OpenPro 1.3.1 - 'search_wA.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/30264/info OpenPro is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to execute malicious PHP code in the context of the webserver process. This may allow the...

Remote file inclusion

PHP remote file inclusion vulnerability in ktmlpro/includes/ktedit/toolbar.php in gapicms 9.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the dirDepth parameter...

CVE-2008-3183

PHP remote file inclusion vulnerability in ktmlpro/includes/ktedit/toolbar.php in gapicms 9.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the dirDepth parameter...

CVE-2008-3183

CVE-2008-3183 : In gapicms 9.0.2, a PHP remote file inclusion vulnerability exists in ktmlpro/includes/ktedit/toolbar.php. An attacker can supply a URL via the dirDepth parameter to execute arbitrary PHP code on the server. This is a classic RFI resulting in remote code execution on vulnerable in...

Pragyan CMS 2.6.2 - sourceFolder Remote File Inclusion

Pragyan CMS 2.6.2 - sourceFolder Remote File Inclusion ------------------------------------------------------------- - Persian Boys Hacking Team -:- 2008 - - discovered by N3TR00T3R at Y! dot com - pragyan 2.6.2 Remote File Includion - download...

pSys 0.7.0 Alpha Multiple Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================= pSys 0.7.0 Alpha Multiple Remote File Inclusion Vulnerability ============================================================= ==================================================== ...

Pragyan CMS 2.6.2 - 'sourceFolder' Remote File Inclusion

------------------------------------------------------------- - Persian Boys Hacking Team -:- 2008 - - discovered by N3TR00T3R at Y! dot com - pragyan 2.6.2 Remote File Includion - download :http://sourceforge.net/project/showfiles.php?groupid=220286 - sp tnx :...

Pragyan CMS 2.6.2 (sourceFolder) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Pragyan CMS 2.6.2 sourceFolder Remote File Inclusion Vulnerability ====================================================================...

Facebook Newsroom 'includes/home.php'远程文件包含漏洞

BUGTRAQ ID: 30185 CNCAN ID：CNCAN-2008071405 Facebook Newsroom CMS是一款内容管理程序。 Facebook Newsroom CMS不正确处理用户提交的WEB参数，远程攻击者可以利用漏洞以应用程序权限执行任意PHP代码。 问题是'home.php'脚本对用户提交给'path'参数缺少过滤，构建特殊的文件作为包含参数，可导致以应用程序权限执行任意PHP代码。 NewsCloud Facebook Newsroom CMS 0.5.0 Beta 1 目前没有解决方案提供：...

Phpcms 2 0 0 7 remote file inclusion vulnerability-vulnerability warning-the black bar safety net

zzPhpcms 2 0 0 7 remote file include vulnerability url:http://www. wolvez. org/forum/redirect. php? tid=1 8 2&goto=lastpost This vulnerability is a more common variable coverage holes, where the transfer is due to the discovery of this vulnerability if it is a white box that you want to have a...

pragyan-rfi.txt

------------------------------------------------------------- - Persian Boys Hacking Team -:- 2008 - - discovered by N3TR00T3R at Y! dot com - pragyan 2.6.2 Remote File Includion - download :http://sourceforge.net/project/showfiles.php?groupid=220286 - sp tnx :...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 dirplugins parameter to a HTMLSax3.php and b safehtml.php in plugins/safehtml/ and the 2 sIncPath parameter to c...

Remote file inclusion

PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sIncPath parameter...

CVE-2008-3166

The CVE-2008-3166 entry concerns a PHP remote file inclusion (RFI) vulnerability in BoonEx Ray 3.5, caused by failure to sanitize the sIncPath input when register_globals is enabled. The vulnerability allows an attacker to supply a URL to include and execute arbitrary PHP code on the affected ser...

CVE-2008-3167

Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 dirplugins parameter to a HTMLSax3.php and b safehtml.php in plugins/safehtml/ and the 2 sIncPath parameter to c...

CVE-2008-3165

Directory traversal vulnerability in rss.php in fuzzylime cms 3.01a and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter, as demonstrated using content.php, a different vector than CVE-2007-4805...

CVE-2008-3166

PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sIncPath parameter...

CVE-2008-3167

CVE-2008-3167 concerns BoonEx Dolphin 6.1.2 and related components, showing multiple PHP remote file inclusion vulnerabilities. The issues allow an attacker to execute arbitrary PHP code by supplying a URL to unsafely handled inputs: (1) dir[plugins] to HTMLSax3.php and safehtml.php within plugin...

Phpcms 2007 common.inc.php远程文件包含漏洞

该cms的核心配置文件/include/common.inc.php有缺陷 -------------------------------------------- //23行开始 @extract$POST, EXTROVERWRITE; @extract$GET, EXTROVERWRITE; unset$POST, $GET; ------------------------------------------------ 这里extract函数会导致变量覆盖，可能引发一系列的问题...

gapicms v9.0.2 (dirDepth) Remote File Inclusion Vulnerability

gapicms v9.0.2 dirDepth Remote File Inclusion Vulnerability Found : Ghost Hacker R-H TeaM |, .-. .-. ,| HOME : www.Real-Hack.net | o/ o | Email : [email protected] |/ / | Script : gapicms v9.0.2 Download Script : http://heanet.dl.sourceforge.net/sourceforge/gapicms/gapicmsv9.0.2stable.tar.gz...