19447 matches found
Remote file inclusion
PHP remote file inclusion vulnerability in sloginlib.inc.php in Simple Text-File Login Script SiTeFiLo 1.0.6 allows remote attackers to execute arbitrary PHP code via a URL in the sloginpath parameter...
Directory traversal
Multiple directory traversal vulnerabilities in Aperto Blog 0.1.1 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 action parameter to admin.php and the 2 get parameter to index.php. NOTE: in some environments, this can be leveraged fo...
CVE-2008-5764
The CVE-2008-5764 entry affects WorkSimple 1.2.1 and describes a PHP remote file inclusion in calendar.php exploitable when register_globals is enabled. An attacker can supply a URL in the lang parameter to execute arbitrary PHP code. The connected documents confirm the vulnerability details but ...
CVE-2008-5763
The CVE-2008-5763 entry describes a PHP remote file inclusion vulnerability in Simple Text-File Login Script (SiTeFiLo) 1.0.6. The flaw resides in slogin_lib.inc.php, where an attacker can supply a URL in the slogin_path parameter to trigger remote code execution. Affected component: slogin_lib.i...
phpList cline Parameter Array Remote File Inclusion
The version of phpList installed on the remote host fails to filter user input to the 'clinec' parameter before passing it to a PHP 'include' function in 'admin/index.php'. Regardless of PHP's 'registerglobals' setting, an unauthenticated attacker can exploit this issue to view arbitrary files on...
Remote file inclusion
PHP remote file inclusion vulnerability in lib/jpgraph/jpgrapherrhandler.inc.php in Sandbox 1.4.1 might allow remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: the issue, if any, may be located in Aditus JpGraph rather than Sandbox. If so, then this should not be treat...
CVE-2008-5694
PHP remote file inclusion vulnerability in lib/jpgraph/jpgrapherrhandler.inc.php in Sandbox 1.4.1 might allow remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: the issue, if any, may be located in Aditus JpGraph rather than Sandbox. If so, then this should not be treat...
CVE-2008-5694
CVE-2008-5694 describes a PHP remote file inclusion vulnerability in lib/jpgraph/jpgraph_errhandler.inc.php within Sandbox 1.4.1 (and possibly Aditus JpGraph). An attacker could cause arbitrary PHP code execution via unspecified vectors. The vulnerable component is the JPGraph-related error handl...
CVE-2008-5671
PHP remote file inclusion vulnerability in index.php in Joomla! 1.0.11 through 1.0.14, when RGEMULATION is enabled in configuration.php, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in index.php in Joomla! 1.0.11 through 1.0.14, when RGEMULATION is enabled in configuration.php, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...
PT-2008-6746 · Php · Php
Name of the Vulnerable Software and Affected Versions: Sandbox version 1.4.1 Description: A remote file inclusion issue in lib/jpgraph/jpgraph errhandler.inc.php might allow remote attackers to execute arbitrary PHP code. The issue may be located in Aditus JpGraph rather than Sandbox...
CVE-2008-5671
CVE-2008-5671 affects Joomla! web CMS prior to 1.0.15, specifically versions 1.0.11–1.0.14. The vulnerability arises when RG_EMULATION is enabled in configuration.php, allowing a remote attacker to craft a URL that causes a PHP file to be included via the mosConfig_absolute_path parameter, leadin...
Pre News Manager Remote File Inclusion
--------------------------------------------------------- Portal Name: Pre News Manager Vendor : http://preproject.com Author : PouyaServer , [email protected] Vulnerability : RFI --------------------------------------------------------- RFI:...
CVE-2008-5585
Multiple PHP remote file inclusion vulnerabilities in lcxBBportal 0.1 Alpha 2 allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter to 1 portal/includes/portalblock.php and 2 includes/acp/acplcxbbportal.php...
CVE-2008-5585
The CVE describes multiple PHP remote file inclusion vulnerabilities in lcxBBportal 0.1 Alpha 2 that allow an attacker to execute arbitrary PHP code. Affected component: portal includes/portal_block.php and includes/acp/acp_lcxbbportal.php; vulnerability occurs via the phpbb_root_path parameter. ...
CVE-2008-5585
Multiple PHP remote file inclusion vulnerabilities in lcxBBportal 0.1 Alpha 2 allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter to 1 portal/includes/portalblock.php and 2 includes/acp/acplcxbbportal.php...
WorkSimple 1.2.1 RFI / Data Disclosure
START 0x01 Informations: Script : WorkSimple 1.2.1 Download : http://www.hotscripts.com/jump.php?listingid=85112&jumptype=1 Vulnerability : Remote File Inclusion / Sensitive Data Disclosure Author : Osirys Contact : osirysatlivedotit Notes : Proud to be Italian Greets: : XaDoS, x0r, emgent, Jay...
Remote file inclusion
PHP remote file inclusion vulnerability in mini-pub.php/front-end/img.php in mini-pub 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the sFileName parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in index.php in sCssBoard 1.0, 1.1, 1.11, and 1.12 allows remote attackers to execute arbitrary PHP code via a URL in the incfunction parameter...