Re: PHP-Revista Multiple vulnerabilities

Discovered by Sirdarckcat from elhacker.net ------------------------------------------------------------------------ ------------ Revista 1.1.2 http://php-revista.sourceforge.org ------------------------------------------------------------------------ ------------ Revista is a simple spanish PHP...

PHP-revista 1.1.2 - Remote File Inclusion / SQL Injection / Authentication Bypass / Cross-Site Scripting

Discovered by Sirdarckcat from elhacker.net ------------------------------------------------------------------------ ------------ Revista 1.1.2 http://php-revista.sourceforge.org ------------------------------------------------------------------------ ------------ Revista is a simple spanish PHP...

PHP-Revista RFI / XSS / SQL Injection

Discovered by Sirdarckcat from elhacker.net ------------------------------------------------------------------------ ------------ Revista 1.1.2 http://php-revista.sourceforge.org ------------------------------------------------------------------------ ------------ Revista is a simple spanish PHP...

CVE-2008-6635

PHP remote file inclusion vulnerability in skins/default.php in Geody Labs Dagger - The Cutting Edge r12feb2008, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dirinc parameter...

CVE-2008-6636

PHP remote file inclusion vulnerability in skins/default.php in Geody Labs Dagger - The Cutting Edge r12feb2008, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the diredgeskins parameter. NOTE: the provenance of this information is unknown; the...

Remote file inclusion

PHP remote file inclusion vulnerability in skins/default.php in Geody Labs Dagger - The Cutting Edge r12feb2008, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dirinc parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in skins/default.php in Geody Labs Dagger - The Cutting Edge r12feb2008, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the diredgeskins parameter. NOTE: the provenance of this information is unknown; the...

CVE-2008-6636

CVE-2008-6636 describes a PHP remote file inclusion in Geody Labs Dagger – The Cutting Edge (r12feb2008). The vulnerability occurs in skins/default.php when register_globals is enabled and allows an attacker to cause arbitrary PHP code execution by supplying a URL via the dir_edge_skins parameter...

CVE-2008-6635

CVE-2008-6635 is a PHP remote file inclusion vulnerability in Geody Labs Dagger – The Cutting Edge (skins/default.php). When register_globals is enabled, an attacker can supply a URL in dir_inc to execute arbitrary PHP code on the server. The vulnerability is identified in r12feb2008 and is liste...

CVE-2008-6636

PHP remote file inclusion vulnerability in skins/default.php in Geody Labs Dagger - The Cutting Edge r12feb2008, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the diredgeskins parameter. NOTE: the provenance of this information is unknown; the...

CVE-2009-1248

Multiple PHP remote file inclusion vulnerabilities in Acute Control Panel 1.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the themedirectory parameter to 1 container.php and 2 header.php in themes/...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Acute Control Panel 1.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the themedirectory parameter to 1 container.php and 2 header.php in themes/...

CVE-2009-1248

Multiple PHP remote file inclusion vulnerabilities in Acute Control Panel 1.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the themedirectory parameter to 1 container.php and 2 header.php in themes/...

CVE-2009-1248

CVE-2009-1248 affects Acute Control Panel 1.0.0, with multiple PHP remote file inclusion vulnerabilities. The issue allows an attacker to craft a URL in the theme_directory parameter to container.php or header.php within themes/ to execute arbitrary PHP code on the server. The underlying root cau...

VirtueMart 1.1.2 SQL Injection / RFI / LFI / XSS

Author: Janek Vind "waraxe" Date: 24. January 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-71.html Description of vulnerable software: VirtueMart is an Open Source E-Commerce solution to be used together with a Content Management System CMS called Joomla! and Mambo. Joomla! an...

VirtueMart <= 1.1.2 Multiple Remote Vulnerabilities

No description provided by source. Author: Janek Vind "waraxe" Date: 24. January 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-71.html Description of vulnerable software: VirtueMart is an Open Source E-Commerce solution to be used together with a Content Management System CMS...

CVE-2006-7237

PHP remote file inclusion vulnerability in mod/ncphpmyadmin/core/libraries/ThemeManager.class.php in Ixprim 2.0 allows remote attackers to execute arbitrary PHP code via a URL in an unspecified parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2006-7237

PHP remote file inclusion vulnerability in mod/ncphpmyadmin/core/libraries/ThemeManager.class.php in Ixprim 2.0 allows remote attackers to execute arbitrary PHP code via a URL in an unspecified parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2006-7237

The CVE-2006-7237 entry describes a PHP remote file inclusion vulnerability in Ixprim 2.0, specifically in mod/nc_phpmyadmin/core/libraries/Theme_Manager.class.php. The underlying issue is a PHP remote file inclusion that allows an attacker to execute arbitrary PHP code via a URL supplied in an u...

virtuemart 1.1.2 - Multiple Vulnerabilities

virtuemart 1.1.2 - Multiple Vulnerabilities Author: Janek Vind "waraxe" Date: 24. January 2009 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-71.html Description of vulnerable software: VirtueMart is an Open Source E-Commerce solution to be used together with a Content Management...