CVE-2008-2645

Multiple PHP remote file inclusion vulnerabilities in Brim formerly Booby 1.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the renderer parameter to template.tpl.php in 1 barrel/, 2 barry/, 3 mylook/, 4 oerdec/, 5 penguin/, 6 sidebar/, 7 slashdot/, and 8 text-only/ in...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in DesktopOnNet 3 Beta allow remote attackers to execute arbitrary PHP code via a URL in the apppath parameter to 1 don3requiem.don3app/don3requiem.php and 2 frontpage.don3app/frontpage.php...

Directory traversal

Multiple PHP remote file inclusion vulnerabilities in Brim formerly Booby 1.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the renderer parameter to template.tpl.php in 1 barrel/, 2 barry/, 3 mylook/, 4 oerdec/, 5 penguin/, 6 sidebar/, 7 slashdot/, and 8 text-only/ in...

CVE-2008-2649

Multiple PHP remote file inclusion vulnerabilities in DesktopOnNet 3 Beta allow remote attackers to execute arbitrary PHP code via a URL in the apppath parameter to 1 don3requiem.don3app/don3requiem.php and 2 frontpage.don3app/frontpage.php...

CVE-2008-2645

CVE-2008-2645 affects Brim (formerly Booby) 1.0.1. It describes multiple PHP remote file inclusion vulnerabilities: an attacker can trigger arbitrary PHP code execution by supplying a URL to the renderer parameter for template.tpl.php in eight template paths (barrel/, barry/, mylook/, oerdec/, pe...

CVE-2008-2649

Multiple PHP remote file inclusion vulnerabilities in DesktopOnNet 3 Beta allow remote attackers to execute arbitrary PHP code via a URL in the apppath parameter to 1 don3requiem.don3app/don3requiem.php and 2 frontpage.don3app/frontpage.php...

CVE-2008-2645

Multiple PHP remote file inclusion vulnerabilities in Brim formerly Booby 1.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the renderer parameter to template.tpl.php in 1 barrel/, 2 barry/, 3 mylook/, 4 oerdec/, 5 penguin/, 6 sidebar/, 7 slashdot/, and 8 text-only/ in...

CVE-2008-2649

CVE-2008-2649 affects DesktopOnNet 3 Beta, where two PHP scripts (don3_requiem.php and frontpage.php) are vulnerable to remote file inclusion via the app_path URL parameter, allowing an attacker to execute arbitrary PHP code on the server. The vulnerability is triggered by supplying a crafted URL...

BrowserCRM 5.002.00 (clients.php) Remote File Inclusion Vulnerability

No description provided by source. script: browsercrm-5.002.00 remote file including Download From: http://www.browsercrm.com/download/browsercrm-5.002.00.tar.gz dork: Copyright 2007 BrowserCRM Ltd Vuln Code : requireonce$bcrmpubroot . "/publicprepend.inc.php" exploit:...

browsercrm-rfi.txt

script: browsercrm-5.002.00 remote file including Download From: http://www.browsercrm.com/download/browsercrm-5.002.00.tar.gz dork: Copyright © 2007 BrowserCRM Ltd Vuln Code : requireonce$bcrmpubroot . "/publicprepend.inc.php" exploit:...

BrowserCRM 5.002.00 - 'clients.php' Remote File Inclusion

script: browsercrm-5.002.00 remote file including Download From: http://www.browsercrm.com/download/browsercrm-5.002.00.tar.gz dork: Copyright © 2007 BrowserCRM Ltd Vuln Code : requireonce$bcrmpubroot . "/publicprepend.inc.php" exploit:...

BrowserCRM 5.002.00 (clients.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== BrowserCRM 5.002.00 clients.php Remote File Inclusion Vulnerability ===================================================================== script: browsercrm-5.002.00...

BrowserCRM 5.002.00 - clients.php Remote File Inclusion

BrowserCRM 5.002.00 - clients.php Remote File Inclusion script: browsercrm-5.002.00 remote file including Download From: http://www.browsercrm.com/download/browsercrm-5.002.00.tar.gz dork: Copyright © 2007 BrowserCRM Ltd Vuln Code : requireonce$bcrmpubroot . "/publicprepend.inc.php" exploit:...

CVE-2008-2520

Multiple PHP remote file inclusion vulnerabilities in BigACE 2.4, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 GLOBALSBIGACEDIRaddon parameter to a addon/smarty/plugins/function.captcha.php and b system/classes/sql/AdoDBConnection.php; a...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in BigACE 2.4, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 GLOBALSBIGACEDIRaddon parameter to a addon/smarty/plugins/function.captcha.php and b system/classes/sql/AdoDBConnection.php; a...

CVE-2008-2520

CVE-2008-2520 affects BigACE 2.4 and describes multiple PHP remote file inclusion vulnerabilities that allow an attacker to execute arbitrary PHP code via manipulated GLOBALS[_BIGACE] parameters in several files (e.g., addon/smarty/plugins/function.captcha.php, AdoDBConnection.php, item_informati...

DesktopOnNet 3 Beta Multiple Remote File Inclusion Vulnerabilities

No description provided by source. ========================================================================================= - Author: MK - Script: DesktopOnNet 3 Beta Remote File Inclusion - URL: http://sourceforge.net/projects/don3/ - Date: 1/06/2008 - Email: [email protected]...

desktoponnet-rfi.txt

========================================================================================= - Author: MK - Script: DesktopOnNet 3 Beta Remote File Inclusion - URL: http://sourceforge.net/projects/don3/ - Date: 1/06/2008 - Email: [email protected]...

Booby 1.0.1 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Booby 1.0.1 Multiple Remote File Inclusion Vulnerabilities ========================================================== software name: Booby version: 1.0.1 description: A Webbased...

DesktopOnNet 3 Beta - Multiple Remote File Inclusions

DesktopOnNet 3 Beta - Multiple Remote File Inclusions ========================================================================================= - Author: MK - Script: DesktopOnNet 3 Beta Remote File Inclusion - URL: http://sourceforge.net/projects/don3/ - Date: 1/06/2008 - Email:...