CVE-2008-3769

PHP remote file inclusion vulnerability in admin/createordernew.php in Freeway 1.4.1.171, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the includepage parameter...

CVE-2008-3769

CVE-2008-3769 describes a PHP remote file inclusion vulnerability in Freeway 1.4.1.171, specifically in admin/create_order_new.php. When register_globals is enabled, an attacker can supply a URL in the include_page parameter to cause the application to include remote PHP code, enabling arbitrary ...

Aardvark Topsites <= 4.2.2 Remote File Inclusion Vulnerability

The remote system contains a PHP application that is prone to remote file inclusions attacks. Description : Aardvark Topsites PHP is installed on the remote host. It is an open source Toplist management system written in PHP. The application does not sanitize user-supplied input to the...

Remote file inclusion

PHP remote file inclusion vulnerability in userlanguage.php in DeeEmm CMS DMCMS 0.7.4 allows remote attackers to execute arbitrary PHP code via a URL in the languagedir parameter...

CVE-2008-3721

CVE-2008-3721 affects DeeEmm CMS (DMCMS) 0.7.4. The vulnerability is a PHP remote file inclusion in user_language.php triggered by a URL in the language_dir parameter, allowing remote attackers to execute arbitrary PHP code. The NVD/CVE records consistently describe this RFI flaw with CVSS v2 bas...

Phpcms 2 0 0 7 remote file inclusion vulnerability-vulnerability warning-the black bar safety net

PS:@extract function. Phpcms 2 0 0 7 remote file include vulnerability Flyh4t w. s. t www.wolvez.org The cms is the core configuration file/include/common. inc. php has a defect -------------------------------------------- //2 3 row start @extract$POST, EXTROVERWRITE; @extract$GET, EXTROVERWRITE;...

CVE-2008-3707

Multiple PHP remote file inclusion vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to 1 flatread.php, 2 post.php, 3 processpost.php, 4 processsearch.php, 5 forum.php, 6 processsubscribe.php, 7 read.php, 8...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to 1 flatread.php, 2 post.php, 3 processpost.php, 4 processsearch.php, 5 forum.php, 6 processsubscribe.php, 7 read.php, 8...

CVE-2008-3707

Multiple PHP remote file inclusion vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to 1 flatread.php, 2 post.php, 3 processpost.php, 4 processsearch.php, 5 forum.php, 6 processsubscribe.php, 7 read.php, 8...

CVE-2008-3707

CVE-2008-3707 describes multiple PHP remote file inclusion vulnerabilities in CyBoards PHP Lite (versions around 1.21/1.25) that allow an attacker to execute arbitrary PHP code by supplying a malicious URL in the script_path parameter to a long list of scripts (e.g., flat_read.php, post.php, proc...

xnova-rfi.txt

Name: XnovaOgame Remote File Inclusion Author : NuclearHaxor Contact MSN: [email protected] homepage of xnova: http://xnova.fr/ Vuln file: includes/todofleetcontrol.php Vuln line: include$ugamelarootpath . 'includes/functions/FlyingFleetHandler.'.$phpEx; - but no declared ugamelarootpath ;...

XNova 0.8 sp1 (xnova_root_path) Remote File Inclusion Vulnerability

No description provided by source. Name: XnovaOgame Remote File Inclusion Author : NuclearHaxor Contact MSN: [email protected] homepage of xnova: http://xnova.fr/ Vuln file: includes/todofleetcontrol.php Vuln line: include$ugamelarootpath . 'includes/functions/FlyingFleetHandler.'.$phpEx; ...

XNova 0.8 sp1 - xnova_root_path Remote File Inclusion

XNova 0.8 sp1 - xnovarootpath Remote File Inclusion Name: XnovaOgame Remote File Inclusion Author : NuclearHaxor Contact MSN: [email protected] homepage of xnova: http://xnova.fr/ Vuln file: includes/todofleetcontrol.php Vuln line: include$ugamelarootpath...

XNova 0.8 sp1 (xnova_root_path) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== XNova 0.8 sp1 xnovarootpath Remote File Inclusion Vulnerability =================================================================== Name: XnovaOgame Remote File Inclusion...

XNova 0.8 sp1 - 'xnova_root_path' Remote File Inclusion

Name: XnovaOgame Remote File Inclusion Author : NuclearHaxor Contact MSN: [email protected] homepage of xnova: http://xnova.fr/ Vuln file: includes/todofleetcontrol.php Vuln line: include$ugamelarootpath . 'includes/functions/FlyingFleetHandler.'.$phpEx; - but no declared ugamelarootpath ;...

DeeEmm CMS (DMCMS) 0.7.4 Multiple Remote Vulnerabilities

No description provided by source. DeeEmm CMS Sql Injection/Rfi AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : IRCRASH R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr Script Download :...

Meet#Web 0.8 - RegRightsResource.class.php?root_path Remote File Inclusion

MeetWeb 0.8 - RegRightsResource.class.php?rootpath Remote File Inclusion source: https://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacke...

YapBB 1.2 - class_yapbbcooker.php Remote File Inclusion

YapBB 1.2 - classyapbbcooker.php Remote File Inclusion source: https://www.securityfocus.com/bid/30686/info YapBB is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file...

Meet#Web 0.8 - modules.php?root_path Remote File Inclusion

MeetWeb 0.8 - modules.php?rootpath Remote File Inclusion source: https://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise...

Meet#Web 0.8 - 'ManagerRightsResource.class.php?root_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/30673/info MeetWeb is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...