CVE-2008-6206

CVE-2008-6206 involves multiple PHP remote file inclusion vulnerabilities in RobotStats 0.1. The issue affects the scripts graph.php and robotstats.inc.php , where an attacker can supply a URL via the DOCUMENT_ROOT parameter to trigger remote code execution on the server. The vulnerability’s root...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the EASYSITEBASE parameter to 1 browser.php, 2 imageeditor.php and 3 skinchooser.php in configuration/. NOTE: the provenance of this information is...

CVE-2008-6196

Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the EASYSITEBASE parameter to 1 browser.php, 2 imageeditor.php and 3 skinchooser.php in configuration/. NOTE: the provenance of this information is...

lastRSS autoposting bot MOD 0.1.3 - phpbb_root_path Remote File Inclusion

lastRSS autoposting bot MOD 0.1.3 - phpbbrootpath Remote File Inclusion source: https://www.securityfocus.com/bid/33843/info lastRSS autoposting bot MOD is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit...

phpBB 3 Remote File Inclusion

phpBB 3 autopost bot mod cachetime = 0; // not used in this mod $rss-itemslimit = $config'lastrssapitemslimit'; // default limit of items to post $rss-type = $config'lastrsstype'; // connection type fopen / curl // init lastRSS autopost MOD ! // check if we have some feeds in database to check $s...

CVE-2008-6196

Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the EASYSITEBASE parameter to 1 browser.php, 2 imageeditor.php and 3 skinchooser.php in configuration/. NOTE: the provenance of this information is...

CVE-2008-6196

Multiple PHP remote file inclusion vulnerabilities affect Philippe CROCHAT EasySite 2.0, allowing an attacker to execute arbitrary PHP code via a URL parameter (EASYSITE_BASE) passed to configuration/. scripts browser.php, image_editor.php, and skin_chooser.php. Underlying issue: remote file incl...

lastRSS autoposting bot MOD 0.1.3 - 'phpbb_root_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/33843/info lastRSS autoposting bot MOD is prone to a remote file-include vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP co...

phpBB 3 - autopost bot mod 0.1.3 Remote File Inclusion

phpBB 3 - autopost bot mod 0.1.3 Remote File Inclusion phpBB 3 autopost bot mod cachetime = 0; // not used in this mod $rss-itemslimit = $config'lastrssapitemslimit'; // default limit of items to post $rss-type = $config'lastrsstype'; // connection type fopen / curl...

CVE-2008-6172

Summary of CVE-2008-6172 (Joomla! RWCards 3.0.11) : A directory traversal flaw in captcha/captcha_image.php when magic_quotes_gpc is disabled allows an attacker to include and execute arbitrary local files through the img parameter. The vulnerable component is the RWCards (com_rwcards) 3.0.11 Joo...

Remote file inclusion

PHP remote file inclusion vulnerability in moduli/libri/index.php in phpyabs 0.1.2 allows remote attackers to execute arbitrary PHP code via a URL in the Azione parameter...

CVE-2009-0639

PHP remote file inclusion vulnerability in moduli/libri/index.php in phpyabs 0.1.2 allows remote attackers to execute arbitrary PHP code via a URL in the Azione parameter...

CVE-2009-0639

CVE-2009-0639 is a PHP remote file inclusion vulnerability affecting phpyabs 0.1.2, specifically in moduli/libri/index.php. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the Azione parameter. Public references (e.g., SecurityFocus BID 33670, Exploit-DB 8005)...

CVE-2009-0639

PHP remote file inclusion vulnerability in moduli/libri/index.php in phpyabs 0.1.2 allows remote attackers to execute arbitrary PHP code via a URL in the Azione parameter...

CVE-2009-0595

PHP remote file inclusion vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter...

CVE-2009-0595

CVE-2009-0595 affects phpSkelSite 1.4: PHP remote file inclusion in skysilver/login.tpl.php when register_globals is enabled and magic_quotes_gpc is disabled. An attacker can cause arbitrary PHP code execution by supplying a URL in the theme parameter. Public references indicate existing exploit ...

YACS CMS 8.11 Remote File Inclusion

-----------------remote file include----------------- script: YACS version 8.11 ------------------------------------------------------------------ download from: http://www.yetanothercommunitysystem.com/file-fetch/814-20081130-yacs-8.11rc30.zip ============================================== vul:...

YACS CMS 8.11 update_trailer.php Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ==================================================================== YACS CMS 8.11 updatetrailer.php Remote File Inclusion Vulnerability ==================================================================== -----------------remote file...

YACS CMS 8.11 - update_trailer.php Remote File Inclusion

YACS CMS 8.11 - updatetrailer.php Remote File Inclusion -----------------remote file include----------------- script: YACS version 8.11 ------------------------------------------------------------------ download from:...