GrapAgenda index.php page Parameter PHP Code Execution - Ver2 (CVE-2006-4610)

A code execution vulnerability has been reported in Graphiks Grapagenda. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Graphiks GrapAgenda Index.PHP远程文件包含漏洞

Graphiks GrapAgenda是一款基于PHP的WEB应用程序。 Graphiks GrapAgenda不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Index.PHP'脚本对用户提交的'cmd'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Graphiks GrapAgenda 0.1 http://www.graphiks.net/ http://www.example.com/agendapath/index.php?page=yourcode.txt?cmd=id...

CVE-2006-4610

PHP remote file inclusion vulnerability in index.php in GrapAgenda 0.11 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the page parameter...

CVE-2006-4610

PHP remote file inclusion vulnerability in index.php in GrapAgenda 0.11 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the page parameter...

CVE-2006-4610: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in GrapAgenda 0.11 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the page parameter...

grapagenda.txt

Kurdish Security Advisory Original Advisory : http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-25-grapagenda-remote.html Script : GrapAgenda Site : http://www.graphiks.net Version : 0.1 Risk : High Class : Remote Contact : [email protected] and irc.gigachat.net kurdhack Nice cracker...

CVE-2006-4610

The CVE-2006-4610 vulnerability affects GrapAgenda (version 0.11 and earlier). It is a PHP remote file inclusion due to input handling in index.php when register_globals is enabled, allowing an attacker to cause arbitrary PHP code execution via the page parameter. The issue stems from enabling re...

GrapAgenda 0.1 - page Remote File Inclusion

GrapAgenda 0.1 - page Remote File Inclusion Kurdish Security Advisory Original Advisory : http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-25-grapagenda-remote.html Script : GrapAgenda Site : http://www.graphiks.net Version : 0.1 Risk : High Class : Remote Contact : [email protected]...

[Kurdish Security # 25 ] GrapAgenda Remote Command Vulnerability

Kurdish Security Advisory Original Advisory : http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-25-grapagenda-remote.html Script : GrapAgenda Site : http://www.graphiks.net Version : 0.1 Risk : High Class : Remote Contact : [email protected] and irc.gigachat.net kurdhack Nice cracker...

GrapAgenda 0.1 (page) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================= GrapAgenda 0.1 page Remote File Include Vulnerability ======================================================= Kurdish Security Advisory Script : GrapAgenda Site :...

GrapAgenda 0.1 (page) Remote File Include Vulnerability

No description provided by source. Kurdish Security Advisory Original Advisory : http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-25-grapagenda-remote.html Script : GrapAgenda Site : http://www.graphiks.net Version : 0.1 Risk : High Class : Remote Contact : [email protected] and...

GrapAgenda 0.1 - 'page' Remote File Inclusion

Kurdish Security Advisory Original Advisory : http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-25-grapagenda-remote.html Script : GrapAgenda Site : http://www.graphiks.net Version : 0.1 Risk : High Class : Remote Contact : [email protected] and irc.gigachat.net kurdhack Nice cracker...