7256 matches found
MyNews 4.2.2 - 'Week_Events.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/23398/info MyNews is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the context o...
mybb-exec.txt
!/usr/bin/php escapestring. They don't corrected the function this is a choice ... the bad and they forgot to correct 1 only SQL request. They must correct the problem at the source = if$argc URL: http://www.acid-root.new.fr/ -----------------------------------------------------------------------...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in 2BGal 3.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the langfilename parameter to 1 index.php or 2 backupdb.inc.php in admin/, or other unspecified files, different vectors than CVE-2006-5505. NOTE: this issue has bee...
CVE-2007-1844
Multiple PHP remote file inclusion vulnerabilities in Aardvark Topsites PHP 5 allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 button/settingssql.php, 2 settingssql.php, and 3 sources/misc/newday.php...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Aardvark Topsites PHP 5 allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 button/settingssql.php, 2 settingssql.php, and 3 sources/misc/newday.php...
Maplab <= 2.2.1 (gszAppPath) Remote File Inclusion Vulnerability
----------------------------------------------------------------------------------------- Maplab = 2.2.1 gszAppPath Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : Mufti Rizal a.k.a mbahngarso Date : March, 30t...
CVE-2007-1818
PHP remote file inclusion vulnerability in MODforumfieldsparse.php in the Forum picture and META tags 1.7 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2007-1812
PHP remote file inclusion vulnerability in utilitaires/gestionsondage.php in BT-Sondage 112 allows remote attackers to execute arbitrary PHP code via a URL in the repertoirevisiteur parameter...
CVE-2007-1818
PHP remote file inclusion vulnerability in MODforumfieldsparse.php in the Forum picture and META tags 1.7 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
Information disclosure
JCcorp URLshrink 1.3.1 allows remote attackers to execute arbitrary PHP code via the email address field in an HTML link. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-1795
JCcorp URLshrink 1.3.1 allows remote attackers to execute arbitrary PHP code via the email address field in an HTML link. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-7185
PHP remote file inclusion vulnerability in includes/userstandard.php in CMSmelborp Beta allows remote attackers to execute arbitrary PHP code via a URL in the relativeroot parameter...
CVE-2006-7182
PHP remote file inclusion vulnerability in noticias.php in MNews 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter...
CVE-2007-1775
Unrestricted file upload vulnerability in upload.php3 in JBrowser 2.4 and earlier allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Advanced Login <= 0.7 (root) Remote File Inclusion Vulnerability
No description provided by source. ------------------------------------------------------------------------------ Advanced Login = 0.7 root Remote File Inclusion Vulnerability ------------------------------------------------------------------------------ Author : Zeni Susanto a.k.a Bithedz Date...
Advanced Login <= 0.7 (root) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================ Advanced Login = 0.7 root Remote File Inclusion Vulnerability ================================================================...
Advanced Login <= 0.7 (root) Remote File Inclusion Vulnerability
------------------------------------------------------------------------------ Advanced Login = 0.7 root Remote File Inclusion Vulnerability ------------------------------------------------------------------------------ Author : Zeni Susanto a.k.a Bithedz Date Found : Maret, 29th 2007 Location :...
Advanced Login <= 0.7 (root) Remote File Inclusion Vulnerability
No description provided by source. ------------------------------------------------------------------------------ Advanced Login = 0.7 root Remote File Inclusion Vulnerability ------------------------------------------------------------------------------ Author : Zeni Susanto a.k.a Bithedz Date...
Advanced Login 0.7 - root Remote File Inclusion
Advanced Login 0.7 - root Remote File Inclusion ------------------------------------------------------------------------------ Advanced Login = 0.7 root Remote File Inclusion Vulnerability ------------------------------------------------------------------------------ Author : Zeni Susanto a.k.a...
CVE-2007-1695
PHP remote file inclusion vulnerability in includes/usercpregister.php in phpBB 2.0.19 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter. NOTE: this issue has been disputed by third-party researchers, stating that the file checks for a global constant...