Direct News Multiple Remote File Include Vulnerabilities

Direct News is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the computer; other attacks are also possible. Direct News 4.10.2 is vulnerable; other...

CMSFaethon 2.2.0 Ultimate Local / Remote File Inclusion

cmsfaethon-2.2.0-ultimate.7z Multiple Vulnerability +Vendor: CMS Faethon +Version: 2.2.0-ultimate.7z +License: GNU GENERAL PUBLIC LICENSE +Download: http://sourceforge.net/projects/cmsfaethon/files/ +Risk: High +Remote: Yes +Local: Yes +Vulnerable: Since v1.12 CMS Faethon 1.3 CMS Faethon...

Open Web Analytics 1.2.3 Local / Remote File Inclusion

=========================================================================== Topic : Open Web Analytics 1.2.3 Bug type : multi file include Download : http://downloads.openwebanalytics.com/owa/owa123.tar Advisory : =========================================================================== Author ...

DaFun Spirit 2.2.5 Remote File Inclusion

\|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- DaFun Spirit 2.2.5 Multiple Remote File Include Vulnerability Script: http://code.google.com/p/dafunspirit/downloads/list Author: mat Mail: [email protected]...

68kb Remote File Inclusion

=========================================================================== Topic : 68kb Bug type : multi remote file include Download : http://68kb.googlecode.com/files/68kb-v1.0.0rc2.zip Advisory : =========================================================================== Author : ItSecTeam...

Open Web Analytics 1.2.3 - Multiple File Inclusions

=========================================================================== Topic : Open Web Analytics 1.2.3 Bug type : multi file include Download : http://downloads.openwebanalytics.com/owa/owa123.tar Advisory : =========================================================================== Author ...

Remote file inclusion

PHP remote file inclusion vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary PHP code via a URL in the go parameter...

Directory traversal

PHP remote file inclusion vulnerability in index.php in SkaDate Dating allows remote attackers to execute arbitrary PHP code via a URL in the languageid parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via directory traversal sequences...

CVE-2009-4752

PHP remote file inclusion vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary PHP code via a URL in the go parameter...

CVE-2009-4750

PHP remote file inclusion vulnerability in home.php in Top Paidmailer allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in public/code/cphtml2xhtmlbasic.php in All In One Control Panel AIOCP 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter, a different vector than CVE-2009-3220...

CVE-2009-4739

PHP remote file inclusion vulnerability in index.php in SkaDate Dating allows remote attackers to execute arbitrary PHP code via a URL in the languageid parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via directory traversal sequences...

CVE-2009-4752

PHP remote file inclusion vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary PHP code via a URL in the go parameter...

CVE-2009-4739

PHP remote file inclusion vulnerability in index.php in SkaDate Dating allows remote attackers to execute arbitrary PHP code via a URL in the languageid parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via directory traversal sequences...

CVE-2009-4750

CVE-2009-4750 describes a PHP remote file inclusion in Top Paidmailer (home.php) where an attacker can cause arbitrary PHP code execution by supplying a URL in the page parameter. The vulnerability arises from improper handling of user-controlled input in the page parameter, enabling RFI and like...

CVE-2009-4752

CVE-2009-4752 affects Swinger Club Portal’san anzeiger/start.php component, enabling a PHP remote file inclusion through the go parameter. The underlying issue allows an attacker to execute arbitrary PHP code remotely. Public references indicate an RFI vulnerability with a CVSS v2 base score of 7...

CVE-2009-4747

CVE-2009-4747 describes a remote file inclusion (RFI) vulnerability in All In One Control Panel (AIOCP) 1.4.001, specifically in public/code/cp_html2xhtmlbasic.php. The underlying issue allows an attacker to cause arbitrary PHP code execution by supplying a crafted URL in the page parameter, repr...

CVE-2009-4739

CVE-2009-4739 affects SkaDate Dating (PHP). The vulnerability is a PHP remote file inclusion in index.php, exploitable via the language_id parameter to execute arbitrary PHP code from an attacker-supplied URL. The issue can also be leveraged for arbitrary local file inclusion through directory tr...

DaFun Spirit 2.2.5 - Multiple Remote File Inclusions

\|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- DaFun Spirit 2.2.5 Multiple Remote File Include Vulnerability Script: http://code.google.com/p/dafunspirit/downloads/list Author: mat Mail: [email protected]...

Direct News 4.10.2 Multiple Remote File Include Vulnerability

No description provided by source. \|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- Direct News 4.10.2 Multiple Remote File Include Vulnerability Script: http://code.google.com/p/directnews/downloads/list Author: mat Mail: [email protected]...