CVE-2009-2396

CVE-2009-2396 affects DM Albums 1.9.2 (standalone or as a WordPress plugin). The vulnerability is a PHP remote file inclusion in template/album.php that allows an attacker to execute arbitrary code via a URL in the SECURITY_FILE parameter. Impact is consistent with a full compromise of affected s...

CVE-2009-2399

DM FileManager

ClearContent - image.php?url LocalRemote File Inclusion

ClearContent - image.php?url LocalRemote File Inclusion ---------------------------------------------------------------------------------------------------- Name : ClearContent Site : http://www.allisclear.com/ Demo : http://demo.allisclear.com/...

ClearContent - '/image.php?url' Local/Remote File Inclusion

---------------------------------------------------------------------------------------------------- Name : ClearContent Site : http://www.allisclear.com/ Demo : http://demo.allisclear.com/ ---------------------------------------------------------------------------------------------------- Found ...

CVE-2009-2378

PHP remote file inclusion vulnerability in formmailer.admin.inc.php in Jax FormMailer 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the BASEDIRjaxformmailer parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in formmailer.admin.inc.php in Jax FormMailer 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the BASEDIRjaxformmailer parameter...

CVE-2009-2378

CVE-2009-2378 is a PHP remote file inclusion vulnerability affecting Jax FormMailer 3.0.0, described as allowing remote attackers to execute arbitrary PHP code via a URL in the BASE_DIR[jax_formmailer] parameter in formmailer.admin.inc.php. The vulnerability is documented in multiple sources (e.g...

Top Paidmailer Remote File Inclusion

-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

efm-rfi.txt

Application Name : Electronic File Management 1.5.01 Vulnerable Type : Remote File Inclusion Vulnerability Infection : Remote File Control, Editing... Bug Fix Advice : variable to define Author : Septemb0x Script Down.& WebSite : http://electronicfilemanagement.net/TrialDownload/EFM1.5.01.rar...

Swinger Club Portal - 'start.php?go' Remote File Inclusion

source: https://www.securityfocus.com/bid/43622/info Swinger Club Portal is prone to an SQL-injection vulnerability and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to access or modify data, exploit...

V-webmail Multiple PHP Remote File Inclusion Vulnerability

The host is running V-webmail and is prone to Multiple PHP Remote File Inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbv-webmailmultfileincvuln.nasl 4906 2017-01-02 13:06:55Z teissa $ V-webmail Multiple PHP Remote File Inclusion Vulnerability Authors: Sharath S Copyright: Copyright c...

CVE-2009-2313

Directory traversal vulnerability in index.php in Jinzora Media Jukebox 2.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the name parameter...

CVE-2008-6841

PHP remote file inclusion vulnerability in the Green Mountain Information Technology and Consulting Database Query comdbquery component 1.4.1.1 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to...

Remote file inclusion

PHP remote file inclusion vulnerability in the Green Mountain Information Technology and Consulting Database Query comdbquery component 1.4.1.1 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to...

CVE-2008-6841

CVE-2008-6841 affects Joomla! with the com_dbquery component (versions 1.4.1.1 and earlier). The root cause is a PHP remote file inclusion via a URL in the mosConfig_absolute_path parameter passed to classes/DBQ/admin/common.class.php, enabling remote attackers to execute arbitrary PHP code. The ...

CVE-2008-6840

V-Webmail 1.6.4 is vulnerable to multiple PHP remote file inclusion (RFI) via untrusted URLs assigned to CONFIG[pear_dir] and CONFIG[includes] in various includes/*.php files (and related files in includes/pear/). The root cause is unsanitized or unvalidated parameters that allow attackers to sup...

CVE-2008-6841

PHP remote file inclusion vulnerability in the Green Mountain Information Technology and Consulting Database Query comdbquery component 1.4.1.1 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to...

Remote file inclusion

PHP remote file inclusion vulnerability in install/di.php in AjaxPortal 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathtoserverdata parameter. NOTE: the installation instructions specify deleting the install/ folder...

CVE-2009-2262

AjaxPortal 3.0 is affected by a PHP remote file inclusion via install/di.php, exploitable through the pathtoserverdata parameter to execute arbitrary PHP code. The issue arises from improper handling of crafted URLs in the parameter, with the installation manual advising deletion of the install/ ...

CVE-2009-2262

PHP remote file inclusion vulnerability in install/di.php in AjaxPortal 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathtoserverdata parameter. NOTE: the installation instructions specify deleting the install/ folder...