vtiger -- multiple remote file inclusion vulnerabilities

Dedi Dwianto a.k.a theday reports: Input passed to the "$calpath" parameter in update.php is not properly verified before being used. This can be exploited to execute arbitrary PHP code by including files from local or external resources...

OpenDock Easy Doc <=1.4 (doc_directory) File Include Vulnerabilities

No description provided by source. ECHOADV49$2006 ----------------------------------------------------------------------------------------------- ECHOADV49$2006OpenDock Easy Doc =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...

WebYep <= 1.1.9 (webyep_sIncludePath) File Include Vulnerabilities

No description provided by source. ECHOADV48$2006 ----------------------------------------------------------------------------------------------- ECHOADV48$2006 WebYep = 1.1.9 webyepsIncludePath Multiple Remote File Inclusion Vulnerability...

[ECHO_ADV_50$2006]OpenDock Easy Blog <=1.4 (doc_directory) Multiple Remote File Inclusion Vulnerability

ECHOADV50$2006 ----------------------------------------------------------------------------------------------- ECHOADV50$2006OpenDock Easy Blog =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...

[ECHO_ADV_52$2006]OpenDock Easy Gallery <=1.4 (doc_directory) Multiple Remote File Inclusion Vulnerability

ECHOADV52$2006 ----------------------------------------------------------------------------------------------- ECHOADV52$2006OpenDock Easy Gallery =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...

OpenDock Easy Blog <=1.4 (doc_directory) File Include Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== OpenDock Easy Blog =1.4 docdirectory File Include Vulnerabilities ===================================================================== ECHOADV50$2006...

OpenDock Easy Doc <=1.4 (doc_directory) File Include Vulnerabilities

Exploit for unknown platform in category web applications ==================================================================== OpenDock Easy Doc =1.4 docdirectory File Include Vulnerabilities ==================================================================== ECHOADV49$2006...

OpenDock Easy Blog 1.4 - doc_directory File Inclusion

OpenDock Easy Blog 1.4 - docdirectory File Inclusion ECHOADV50$2006 ----------------------------------------------------------------------------------------------- ECHOADV50$2006OpenDock Easy Blog =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...

OpenDock Easy Doc 1.4 - 'doc_directory' File Inclusion

ECHOADV49$2006 ----------------------------------------------------------------------------------------------- ECHOADV49$2006OpenDock Easy Doc =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...

OpenDock Easy Gallery 1.4 - doc_directory File Inclusion

OpenDock Easy Gallery 1.4 - docdirectory File Inclusion ECHOADV52$2006 ----------------------------------------------------------------------------------------------- ECHOADV52$2006OpenDock Easy Gallery =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...

OpenDock Easy Gallery &lt;= 1.4 (doc_directory) File Include Vulnerabilities

No description provided by source. ECHOADV52$2006 ----------------------------------------------------------------------------------------------- ECHOADV52$2006OpenDock Easy Gallery =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...

OpenDock Easy Doc 1.4 - doc_directory File Inclusion

OpenDock Easy Doc 1.4 - docdirectory File Inclusion ECHOADV49$2006 ----------------------------------------------------------------------------------------------- ECHOADV49$2006OpenDock Easy Doc =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...

OpenDock Easy Blog &lt;=1.4 (doc_directory) File Include Vulnerabilities

No description provided by source. ECHOADV50$2006 ----------------------------------------------------------------------------------------------- ECHOADV50$2006OpenDock Easy Blog =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...

WebYep 1.1.9 - webyep_sIncludePath File Inclusion

WebYep 1.1.9 - webyepsIncludePath File Inclusion ECHOADV48$2006 ----------------------------------------------------------------------------------------------- ECHOADV48$2006 WebYep = 1.1.9 webyepsIncludePath Multiple Remote File Inclusion Vulnerability...

WebYep <= 1.1.9 (webyep_sIncludePath) File Include Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== WebYep = 1.1.9 webyepsIncludePath File Include Vulnerabilities ================================================================== ECHOADV48$2006...

OpenDock Easy Blog 1.4 - 'doc_directory' File Inclusion

ECHOADV50$2006 ----------------------------------------------------------------------------------------------- ECHOADV50$2006OpenDock Easy Blog =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...

PHP Live! &lt;= 3.1 help.php Remote File Inclusion vulnerability

/ -------------------------------------------------------- Neo Security Team NST - Advisory 25 - 08/10/06 -------------------------------------------------------- Program: PHP Live! Homepage: http://www.phplivesupport.com/ Vulnerable Versions: 3.1 and prior Risk: High! Impact: Critical Risk -==PH...

FreeBSD : phpbb -- NULL byte injection vulnerability (86526ba4-53c8-11db-8f1a-000a48049292)

Secunia reports : ShAnKaR has discovered a vulnerability in phpBB, which can be exploited by malicious users to compromise a vulnerable system. Input passed to the 'avatarpath' parameter in admin/adminboard.php is not properly sanitised before being used as a configuration variable to store avata...

PixelMotionV2.1.1.txt

!/usr/bin/perl Affected.scr..: Blog Pixel Motion V2.1.1 Poc.ID........: 12060927 Type..........: PHP Code Execution stripslashes, SQL Injection urldecode Risk.level....: High Vendor.Status.: Unpatched Src.download..: www.pixelmotion.org/zip/blog2.1.zip Poc.link......:...

CVE-2006-5115

Directory traversal vulnerability in kgcall.php in KGB 1.87 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the engine parameter, as demonstrated by uploading a file containing PHP code with an image/jpeg content type, and then referencing this file throug...