YACS CMS 8.11 - 'update_trailer.php' Remote File Inclusion

-----------------remote file include----------------- script: YACS version 8.11 ------------------------------------------------------------------ download from: http://www.yetanothercommunitysystem.com/file-fetch/814-20081130-yacs-8.11rc30.zip ============================================== vul:...

YACS CMS 8.11 update_trailer.php Remote File Inclusion Vulnerability

No description provided by source. -----------------remote file include----------------- script: YACS version 8.11 ------------------------------------------------------------------ download from: http://www.yetanothercommunitysystem.com/file-fetch/814-20081130-yacs-8.11rc30.zip...

ZeroBoard4 pl8 (07.12.17) Multiple Remote/Local Vulnerability

No description provided by source. ZeroBoard4 pl8 07.12.17 Multiple Remote/Local Vulnerability bY [email protected] thx to : Flyh4t / ZeroBoard4 VERSION pl8 07.12.17is most famous and widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL...

CVE-2008-6138

PHP remote file inclusion vulnerability in adminhead.php in WebBiscuits Modules Controller 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in adminhead.php in WebBiscuits Modules Controller 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter...

CVE-2008-6138

PHP remote file inclusion vulnerability in adminhead.php in WebBiscuits Modules Controller 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter...

CVE-2009-0572

PHP remote file inclusion vulnerability in include/flatnux.php in FlatnuX CMS aka Flatnuke3 2009-01-27 and 2009-02-04, when registerglobals is enabled and magicquotesgpc disabled, allows remote attackers to execute arbitrary PHP code via a URL in the FNROOTPATH parameter to 1 index.php and 2...

Remote file inclusion

PHP remote file inclusion vulnerability in include/flatnux.php in FlatnuX CMS aka Flatnuke3 2009-01-27 and 2009-02-04, when registerglobals is enabled and magicquotesgpc disabled, allows remote attackers to execute arbitrary PHP code via a URL in the FNROOTPATH parameter to 1 index.php and 2...

CVE-2009-0572

CVE-2009-0572 affects FlatnuX CMS (aka Flatnuke3). The vulnerability is in the file include/flatnux.php and is triggered when PHP is configured with register_globals enabled and magic_quotes_gpc disabled . An attacker can supply a URL in the _FNROOTPATH parameter to either index.php or filemanage...

ea-gBook 0.1 - Remote Command Execution / Remote File Inclusion

!/usr/bin/perl ea-gBook 0.1 Remote Command Execution with RFI c99 Exploit Vendor: http://ea-style.de/ Download: http://ea-style.de/eddy/index.php?action=downgbookagb Author: bd0rk Contact: bd0rkathackermail.com site: http://www.soh-crew.it.tt thanks Joss for the code. RFI vuln!:...

ea-gBook 0.1 - Remote Command Execution Remote File Inclusion

ea-gBook 0.1 - Remote Command Execution Remote File Inclusion !/usr/bin/perl ea-gBook 0.1 Remote Command Execution with RFI c99 Exploit Vendor: http://ea-style.de/ Download: http://ea-style.de/eddy/index.php?action=downgbookagb Author: bd0rk Contact: bd0rkathackermail.com site:...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in SnippetMaster 2.2.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 SESSIONSCRIPTPATH parameter to includes/vars.inc.php and the 2 gpcltarlibdir parameter to...

CVE-2009-0530

Multiple PHP remote file inclusion vulnerabilities in SnippetMaster 2.2.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 SESSIONSCRIPTPATH parameter to includes/vars.inc.php and the 2 gpcltarlibdir parameter to...

Remote file inclusion

PHP remote file inclusion vulnerability in plugins/rssimporterfunctions.php in AdaptCMS Lite 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter...

CVE-2009-0530

CVE-2009-0530: The vulnerability lies in SnippetMaster 2.2.2 where remote file inclusion is possible when PHP register_globals is enabled. An attacker can cause arbitrary PHP code execution by supplying a URL through (1) _SESSION[SCRIPT_PATH] to includes/vars.inc.php and (2) g_pcltar_lib_dir to i...

CVE-2009-0527

AdaptCMS Lite 1.4 is affected by CVE-2009-0527 due to a PHP remote file inclusion in plugins/rss_importer_functions.php. An attacker can supply a URL in the sitepath parameter to execute arbitrary PHP code on the server. This is a remote code execution risk as described in the CVE entry. Public e...

CVE-2009-0530

Multiple PHP remote file inclusion vulnerabilities in SnippetMaster 2.2.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 SESSIONSCRIPTPATH parameter to includes/vars.inc.php and the 2 gpcltarlibdir parameter to...

CVE-2009-0513

Multiple PHP remote file inclusion vulnerabilities in WebFrame 0.76 allow remote attackers to execute arbitrary PHP code via a URL in the classFiles parameter to 1 admin/doc/index.php, 2 index.php, and 3 base/menu.php in mod/...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in A4Desk Event Calendar, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the v parameter...

CVE-2008-6103

PHP remote file inclusion vulnerability in index.php in A4Desk Event Calendar, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the v parameter...