9879 matches found
YACS 6.6.1 - Multiple Remote File Inclusions
YACS 6.6.1 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/19799/info YACS is prone multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote...
CVE-2006-4533: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in Plume CMS 1.0.6 and earlier allow remote attackers to execute arbitrary PHP code via the PXconfigmanagerpath parameter to 1 articles.php, 2 categories.php, 3 news.php, 4 prefs.php, 5 sites.php, 6 subtypes.php, 7 users.php, 8 xmedia.php, 9...
ToendaCMS 0.x/1.0.x - Remote File Inclusion
source: https://www.securityfocus.com/bid/19806/info ToendaCMS is prone a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the conte...
YACS 6.6.1 - Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/19799/info YACS is prone multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execut...
CVE-2006-4532: Undefined Security Weakness
PHP remote file inclusion vulnerability in articles/article.php in Yet Another Community System YACS CMS 6.6.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the contextpathtoroot parameter...
CVE-2006-4531: Undefined Security Weakness
PHP remote file inclusion vulnerability in lib/config.php in Pheap CMS 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lpref parameter...
ExBB 1.9.1 - Home_Path Multiple Remote File Inclusions
ExBB 1.9.1 - HomePath Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/19787/info ExBB is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote...
ExBB 1.9.1 - 'Home_Path' Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/19787/info ExBB is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in th...
CubeCart < 3.0.13 Multiple Remote Vulnerabilities (LFI, SQLi, XSS)
The version of CubeCart installed on the remote host fails to properly sanitize user-supplied input to the 'gateway' parameter before using it in the 'includes/content/gateway.inc.php' script to include PHP code. An unauthenticated, remote attacker may be able to exploit this issue to view...
Pheap CMS <= 1.1 (lpref) Remote File Include Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Pheap CMS = 1 lpref Remote File Include Exploit + + + - Script name: Pheap CMS v. 1 - Script site: http://pheap.barekoncept.com/ + + + - Find by: Kacper a.k.a Rahim + -...
CubeCart < 3.0.13 Multiple Vulnerabilities
Binary data 3736.prm...
CVE-2006-4489: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in MiniBill 2006-07-14 1.2.2 allow remote attackers to execute arbitrary PHP code via 1 a URL in the configincludedir parameter in actions/ipn.php or 2 an FTP path in the configplugindir parameter in include/initPlugins.php...
CVE-2006-4498: Undefined Security Weakness
PHP remote file inclusion vulnerability in sommaireadmin.php in PhpAlbum modphpalbum 2.15 for PortailPHP allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter, a different vector than CVE-2006-3922...
CVE-2006-4451
Direct static code injection vulnerability in CJ Tag Board 3.0 allows remote attackers to execute arbitrary PHP code via the 1 User-Agent HTTP header in tag.php, which is executed by all.php, and 2 the banned parameter in adminindex.php...
CVE-2006-4451
CVE-2006-4451 affects CJ Tag Board 3.0, with a direct static code injection flaw allowing remote PHP code execution. The vulnerability arises from two input vectors: (1) the User-Agent HTTP header in tag.php (executed by all.php) and (2) the banned parameter in admin_index.php. This results in ar...
CVE-2006-4451
Direct static code injection vulnerability in CJ Tag Board 3.0 allows remote attackers to execute arbitrary PHP code via the 1 User-Agent HTTP header in tag.php, which is executed by all.php, and 2 the banned parameter in adminindex.php...
EZContents 2.0 - gallery_summary.php?GLOBALS[admin_home] Remote File Inclusion
EZContents 2.0 - gallerysummary.php?GLOBALSadminhome Remote File Inclusion source: https://www.securityfocus.com/bid/19776/info ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these...
EZContents 2.0.3 - showlinks.php?GLOBALS[admin_home] Remote File Inclusion
EZContents 2.0.3 - showlinks.php?GLOBALSadminhome Remote File Inclusion source: https://www.securityfocus.com/bid/19776/info ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these...
EZContents 2.0.3 - showguestbook.php?GLOBALS[admin_home] Remote File Inclusion
EZContents 2.0.3 - showguestbook.php?GLOBALSadminhome Remote File Inclusion source: https://www.securityfocus.com/bid/19776/info ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit thes...
EZContents 2.0.3 - event_list.php?GLOBALS[admin_home] Remote File Inclusion
EZContents 2.0.3 - eventlist.php?GLOBALSadminhome Remote File Inclusion source: https://www.securityfocus.com/bid/19776/info ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these...