EUVD-2006-6722

Malware in sbrugna...

EUVD-2006-6672

Malware in sbrugna...

CVE-2006-6739

PHP remote file inclusion vulnerability in buycd.php in Paristemi 0.8.3 allows remote attackers to execute arbitrary PHP code via a URL in the HTTPDOCUMENTROOT parameter, a different vector than CVE-2006-6689...

CVE-2006-6739

PHP remote file inclusion vulnerability in buycd.php in Paristemi 0.8.3 allows remote attackers to execute arbitrary PHP code via a URL in the HTTPDOCUMENTROOT parameter, a different vector than CVE-2006-6689...

CVE-2006-6739

CVE-2006-6739 describes a PHP remote file inclusion in Paristemi 0.8.3, specifically the buycd.php component. The root cause is unsafe handling of a URL provided via the HTTP_DOCUMENT_ROOT parameter, allowing an attacker to include arbitrary PHP code and potentially execute it on the server. The ...

CVE-2006-6739: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in buycd.php in Paristemi 0.8.3 allows remote attackers to execute arbitrary PHP code via a URL in the HTTPDOCUMENTROOT parameter, a different vector than CVE-2006-6689...

Paristemi BuyCD.PHP远程文件包含漏洞

Paristemi是一款基于PHP的WEB应用程序。 Paristemi不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'BuyCD.PHP'脚本对用户提交的'HTTPDOCUMENTROOT'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Paristemi Paristemi 0.8.3 目前没有详细解决方案提供： http://www.paristemi.com/...

CVE-2006-6689

Multiple PHP remote file inclusion vulnerabilities in Paristemi 0.8.3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the SERVERDIRECTORY parameter to unspecified scripts, a different vector than CVE-2006-6739. NOTE: The provenance of this information is unknown; the...

CVE-2006-6689

CVE-2006-6689 and CVE-2006-6739 pertain to Paristemi 0.8.3 and earlier. CVE-2006-6689 describes multiple PHP remote file inclusion vulnerabilities allowing arbitrary code execution via a URL in the SERVER_DIRECTORY parameter to unspecified scripts (notably different from CVE-2006-6739). CVE-2006-...

CVE-2006-6689

Multiple PHP remote file inclusion vulnerabilities in Paristemi 0.8.3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the SERVERDIRECTORY parameter to unspecified scripts, a different vector than CVE-2006-6739. NOTE: The provenance of this information is unknown; the...

CVE-2006-6689: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Paristemi 0.8.3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the SERVERDIRECTORY parameter to unspecified scripts, a different vector than CVE-2006-6739. NOTE: The provenance of this information is unknown; the...

Paristemi 0.8.3b (buycd.php) Remote File Include Vulnerability

+------------------------------------------------------------------------------------------- + Paristemi 0.8.3b buycd.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendor ............: http://www.paristemi.com/...

Paristemi 0.8.3b (buycd.php) Remote File Include Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + Paristemi 0.8.3b buycd.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendor...

Paristemi 0.8.3b - buycd.php Remote File Inclusion

Paristemi 0.8.3b - buycd.php Remote File Inclusion +------------------------------------------------------------------------------------------- + Paristemi 0.8.3b buycd.php Remote File Include Vulnerability +-----------------------------------------------------------------------------------------...

Paristemi 0.8.3b (buycd.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================== Paristemi 0.8.3b buycd.php Remote File Include Vulnerability ==============================================================...

Paristemi 0.8.3b - 'buycd.php' Remote File Inclusion

+------------------------------------------------------------------------------------------- + Paristemi 0.8.3b buycd.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendor ............: http://www.paristemi.com/...