sma-db 0.3.12 - Remote File Inclusion Cross-Site Scripting

sma-db 0.3.12 - Remote File Inclusion Cross-Site Scripting -----------------:Remote File Include/cross site script:----------------- script:SMA-DB v0.3.12 ------------------------------------------------------------------ download from:http://bluevirus.ch/media/downloads/SMA-DBv0.3.12.zip...

sma-db 0.3.12 - Remote File Inclusion / Cross-Site Scripting

-----------------:Remote File Include/cross site script:----------------- script:SMA-DB v0.3.12 ------------------------------------------------------------------ download from:http://bluevirus.ch/media/downloads/SMA-DBv0.3.12.zip ------------------------------------------------------------------...

CVE-2008-6006

Multiple PHP remote file inclusion vulnerabilities in Micronation Banking System minba 1.5.0 allow remote attackers to execute arbitrary PHP code via a URL in the minsoftpath parameter to 1 utdbaccess.php and 2 utgnmessage.php in utility/...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Micronation Banking System minba 1.5.0 allow remote attackers to execute arbitrary PHP code via a URL in the minsoftpath parameter to 1 utdbaccess.php and 2 utgnmessage.php in utility/...

CVE-2008-6006

Multiple PHP remote file inclusion vulnerabilities in Micronation Banking System minba 1.5.0 allow remote attackers to execute arbitrary PHP code via a URL in the minsoftpath parameter to 1 utdbaccess.php and 2 utgnmessage.php in utility/...

CVE-2008-6006

CVE-2008-6006 involves multiple PHP remote file inclusion vulnerabilities in Micronation Banking System (minba) 1.5.0. The flaw allows an attacker to cause remote PHP code execution by supplying a URL in the minsoft_path parameter to (1) utdb_access.php and (2) utgn_message.php in the utility/ di...

CVE-2009-0294

Multiple PHP remote file inclusion vulnerabilities in WB News 2.0.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 search.php, 2 archive.php, 3 comments.php, and 4 news.php; 5 News.php, 6 SendFriend.php, 7...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in WB News 2.0.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 search.php, 2 archive.php, 3 comments.php, and 4 news.php; 5 News.php, 6 SendFriend.php, 7...

CVE-2009-0294

CVE-2009-0294 involves multiple PHP remote file inclusion vulnerabilities in WB News 2.0.1. The issue arises when register_globals is enabled, allowing remote code execution via a URL in config[installdir] for files in base/ and admin/ (e.g., search.php, archive.php, comments.php, news.php, News....

CVE-2009-0294

Multiple PHP remote file inclusion vulnerabilities in WB News 2.0.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 search.php, 2 archive.php, 3 comments.php, and 4 news.php; 5 News.php, 6 SendFriend.php, 7...

CVE-2008-5949

Multiple PHP remote file inclusion vulnerabilities in ccTiddly 1.7.4 and 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the cctbase parameter to 1 index.php; 2 handle/proxy.php; 3 header.php, 4 include.php, and 5 workspace.php in includes/; and 6 plugins/RSS/files/rss.php...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in ccTiddly 1.7.4 and 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the cctbase parameter to 1 index.php; 2 handle/proxy.php; 3 header.php, 4 include.php, and 5 workspace.php in includes/; and 6 plugins/RSS/files/rss.php...

CVE-2008-5949

ccTiddly is vulnerable to multiple remote file inclusion (RFI) flaws in versions 1.7.4 and 1.7.6 due to insufficient sanitization of user-supplied data in the cct_base parameter used by index.php, handle/proxy.php, header.php, include.php, workspace.php, and plugins/RSS/files/rss.php. Exploitatio...

CVE-2008-5949

Multiple PHP remote file inclusion vulnerabilities in ccTiddly 1.7.4 and 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the cctbase parameter to 1 index.php; 2 handle/proxy.php; 3 header.php, 4 include.php, and 5 workspace.php in includes/; and 6 plugins/RSS/files/rss.php...

CVE-2008-5938

PHP remote file inclusion vulnerability in assets/snippets/reflect/snippet.reflect.php in MODx CMS 0.9.6.2 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the reflectbase parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in include/classyapbbcooker.php in YapBB 1.2.Beta 2 allows remote attackers to execute arbitrary PHP code via a URL in the cfgIncludeDirectory parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in assets/snippets/reflect/snippet.reflect.php in MODx CMS 0.9.6.2 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the reflectbase parameter...

CVE-2008-5947

CVE-2008-5947 : In YapBB 1.2.Beta 2, a PHP remote file inclusion flaw exists in include/class_yapbbcooker.php triggered by a URL in the cfgIncludeDirectory parameter. The vulnerability allows remote attackers to cause arbitrary PHP code execution. The CVSS metrics indicate Network access, require...

CVE-2008-5938

The vulnerability CVE-2008-5938 affects MODx CMS ≤ 0.9.6.2, where PHP remote file inclusion is possible through assets/snippets/reflect/snippet.reflect.php via the reflect_base parameter when magic_quotes_gpc is disabled. This could allow an attacker to execute arbitrary PHP code on the server. C...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Cant Find A Gaming CMS CFAGCMS 1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 main and 2 right parameters...