EUVD-2007-3287

Malware in sbrugna...

Musoo GLOBALS[ini_array]参数远程文件包含漏洞

Musoo是一款基于PHP的WEB应用程序。 Musoo不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于脚本对用户提交的'GLOBALSiniarray'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Musoo Musoo 0.21 目前没有详细解决方案提供： http://www.tryag.com/cc http://www.example.com/path/msDb.php?GLOBALSiniarrayEXTLIBPATH=Shell.txt?...

CVE-2007-3297

Multiple PHP remote file inclusion vulnerabilities in Musoo 0.21 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSiniarrayEXTLIBPATH parameter to 1 msDb.php, 2 modules/MusooTemplateLite.php, or 3 modules/SoundImporter.php...

CVE-2007-3297

Multiple PHP remote file inclusion vulnerabilities in Musoo 0.21 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSiniarrayEXTLIBPATH parameter to 1 msDb.php, 2 modules/MusooTemplateLite.php, or 3 modules/SoundImporter.php...

CVE-2007-3297

CVE-2007-3297 affects Musoo 0.21 and concerns multiple PHP remote file inclusion in the components msDb.php, modules/MusooTemplateLite.php, and modules/SoundImporter.php via the GLOBALS[ini_array][EXTLIB_PATH] parameter. The underlying issue enables an attacker to cause arbitrary PHP code executi...

Musoo 0.21 Remote File Inclusion Vulnerabilities

No description provided by source. Musoo 0.21GLOBALSiniarrayEXTLIBPATHRemote File Include D.Script: http://osx.freshmeat.net/redir/musoo/65735/urltgz/musoo-0.21.tar.gz V.Code : requireonce $GLOBALS"iniarray""EXTLIBPATH".'/ In : /msDb.php /modules/MusooTemplateLite.php /modules/SoundImporter.php...

Musoo 0.21 - Remote File Inclusion

Musoo 0.21 - Remote File Inclusion Musoo 0.21GLOBALSiniarrayEXTLIBPATHRemote File Include D.Script: http://osx.freshmeat.net/redir/musoo/65735/urltgz/musoo-0.21.tar.gz V.Code : requireonce $GLOBALS"iniarray""EXTLIBPATH".'/ In : /msDb.php /modules/MusooTemplateLite.php /modules/SoundImporter.php...

Musoo 0.21 - Remote File Inclusion

Musoo 0.21GLOBALSiniarrayEXTLIBPATHRemote File Include D.Script: http://osx.freshmeat.net/redir/musoo/65735/urltgz/musoo-0.21.tar.gz V.Code : requireonce $GLOBALS"iniarray""EXTLIBPATH".'/ In : /msDb.php /modules/MusooTemplateLite.php /modules/SoundImporter.php Exploits:...

Musoo 0.21 Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ================================================ Musoo 0.21 Remote File Inclusion Vulnerabilities ================================================ Musoo 0.21GLOBALSiniarrayEXTLIBPATHRemote File Include D.Script:...

CVE-2007-3297: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Musoo 0.21 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSiniarrayEXTLIBPATH parameter to 1 msDb.php, 2 modules/MusooTemplateLite.php, or 3 modules/SoundImporter.php...