocusPath parameter, a different vector than CVE-2007-4806. NOTE: the provenance of this information is unknown...
CVE-2007-4942
CVE-2007-4942 describes a PHP remote file inclusion in Focus/SIS 1.0, specifically in modules/Discipline/StudentFieldBreakdown.php, exploitable via a URL in the FocusPath parameter. The vulnerability could allow remote attackers to execute arbitrary PHP code with partial impact to confidentiality...
CVE-2007-4942
PHP remote file inclusion vulnerability in modules/Discipline/StudentFieldBreakdown.php in Focus/SIS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the FocusPath parameter, a different vector than CVE-2007-4806. NOTE: the provenance of this information is unknown...
CVE-2007-4942: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in modules/Discipline/StudentFieldBreakdown.php in Focus/SIS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the FocusPath parameter, a different vector than CVE-2007-4806. NOTE: the provenance of this information is unknown...
CVE-2007-4807
Multiple PHP remote file inclusion vulnerabilities in Focus/SIS 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the staticpath parameter to 1 modules/Discipline/CategoryBreakdownTime.php or 2 modules/Discipline/StudentFieldBreakdown.php...
Remote file inclusion
PHP remote file inclusion vulnerability in modules/Discipline/CategoryBreakdownTime.php in Focus/SIS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the FocusPath parameter...
CVE-2007-4806
PHP remote file inclusion vulnerability in modules/Discipline/CategoryBreakdownTime.php in Focus/SIS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the FocusPath parameter...
CVE-2007-4807
Multiple PHP remote file inclusion vulnerabilities in Focus/SIS 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the staticpath parameter to 1 modules/Discipline/CategoryBreakdownTime.php or 2 modules/Discipline/StudentFieldBreakdown.php...
CVE-2007-4807
CVE-2007-4807 is a remote file inclusion vulnerability affecting Focus SIS 2.2. The issue arises from unsanitized input in the staticpath parameter, allowing an attacker to supply a URL to (1) modules/Discipline/CategoryBreakdownTime.php or (2) modules/Discipline/StudentFieldBreakdown.php and exe...
CVE-2007-4806
CVE-2007-4806 affects Focus/SIS 1.0, in modules/Discipline/CategoryBreakdownTime.php. It is a PHP remote file inclusion vulnerability that lets an attacker supply a URL via the FocusPath parameter to execute arbitrary PHP code on the server, enabling potential full compromise. Public advisories a...
CVE-2007-4807: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in Focus/SIS 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the staticpath parameter to 1 modules/Discipline/CategoryBreakdownTime.php or 2 modules/Discipline/StudentFieldBreakdown.php...
CVE-2007-4806: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in modules/Discipline/CategoryBreakdownTime.php in Focus/SIS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the FocusPath parameter...
Focus/SIS <= 1.0/2.2 Remote File Inclusion Vulnerabilities
No description provided by source. Focus/SIS =1.0&2.2 Remote file inclusion Download v1.0 : http://unix.freshmeat.net/redir/focussis/64492/urlzip/Focusv1.0.zip v2.2 : http://www.focus-sis.org/download.php?modfunc=file&version=2.2...
Focus/SIS <= 1.0/2.2 Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ========================================================== Focus/SIS 1.0&2.2 Remote file inclusion Download v1.0 : http://unix.freshmeat.net/redir/focussis/64492/urlzip/Focusv1.0.zip...