CyberBrau 0.9.4 - '/forum/track.php' Remote File Inclusion

--------------------------------------------------------------------------- CyberBrau = 0.9.4 path Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net : Remote : Yes Critica...

[ECHO_ADV_51$2006] docmint <= 2.0 (MY_ENV[BASE_ENGINE_LOC]) Remote File Inclusion Vulnerability

ECHOADV51$2006 ----------------------------------------------------------------------------------------- ECHOADV51$2006 docmint = 2.0 MYENVBASEENGINELOC Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...

OpenDock Easy Doc 1.4 - 'doc_directory' File Inclusion

ECHOADV49$2006 ----------------------------------------------------------------------------------------------- ECHOADV49$2006OpenDock Easy Doc =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...

PHP Live! <= 3.1 help.php Remote File Inclusion vulnerability

/ -------------------------------------------------------- Neo Security Team NST - Advisory 25 - 08/10/06 -------------------------------------------------------- Program: PHP Live! Homepage: http://www.phplivesupport.com/ Vulnerable Versions: 3.1 and prior Risk: High! Impact: Critical Risk -==PH...

CVE-2006-5136: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in ubbt.inc.php in Groupee UBB.threads 6.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 GLOBALSthispath or 2 GLOBALSconfigdir parameter...

UBB.threads doeditconfig Arbitrary Command Injection

The version of UBB.threads installed on the remote host fails to sanitize input to the 'thispath' and 'config' parameters of the 'admin/doeditconfig.php' script before using them to update the application's configuration file. Provided PHP's 'registerglobals' setting is enabled, an unauthenticate...

PT-2006-5806 · Php · Phpsatk

Name of the Vulnerable Software and Affected Versions: PHP System Administration Toolkit PHPSaTK affected versions not specified Description: A remote file inclusion issue in the loader.php file of PHPSaTK allows remote attackers to execute arbitrary PHP code via a URL in the config parameter of...

CVE-2006-5070: Undefined Security Weakness

PHP remote file inclusion vulnerability in fsl2/objects/fsformlinks.php in faceStones Personal 2.0.42 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSfsinitobjpath parameter...

CVE-2006-5067: Undefined Security Weakness

PHP remote file inclusion vulnerability in loader.php in PHP System Administration Toolkit PHPSaTK allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSconfig parameter. NOTE: this issue is disputed by CVE; analysis shows that the GLOBALSconfig variable is initialized...

CVE-2006-4984: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSrootpath parameter in 1 adminpanel/includes/mailinglist/mlistxls.php and 2 adminpanel/includes/addforms/addmp3.php. NOTE: the other vectors fro...

CVE-2006-4987: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to execute arbitrary PHP code via a URL in the globalscontentdir parameter in 1 example-view/templates/article.php, 2 example-view/templates/root.php, and 3 example-view/templates/dateslist.php...

CVE-2006-4966: Undefined Security Weakness

PHP remote file inclusion vulnerability in inc/ifunctions.php in chumpsoft phpQuestionnaire phpQ 3.12 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSphpQRootDir parameter...

PT-2006-5643 · Telekorn · Telekorn Signkorn Guestbook

Name of the Vulnerable Software and Affected Versions: Telekorn SignKorn Guestbook SL versions 1.3 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the dir path parameter in multiple PHP files, including "index.php", "includes/functions.gb.php"...

Site@School Multiple Script cmsdir Parameter Remote File Inclusion

The remote host is running Site@School, an open source, PHP-based, content management system intended for primary schools. The version of Site@School installed on the remote host fails to sanitize input to the 'cmsdir' parameter before using it to include PHP code in several scripts. Provided PHP...

CCleague Pro 1.0.1RC1 - 'cookie' Remote Code Execution

!/usr/bin/php -q -d shortopentag=on ? $devilteam = " ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:...

[SA21807] Fantastic News "CONFIG[script_path]" File Inclusion Vulnerabilities

TITLE: Fantastic News "CONFIGscriptpath" File Inclusion Vulnerabilities SECUNIA ADVISORY ID: SA21807 VERIFY ADVISORY: http://secunia.com/advisories/21807/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Fantastic News 2.x http://secunia.com/product/6254/ DESCRIPTION:...

[SA21825] Somery "skindir" File Inclusion Vulnerability

TITLE: Somery "skindir" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA21825 VERIFY ADVISORY: http://secunia.com/advisories/21825/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Somery 0.x http://secunia.com/product/11898/ DESCRIPTION: basher13 has reported a...

PT-2006-5395 · Phprojekt · Phprojekt

Name of the Vulnerable Software and Affected Versions: PHProjekt version 0.6.1 Description: The issue allows remote attackers to execute arbitrary PHP code via the path pre parameter in several PHP files, including cm lib.inc.php, doc/br.edithelp.php, doc/de.edithelp.php, doc/ct.edithelp.php,...

PmWiki < 2.1.21 Global Variables Overwriting

The version of PmWiki installed on the remote host contains a programming flaw in 'pmwiki.php' that may allow an unauthenticated remote attacker to overwrite global variables used by the application, which could in turn be exploited to execute arbitrary PHP code on the affected host, subject to t...

CVE-2006-4458

Directory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9.16.010 and earlier allows remote attackers to include arbitrary local files via a .. dot dot sequence and trailing null %00 byte in the GLOBALSphpgwinfouserpreferencescommoncountry parameter...