EUVD-2007-0557

Malware in sbrugna...

Remote file inclusion

PHP remote file inclusion vulnerability in config.php in RPW 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the sqllanguage parameter...

CVE-2007-0559

PHP remote file inclusion vulnerability in config.php in RPW 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the sqllanguage parameter...

CVE-2007-0559

The CVE-2007-0559 entry describes a PHP remote file inclusion vulnerability in RPW 1.0.2. The flaw resides in config.php, where an attacker can supply a URL in the sql_language parameter to cause the application to include and execute remote PHP code. This leads to arbitrary code execution on the...

CVE-2007-0559: Undefined Security Weakness

PHP remote file inclusion vulnerability in config.php in RPW 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the sqllanguage parameter...

RPW Config.PHP远程文件包含漏洞

RPW是一款基于PHP的WEB应用程序。 RPW不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Config.PHP'脚本对用户提交的'sqllanguage'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 RPW 1.0.2 目前没有解决方案提供 http://www.example.com/include/config.php?sqllanguage=shell.txt...

RPW 1.0.2 (config.php sql_language) Remote File Inclusion Vulnerability

No description provided by source. | | \ | Dr Max Virus | / \ | | / / || \ / \ ------------------------------------------------------------------------------...

RPW 1.0.2 (config.php sql_language) Remote File Inclusion Vulnerability:

| | | Dr Max Virus | / | | / / || / ------------------------------------------------------------------------------------------------------------------------ Script:RPW Affected Version:1.0.2 Downlaoad&Victim:http://vlad.tepesch.free.fr/mods/rpw1.0.2.zip...

RPW 1.0.2 - config.php?sql_language Remote File Inclusion

RPW 1.0.2 - config.php?sqllanguage Remote File Inclusion | | \ | Dr Max Virus | / \ | | / / || \ / \ ------------------------------------------------------------------------------------------------------------------------ Script:RPW Affected Version:1.0.2...

RPW 1.0.2 (config.php sql_language) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================= RPW 1.0.2 config.php sqllanguage Remote File Inclusion Vulnerability ======================================================================= | | \ | Dr Max Virus | / \...

RPW 1.0.2 - 'config.php?sql_language' Remote File Inclusion

| | \ | Dr Max Virus | / \ | | / / || \ / \ ------------------------------------------------------------------------------------------------------------------------ Script:RPW Affected Version:1.0.2 Downlaoad&Victim:http://vlad.tepesch.free.fr/mods/rpw1.0.2.zip...