CVE-2008-2353

CVE-2008-2353 affects GNU/Gallery 1.1.1.0 and earlier. The vulnerability is a directory traversal in admin.php where a dot-dot (..) in the show parameter allows remote attackers to include and execute arbitrary local files. The NVD entry lists a CVSSv2 base score of 7.5 (HIGH) with network attack...

CVE-2008-2355

CVE-2008-2355 describes a directory traversal vulnerability in WR-Meeting 1.0. When magic_quotes_gpc is disabled, an attacker can cause the application to include and execute local files by inserting a .. (dot dot) in the msnum parameter of a coment event, exposing partial confidentiality and int...

Remote file inclusion

PHP remote file inclusion vulnerability in chreadalso.php in News Manager 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the readxmlinclude parameter...

CVE-2008-2341

The CVE-2008-2341 entry concerns News Manager 2.0, where a PHP remote file inclusion flaw exists in ch_readalso.php. An attacker can supply a URL in the read_xml_include parameter to cause remote PHP code execution. The vulnerability is classified as high severity (CVSSv2 base score 7.5) with net...

microSSys CMS <= 1.5 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================== microSSys CMS = 1.5 Remote File Inclusion Vulnerability ======================================================== microSSys CMS = 1.5 Remote File Inclusion Vulnerability Software site...

microssys CMS 1.5 - Remote File Inclusion

microSSys CMS = 1.5 Remote File Inclusion Vulnerability Software site: http://wajox.com/ =============================================================== By Raz0r www.Raz0r.name =============================================================== Vulnerable code index.php@22-25,54-55: 22...

microssyscms-rfi.txt

microSSys CMS = 1.5 Remote File Inclusion Vulnerability Software site: http://wajox.com/ =============================================================== By Raz0r www.Raz0r.name =============================================================== Vulnerable code index.php@22-25,54-55: 22...

microssys CMS 1.5 - Remote File Inclusion

microssys CMS 1.5 - Remote File Inclusion microSSys CMS = 1.5 Remote File Inclusion Vulnerability Software site: http://wajox.com/ =============================================================== By Raz0r www.Raz0r.name =============================================================== Vulnerable cod...

CVE-2008-2284

PHP remote file inclusion vulnerability in fusebox5.php in Fusebox 5.5.1 allows remote attackers to execute arbitrary PHP code via a URL in the FUSEBOXAPPLICATIONPATH parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Remote file inclusion

PHP remote file inclusion vulnerability in include/bbs.lib.inc.php in Rgboard 3.0.12 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter...

CVE-2008-2296

CVE-2008-2296 describes a PHP remote file inclusion vulnerability in Rgboard 3.0.12, specifically in the include/bbs.lib.inc.php file. The root cause is a vulnerable handling of the site_path parameter, allowing an attacker to supply a URL that causes arbitrary PHP code execution on the server. T...

CVE-2008-2284

CVE-2008-2284 describes a PHP remote file inclusion in Fusebox 5.5.1 (Fusebox 5.x) where an attacker can cause arbitrary PHP execution by supplying a URL to the FUSEBOX_APPLICATION_PATH parameter. Root cause: improper handling of user-supplied URLs enabling remote file inclusion. Documented impac...

CVE-2008-2284

PHP remote file inclusion vulnerability in fusebox5.php in Fusebox 5.5.1 allows remote attackers to execute arbitrary PHP code via a URL in the FUSEBOXAPPLICATIONPATH parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-2296

PHP remote file inclusion vulnerability in include/bbs.lib.inc.php in Rgboard 3.0.12 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter...

GNU/Gallery <= 1.1.1.0 (admin.php) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== GNU/Gallery Vulnerability: http://site.com/admin.php?show=../../../../../../../etc/passwd NOTE/TIP: fair amount of sites running, althou no good dork. 0day.today 2018-04...

GNUGallery 1.1.1.0 - admin.php Local File Inclusion

GNUGallery 1.1.1.0 - admin.php Local File Inclusion --==+================================================================================+==-- --==+ GNU/Gallery Vulnerability: http://site.com/admin.php?show=../../../../../../../etc/passwd NOTE/TIP: fair amount of sites running, althou no good dor...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in PHPWAY Kostenloses Linkmanagementscript allow remote attackers to execute arbitrary PHP code via a URL in the 1 mainpagedirectory and 2 pagetoinclude parameters in template\index.php...

CVE-2008-2270

Multiple PHP remote file inclusion vulnerabilities in PHPWAY Kostenloses Linkmanagementscript allow remote attackers to execute arbitrary PHP code via a URL in the 1 mainpagedirectory and 2 pagetoinclude parameters in template\index.php...

CVE-2008-2270

CVE-2008-2270 : In PHPWAY Kostenloses Linkmanagementscript, multiple PHP remote file inclusion vulnerabilities exist in template\index.php, allowing an attacker to supply a URL through the (1) main_page_directory or (2) page_to_include parameters to cause the execution of arbitrary PHP code on th...

BIGACE 2.4 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. / \ @ /|\ /|\ |-| / | \ /|/\ / | \ @ | |--------------------/--|-voV---|'/--Vov-|-----------------------|-| |-| '^ o o '^ | | | | &nb...