Attachmax多个输入验证漏洞

BUGTRAQ ID: 31207 Attachmax是用于在网站提供视频内容的脚本。 Attachmax脚本中存在多个输入验证错误，允许恶意用户泄露敏感信息或执行文件包含攻击。 1. 远程文件包含 config.php页面没有正确的验证对relpath参数的输入便用于包含文件，这可能导致包含本地或外部资源的任意文件。成功利用这个漏洞要求打开了registerglobals选项。 2. 文件信息泄露 主文件夹中的info.php文件没有受到保护，攻击者可以从浏览器中直接看到这个文件，窃取服务器的敏感信息。 3. SQL盲注...

basebuilder 2.0.1 - main.inc.php Remote File Inclusion

basebuilder 2.0.1 - main.inc.php Remote File Inclusion :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl basebuilder = 2.0.1 Remote File Inclusion Vulnerability Script site:...

basebuilder <= 2.0.1 (main.inc.php) Remote File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl basebuilder = 2.0.1 Remote File Inclusion Vulnerability Script site:...

phpRealty 'view.php'远程文件包含漏洞

BUGTRAQ ID: 31213 CNCAN ID：CNCAN-2008091802 phpRealty是一款基于PHP的WEB应用程序。 phpRealty不正确处理用户提交的输入，远程攻击者可以利用漏洞以WEB进程权限执行任意PHP代码。 问题是'view.php'脚本对用户提交的WEB参数缺少过滤，提交远程服务器上的任意文件作为包含文件，可导致以WEB进程权限执行任意PHP代码。 phpRealty phpRealty 0.03 phpRealty phpRealty 0.02 升级到最新phpRealty 0.05版本： http://php-realty.com/...

PHP Crawler 'footer.php'远程文件包含漏洞

BUGTRAQ ID: 31217 CNCAN ID：CNCAN-2008091803 PHP Crawler是一款基于PHP的WEB应用程序。 PHP Crawler不正确处理用户提交的输入，远程攻击者可以利用漏洞以WEB进程权限执行任意PHP代码。 问题是'footer.php'脚本对用户提交的'footerfile'参数缺少过滤，提交远程服务器上的任意文件作为包含文件，可导致以WEB进程权限执行任意PHP代码。 PHP-Crawler 0.8 目前没有解决方案提供： http://php-crawler.sourceforge.net/...

[ECHO_ADV_101$2008] Attachmax Dolphin <= 2.1.0 Multiple Vulnerabilities

ECHOADV101$2008 ----------------------------------------------------------------------------------------- ECHOADV101$2008 Attachmax Dolphin = 2.1.0 Multiple Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date : September, 16 ...

CVE-2008-4141

Multiple PHP remote file inclusion vulnerabilities in x10Media x10 Automatic MP3 Script 1.5.5 allow remote attackers to execute arbitrary PHP code via a URL in the webroot parameter to 1 includes/functioncore.php and 2 templates/layoutlyrics.php...

CVE-2008-4138

CVE-2008-4138 affects the PHP-based TECHNOTE 7 skin system (skin_shop/standard/3_plugin_twindow/twindow_notice.php). The root cause is a remote file inclusion flaw: the parameter shop_this_skin_path is used in a way that allows an attacker to supply a URL and execute arbitrary PHP code. This yiel...

CVE-2008-4141

CVE-2008-4141 affects the x10Media x10 Automatic MP3 Script 1.5.5. The vulnerability is a remote file inclusion that allows an attacker to supply a URL in the web_root parameter to (1) includes/function_core.php and (2) templates/layout_lyrics.php, enabling arbitrary PHP code execution on the ser...

CVE-2008-4134

PHP remote file inclusion vulnerability in manager/static/view.php in phpRealty 0.03 and earlier, and possibly other versions before 0.05, allows remote attackers to execute arbitrary PHP code via a URL in the INC parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in manager/static/view.php in phpRealty 0.03 and earlier, and possibly other versions before 0.05, allows remote attackers to execute arbitrary PHP code via a URL in the INC parameter...

CVE-2008-4134

The CVE-2008-4134 issue affects phpRealty 0.03 and earlier (and possibly other versions before 0.05). The root cause is a PHP remote file inclusion vulnerability in manager/static/view.php that lets an attacker supply a URL via the INC parameter to execute arbitrary PHP code on the server. The av...

CVE-2008-4134

PHP remote file inclusion vulnerability in manager/static/view.php in phpRealty 0.03 and earlier, and possibly other versions before 0.05, allows remote attackers to execute arbitrary PHP code via a URL in the INC parameter...

x10media-rfi.txt

THUNDER X10media Mp3 Search Engine v1.5.5 Remote File Inclusion Vulnerability Founded by : THUNDER Dork: "This search engine is in no way intended for illegal downloads." Vuln Code: file : /includes/functioncore.php -88.- include $webroot."js/Mp3Player.php";...

X10media Mp3 Search Engine 1.5.5 Remote File Inclusion Vulnerability

No description provided by source. THUNDER X10media Mp3 Search Engine v1.5.5 Remote File Inclusion Vulnerability Founded by : THUNDER t4hathotmail.fr Dork: "This search engine is in no way intended for illegal downloads." Vuln Code: file : /includes/functioncore.php -88.- include...

technote-rfi.txt

-----------webDEViL - w3bd3vil at gmail db5c com ----------- -----------Technote 7 Remote File Inclusion------------------------ ----------developers site: http://www.technote.co.kr-------------- bash-3.1 cat technote7/skinshop/standard/3plugintwindow/twindownotice.php ...snip... $TWINSET'dirpath...

phpRealty 0.3 - INC Remote File Inclusion

phpRealty 0.3 - INC Remote File Inclusion -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpRealty D.O.M Labs - Security Researchers - www.domlabs.org vuln code: ------------- 11: if!isset$GET'propID' || !isnumeric$GET'propID' || empty$GET'propID' 13: return; 17:...

phprealty-rfi.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpRealty D.O.M Labs - Security Researchers - www.domlabs.org vuln code: ------------- 11: if!isset$GET'propID' || !isnumeric$GET'propID' || empty$GET'propID' 13: return; 17: include$INC."currconv.class.php"; // -------- Vuln Line!! // t...

Technote 7 - 'shop_this_skin_path' Remote File Inclusion

-----------webDEViL - w3bd3vil at gmail dot com ----------- -----------Technote 7 Remote File Inclusion------------------------ ----------developers site: http://www.technote.co.kr-------------- bash-3.1 cat technote7/skinshop/standard/3plugintwindow/twindownotice.php ...snip... $TWINSET'dirpath'...

phpRealty 0.3 - 'INC' Remote File Inclusion

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpRealty D.O.M Labs - Security Researchers - www.domlabs.org vuln code: ------------- 11: if!isset$GET'propID' || !isnumeric$GET'propID' || empty$GET'propID' 13: return; 17: include$INC."currconv.class.php"; // -------- Vuln Line!! // t...