CVE-2008-7055

CVE-2008-7055 affects ezContents 2.0.3: module.php allows remote attackers to bypass directory traversal protections and include/execute arbitrary local files via "....//" sequences in the link parameter. The flaw arises from improper filtering by str_replace. Evidence from NVD/NVD-linked entries...

CVE-2008-7055

module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to include and execute arbitrary local files via "....//" doubled dot dot slash sequences in the link parameter, which is not properly filtered using the strreplace function...

CVE-2008-7055: Improper Limitation of a Pathname to a Restricted Directory

module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to include and execute arbitrary local files via "....//" doubled dot dot slash sequences in the link parameter, which is not properly filtered using the strreplace function...

Pigyard Art Gallery Multiple SQL Injection

Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal, iM4N, Kinglet, Vendor: Pigyard Art Gallery Multiple SQL Injection This is a completation of the original advisory reported by ZoRLu @ Milw0rm http://www.milw0rm.com/exploits/5181 Original Link...

CVE-2007-4210

CVE-2007-4210 affects LANAI (la-nai) CMS 1.2.14. The issue consists of multiple SQL injection vulnerabilities in module.php, allowing remote attackers to execute arbitrary SQL commands via three parameters: (1) mid in the FAQ Modules (faqviewgroup action), (2) cid in EZSHOPPINGCART Modules, and (...

CVE-2007-4210: Undefined Security Weakness

Multiple SQL injection vulnerabilities in module.php in LANAI la-nai CMS 1.2.14 allow remote attackers to execute arbitrary SQL commands via 1 the mid parameter in an faqviewgroup action in the FAQ Modules, 2 the cid parameter in the EZSHOPINGCART Modules, or 3 the gid parameter in a view action ...

Digital Eye Gallery 1.1 Beta (module.php menu) Remote File Include Vulnerabilities

Digital Eye Gallery 1.1 Beta module.php menu Remote File Include Vulnerabilities script : http://mamboxchange.com/frs/download.php/7469/digitaleyecms.1.1BETA.tar.gz file : /module.php Found by & Contact : Cold z3ro , [email protected] , http://hack-teach.com/ , Team Hell Crew requireonce $men...

Digital Eye Gallery Module.PHP远程文件包含漏洞

Digital Eye Gallery是一款基于PHP的WEB应用程序。 Digital Eye Gallery不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Module.PHP'脚本对用户提交的'menu'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Digital Eye Gallery Digital Eye Gallery 1.1 Beta 目前没有解决方案提供： http://mamboxchange.com/projects/digitaleye/...

CVE-2007-1600: Undefined Security Weakness

PHP remote file inclusion vulnerability in module.php in Digital Eye Gallery 1.1 Beta aka 0.1.1b allows remote attackers to execute arbitrary PHP code via a URL in the menu parameter...

Digital Eye CMS 0.1.1b (module.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Digital Eye CMS 0.1.1b module.php Remote File Inclusion Vulnerability ======================================================================= Digital Eye Gallery 1.1...

Digital Eye CMS 0.1.1b - module.php Remote File Inclusion

Digital Eye CMS 0.1.1b - module.php Remote File Inclusion Digital Eye Gallery 1.1 Beta module.php menu Remote File Include Vulnerabilities script : http://mamboxchange.com/frs/download.php/7469/digitaleyecms.1.1BETA.tar.gz file : /module.php Found by & Contact : Cold z3ro , [email protected] ...

Digital Eye CMS 0.1.1b - 'module.php' Remote File Inclusion

Digital Eye Gallery 1.1 Beta module.php menu Remote File Include Vulnerabilities script : http://mamboxchange.com/frs/download.php/7469/digitaleyecms.1.1BETA.tar.gz file : /module.php Found by & Contact : Cold z3ro , [email protected] , http://hack-teach.com/ , Team Hell Crew requireonce $men...

CVE-2005-1375: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary SQL commands via 1 learningPath.php, 2 learningPathAdmin.php, 3 learnPathdetails.php, 4 modulespool.php, 5 module.php, 6 uInfo parameter in...

CVE-2004-0070

CVE-2004-0070 describes a remote code execution vulnerability in the ezContents package, specifically in the module.php game that handles a link parameter. The OpenVAS entry for this CVE notes that ezContents can be forced to include an external PHP file, causing the remote attacker’s code to be ...

CVE-2004-0070: Undefined Security Weakness

PHP remote file inclusion vulnerability in module.php for ezContents allows remote attackers to execute arbitrary PHP code by modifying the link parameter to reference a URL on a remote web server that contains the code...

CVE-2004-0070

PHP remote file inclusion vulnerability in module.php for ezContents allows remote attackers to execute arbitrary PHP code by modifying the link parameter to reference a URL on a remote web server that contains the code...