BigACE 1.8.2 - upload_form.php Remote File Inclusion

BigACE 1.8.2 - uploadform.php Remote File Inclusion source: https://www.securityfocus.com/bid/19723/info Bigace is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote PHP...

BigACE 1.8.2 - item_main.php Remote File Inclusion

BigACE 1.8.2 - itemmain.php Remote File Inclusion source: https://www.securityfocus.com/bid/19723/info Bigace is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote PHP co...

CVE-2006-4375: Undefined Security Weakness

PHP remote file inclusion vulnerability in contxtd.class.php in the Contacts XTD ContXTD component for Mambo comcontxtd allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. NOTE: another researcher has disputed this issue, saying that the softwar...

CVE-2006-4378: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in the Rssxt component for Joomla! comrssxt, possibly 2.0 Beta 1 or 1.0 and earlier, allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter in 1 pinger.php, 2 RPC.php, or 3 rssxt.php. NOTE: another...

Joomla! Mambo Component Comprofiler 1.0 - class.php Remote File Inclusion

Joomla! Mambo Component Comprofiler 1.0 - class.php Remote File Inclusion source: https://www.securityfocus.com/bid/19725/info The Mambo and Joomla comcomprofiler component is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can...

Jupiter CMS 1.1.5 - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19721/info Jupiter CMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the...

Jetbox CMS 2.1 - 'Search_function.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19722/info Jetbox CMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the...

CVE-2006-4372: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin.lurmconstructor.php in the Lurm Constructor component comlurmconstructor 0.6b and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the lmabsolutepath parameter...

CVE-2006-4354: Undefined Security Weakness

PHP remote file inclusion vulnerability in e/class/CheckLevel.php in Phome Empire CMS 3.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the checkpath parameter...

CVE-2006-4357: Undefined Security Weakness

PHP remote file inclusion vulnerability in clients/index.php in Diesel Smart Traffic allows remote attackers to execute arbitrary PHP code via a URL in the src parameter...

CVE-2006-4363: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin.cropcanvas.php in the CropImage component comcropimage 1.0 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the cropimagedir parameter...

phpCOIN Multiple Script _CCFG Parameter Remote File Inclusion

The remote host is running phpCOIN, a software package for web-hosting resellers to handle clients, orders, helpdesk queries, and the like. The version of phpCOIN installed on the remote host fails to sanitize input to the 'CCFG' array parameter before using it in several scripts to include PHP...

CVE-2006-4348

PHP remote file inclusion vulnerability in config.kochsuite.php in the Kochsuite comkochsuite 0.9.4 component for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

Wikepage Opus 10 <= 2006.2a (lng) Remote Command Execution Exploit

Exploit for unknown platform in category web applications ================================================================== Wikepage Opus 10 "; $socket = IO::Socket::INET-newProto="tcp", PeerAddr="$server", PeerPort="http80" || die "- Cannot not connect to host !\n"; print $socket "GET...

CVE-2006-4320: Undefined Security Weakness

PHP remote file inclusion vulnerability in sef.php in the OpenSEF 2.0.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4321: Undefined Security Weakness

PHP remote file inclusion vulnerability in cpg.php in the Coppermine Photo Gallery component comcpg 1.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4322: Undefined Security Weakness

PHP remote file inclusion vulnerability in estateagent.php in the EstateAgent component comestateagent for Mambo, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-4329: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Shadows Rising RPG Pre-Alpha 0.0.5b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONFIGgameroot parameter to 1 core/includes/security.inc.php, 2 core/includes/smarty.inc.php, 3 qcms/includes/smarty.inc.php ...

[SA21535] Dolphin &quot;dir[inc]&quot; File Inclusion Vulnerability

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

CVE-2006-4311: Undefined Security Weakness

PHP remote file inclusion vulnerability in Sonium Enterprise Adressbook 0.2 allows remote attackers to execute arbitrary PHP code via the folder parameter in multiple files in the plugins directory, as demonstrated by plugins/1Adressbuch/delete.php...