CVE-2008-6421

CVE-2008-6421: A PHP remote file inclusion vulnerability in Social Site Generator (SSG) 2.0, via the path parameter in social_game_play.php, allows a remote attacker to execute arbitrary PHP code. Affected software/component: Social Site Generator 2.0; vulnerability type: remote file inclusion. I...

CVE-2008-6408

PHP remote file inclusion vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary PHP code via a URL in the framefile parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary PHP code via a URL in the framefile parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in themes/default/include/html/insert.inc.php in OpenRat 0.8-beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tpldir parameter...

CVE-2008-6408

PHP remote file inclusion vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to execute arbitrary PHP code via a URL in the framefile parameter...

CVE-2008-6402

CVE-2008-6402 describes a PHP remote file inclusion vulnerability in the Sofi WebGui package, affecting version 0.6.3 PRE and earlier. The flaw resides in hu/modules/reg-new/modstart.php, where an attacker can supply a URL in the mod_dir parameter to cause arbitrary PHP code execution on the serv...

CVE-2008-6408

CVE-2008-6408 describes a PHP remote file inclusion in frame.php of ol’bookmarks manager 0.7.5. The vulnerability allows an attacker to cause the application to include a remote file by supplying a URL in the framefile parameter, enabling arbitrary PHP code execution on the server. The reported i...

CVE-2008-6403

PHP remote file inclusion vulnerability in themes/default/include/html/insert.inc.php in OpenRat 0.8-beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tpldir parameter...

CVE-2008-6402

PHP remote file inclusion vulnerability in hu/modules/reg-new/modstart.php in Sofi WebGui 0.6.3 PRE and earlier allows remote attackers to execute arbitrary PHP code via a URL in the moddir parameter...

CVE-2008-6403

The CVE-2008-6403 issue affects OpenRat 0.8-beta4 and earlier, where a PHP remote file inclusion vulnerability in themes/default/include/html/insert.inc.php allows an attacker to execute arbitrary PHP code via a URL parameter (tpl_dir). The underlying cause is improper handling of the tpl_dir par...

Wili-CMS 0.4.0 - Local File Inclusion Remote File Inclusion Authentication Bypass

Wili-CMS 0.4.0 - Local File Inclusion Remote File Inclusion Authentication Bypass Salvatore "drosophila" Fresta + Application: Wili-CMS + Version: 0.4.0 + Website: http://wili-cms.sourceforge.net/ + Bugs: A Multiple Remote/Local File Inclusion B Authentication Bypass + Exploitation: Remote + Date...

Ghostscripter Amazon Shop Remote File Inclusion

!/usr/bin/perl ghostscripter Amazon Shop Remote File Include Exploit Script :http://ghostscripter.com/amazonshop.php Original Advisory:http://www.milw0rm.com/exploits/8145 By d3b4g Mail:bl4ckend atgmail.com use LWP::UserAgent; $myPath = $ARGV0; $Pathtocmd = $ARGV1; $cmdv = $ARGV2;...

tghostscripter Amazon Shop - Cross-Site Scripting / Directory Traversal / Remote File Inclusion

ghostscripter Amazon Shop XSS/directory traversalUnix/File IncludeVulns - Price: $549 + Discovered By d3b4g + script: http://ghostscripter.com/amazonshop.php + Greetz : str0ke & My friends - Follow me on twitter www.twitter.com/schaba + This script is suffer from Multiple Vulnerabilities...

tghostscripter Amazon Shop - Cross-Site Scripting Directory Traversal Remote File Inclusion

tghostscripter Amazon Shop - Cross-Site Scripting Directory Traversal Remote File Inclusion + ghostscripter Amazon Shop XSS/directory traversalUnix/File IncludeVulns - Price: $549 + Discovered By d3b4g + script: http://ghostscripter.com/amazonshop.php + Greetz : str0ke & My friends - Follow me on...

Remote file inclusion

PHP remote file inclusion vulnerability in include/global.php in Multi SEO phpBB 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the pfad parameter...

CVE-2008-6377

CVE-2008-6377 is a PHP remote file inclusion vulnerability in Multi SEO phpBB 1.1.0. The flaw exists in include/global.php and allows a remote attacker to execute arbitrary PHP code by supplying a URL in the pfad parameter, leading to potential compromise of the affected system. Affected product/...

CVE-2008-6347

PHP remote file inclusion vulnerability in lib/onguma.class.php in the Onguma Time Sheet comongumatimesheet20 2.0 4b component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in lib/onguma.class.php in the Onguma Time Sheet comongumatimesheet20 2.0 4b component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2008-6361

CVE-2008-6361 describes a directory traversal vulnerability in the lang parameter of index.php for InSun Feed CMS 1.7.3 19Beta. The root cause is directory traversal sequences that allow remote attackers to include and execute arbitrary local files. Reported impact focuses on partial confidential...

CVE-2008-6347

CVE-2008-6347 is a PHP remote file inclusion vulnerability in Onguma Time Sheet (com_ongumatimesheet20) for Joomla! 2.0 4b. The flaw allows RCE by passing a URL to mosConfig_absolute_path that is used by lib/onguma.class.php. Public exploits exist (e.g., Exploit-DB entry 6976; CANVAS-related note...