AIOCP 1.4 - 'cp_html2txt.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/35811/info AIOCP All In One Control Panel is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the computer; other attac...

CVE-2009-2220

Multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c, when registerglobals is enabled and magicquotesgpc is disabled, allow remote attackers to include and possibly execute arbitrary files via directory traversal sequences in the templatepath parameter to 1 masthead.inc.php, 2...

Directory traversal

Directory traversal vulnerability in locms/smarty.php in LightOpenCMS 0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cwd parameter. NOTE: remote file inclusion attacks may be possible...

CVE-2009-2223

Directory traversal vulnerability in locms/smarty.php in LightOpenCMS 0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the cwd parameter. NOTE: remote file inclusion attacks may be possible...

CVE-2009-2223

LightOpenCMS 0.1 pre-alpha is affected by a local file inclusion (LFI) in smarty.php, exploitable via a directory traversal in the cwd parameter. An attacker can potentially include and execute arbitrary local files in the webserver context. Public references in connected documents confirm LightO...

CVE-2009-2218

Multiple PHP remote file inclusion vulnerabilities in phpCollegeExchange 0.1.5c, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the home parameter to 1 ihead.php, 2 inav.php, 3 usernew2.php, or 4 house/myrents.php; or 5 allbooks.php, 6 home.php,...

CVE-2009-2218

Multiple PHP remote file inclusion vulnerabilities in phpCollegeExchange 0.1.5c, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the home parameter to 1 ihead.php, 2 inav.php, 3 usernew2.php, or 4 house/myrents.php; or 5 allbooks.php, 6 home.php,...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in phpCollegeExchange 0.1.5c, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the home parameter to 1 ihead.php, 2 inav.php, 3 usernew2.php, or 4 house/myrents.php; or 5 allbooks.php, 6 home.php,...

CVE-2009-2218

Multiple PHP remote file inclusion vulnerabilities affect phpCollegeExchange 0.1.5c when register_globals is enabled. The flaws allow an attacker to trigger arbitrary PHP code execution by supplying a URL in the home parameter to several PHP scripts (i_head.php, i_nav.php, user_new_2.php, house/m...

CVE-2009-2182

Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSgcampsiteDir parameter to 1 adpopup.php, 2 camphtml.php, 3 initcontent.php, 4 logout.php, 5 menu.php, and 6 set-author.php in admin-files/; 7...

CVE-2009-2176

Multiple directory traversal vulnerabilities in fuzzylime cms 3.03a and earlier, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 list parameter to code/confirm.php and the 2 template parameter to...

CVE-2009-2182

Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSgcampsiteDir parameter to 1 adpopup.php, 2 camphtml.php, 3 initcontent.php, 4 logout.php, 5 menu.php, and 6 set-author.php in admin-files/; 7...

CVE-2009-2182

CVE-2009-2182 affects Campsite 3.3.0 RC1, with multiple PHP remote file inclusion vulnerabilities. The issue allows remote attackers to execute arbitrary PHP code by supplying a URL via the GLOBALS[g_campsiteDir] parameter to a set of PHP scripts across admin-files and articles directories, inclu...

CVE-2009-2182

Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSgcampsiteDir parameter to 1 adpopup.php, 2 camphtml.php, 3 initcontent.php, 4 logout.php, 5 menu.php, and 6 set-author.php in admin-files/; 7...

Campsite 3.3.0 RC1 Remote File Inclusion

┌┌─────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └─────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable...

Campsite 3.3.0 RC1 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. ┌┌─────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └─────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes a...

phpCollegeExchange 0.1.5c - Local File Inclusion Remote File Inclusion Cross-Site Scripting

phpCollegeExchange 0.1.5c - Local File Inclusion Remote File Inclusion Cross-Site Scripting ???????????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ??...

Directory traversal

Directory traversal vulnerability in commsrss.php in fuzzylime cms before 3.01b allows remote attackers to include and execute arbitrary local files via a .. dot dot in a files array element for a blogs action, as demonstrated by the files0 parameter...

CVE-2008-6833

Affected software: fuzzylime (cms) prior to version 3.01b, specifically the commsrss.php script. Vulnerability type & root cause: directory traversal/ local file inclusion via the files[] parameter in the blogs action, where input is not properly sanitized before being used in an include. Impact:...

CVE-2009-2143

PHP remote file inclusion vulnerability in firestats-wordpress.php in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the fsjavascript parameter...