Kingcms 0.6.0 (menu.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ Kingcms 0.6.0 menu.php Remote File Inclusion Vulnerability ============================================================...

CVE-2008-6437: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PHPFreeForum 1.0 RC2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 message parameter to error.php, and the 2 nickname and 3 randomid parameters to part/menu.php...

CVE-2009-0513: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in WebFrame 0.76 allow remote attackers to execute arbitrary PHP code via a URL in the classFiles parameter to 1 admin/doc/index.php, 2 index.php, and 3 base/menu.php in mod/...

CVE-2008-4605

SQL injection vulnerability in CafeEngine allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 dish.php and 2 menu.php...

CVE-2008-4605

CVE-2008-4605 describes an SQL injection vulnerability in CafeEngine. The vulnerability affects the id parameter in two scripts, dish.php and menu.php, allowing remote attackers to execute arbitrary SQL commands. This is the explicit compromise path described in the connected documents. The avail...

CVE-2008-4605: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in CafeEngine allows remote attackers to execute arbitrary SQL commands via the id parameter to 1 dish.php and 2 menu.php...

CVE-2007-4862

Cross-site scripting XSS vulnerability in admin/menu.php in SAXON 5.4 allows remote attackers to inject arbitrary web script or HTML via the confignewsurl parameter...

CVE-2007-4862

CVE-2007-4862 is a documented XSS vulnerability affecting SAXON 5.4 in admin/menu.php via config[news_url]. Exploitation requires register_globals On and magic_quotes_gpc Off; the NVD/NVD-derived reports list a Medium impact (I/P) and network access with no confidentiality or availability impact,...

CVE-2007-4862: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/menu.php in SAXON 5.4 allows remote attackers to inject arbitrary web script or HTML via the confignewsurl parameter...

Saxon 5.4 - 'Menu.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26237/info Saxon is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

phpMyTourney menu.php远程文件包含漏洞

phpMyTourney是一款基于PHP的WEB应用程序。 phpMyTourney不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是由于'menu.php'脚本对用户提交的'functionsfile'参数缺少过滤，指定远程服务器上的任意文件作为包含对象，可导致以以WEB权限执行任意命令。 phpMyTourney 1.0.0a 目前没有解决方案提供： http://www.scripts.com/php-scripts/game-software/phpmytourney/...

Remote file inclusion

PHP remote file inclusion vulnerability in menu.php in phpMytourney allows remote attackers to execute arbitrary PHP code via a URL in the functionsfile parameter...

CVE-2007-4757

The vulnerability CVE-2007-4757 affects phpMytourney: a PHP remote file inclusion in menu.php allows an attacker to execute arbitrary PHP code by supplying a URL in the functions_file parameter. This is a server-side code execution risk (base CVSS 7.5, HIGH). Affected component is the menu.php in...

CVE-2007-4757: Improper Input Validation

PHP remote file inclusion vulnerability in menu.php in phpMytourney allows remote attackers to execute arbitrary PHP code via a URL in the functionsfile parameter...

phpMytourney (menu.php) Remote File Inclusion Vulnerability

No description provided by source. Title : phpMytourney functionsfile Remote File Inclusion Vulnerability Author : S.W.A.T. Contact : [email protected] S.Page : http://script.vanta.ru/download.php?id=1178&clas=0 $$ : Free Site : Http://www.XmorS-Security.CoM - Http://www.xmors.com -...

phpMytourney (menu.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =========================================================== phpMytourney menu.php Remote File Inclusion Vulnerability =========================================================== Title : phpMytourney functionsfile Remote File Inclusion...

RaidenHTTPD workspace.php ulang Parameter Local File Inclusion

Binary data 5103.prm...

phpmysport-rfi.txt

------=Part134509048419.1173540747323 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Application : phpMySport CMS URL : http://phpmysport.sourceforge.net/en/ Variable menu.php includeonceROOT."/team/sqlteam.php";...

CVE-2007-1143

Directory traversal vulnerability in pn-menu.php in J-Web Pics Navigator 1.0 allows remote attackers to list arbitrary directories via a .. dot dot in the dir parameter...

CVE-2007-1143: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in pn-menu.php in J-Web Pics Navigator 1.0 allows remote attackers to list arbitrary directories via a .. dot dot in the dir parameter...