Quick Classifieds 1.0 - 'style/default.scheme.inc?DOCUMENT_ROOT' Remote File Inclusion

source: https://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; othe...

Joomla Components custompages 1.1 Remote File Inclusion Vulnerability

No description provided by source. @ JOOmla Component custompages = 1.0 Sql Remote file Inclusion Author:Sniper456 Contact:Sniper456atttgmail.com Greetss: My chilean people Developer: Shawn Sandy License:Other open source / Free license Dork: 8=====B ! = Bug:...

PHPauction 'include_path'远程文件包含漏洞

BUGTRAQ ID: 28284 CNCAN ID:CNCAN-2008032103 PHPauction是一款基于PHP的WEB应用程序。 PHPauction不正确检查用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意PHP命令。 问题存在于多个脚本对用户提交的'includepath'参数缺少过滤，指定远程服务器上的任意文件作为包含对象，可导致以WEB权限执行任意PHP命令。 PHPAuction PHPAuction 2.51 目前没有解决方案提供： http://www.johnrayfield.com/phpauction/...

Joomla! Component custompages 1.1 - Remote File Inclusion

Joomla! Component custompages 1.1 - Remote File Inclusion @ JOOmla Component custompages custompages 06/11/2006 Shawn Sandy Copyright 2006 - Shawn Sandy License [email protected] www.sstreamtv.com 1.1 milw0rm.com 2008-03-22...

Joomla Components custompages 1.1 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Joomla Components custompages 1.1 Remote File Inclusion Vulnerability ===================================================================== @ JOOmla Component custompage...

ooComments 1.0 - '/classes/class_admin.php?PathToComment' Remote File Inclusion

source: https://www.securityfocus.com/bid/28401/info ooComments is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attac...

Joomla! Component custompages 1.1 - Remote File Inclusion

@ JOOmla Component custompages custompages 06/11/2006 Shawn Sandy Copyright 2006 - Shawn Sandy License [email protected] www.sstreamtv.com 1.1 milw0rm.com 2008-03-22...

ooComments 1.0 - classesclass_admin.php?PathToComment Remote File Inclusion

ooComments 1.0 - classesclassadmin.php?PathToComment Remote File Inclusion source: https://www.securityfocus.com/bid/28401/info ooComments is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an...

ooComments 1.0 - classesclass_comments.php?PathToComment Remote File Inclusion

ooComments 1.0 - classesclasscomments.php?PathToComment Remote File Inclusion source: https://www.securityfocus.com/bid/28401/info ooComments is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in PHPauction GPL 2.51 allow remote attackers to execute arbitrary PHP code via a URL in the includepath parameter to 1 converter.inc.php, 2 messages.inc.php, and 3 settings.inc.php in includes/...

CVE-2008-1416

Multiple PHP remote file inclusion vulnerabilities in PHPauction GPL 2.51 allow remote attackers to execute arbitrary PHP code via a URL in the includepath parameter to 1 converter.inc.php, 2 messages.inc.php, and 3 settings.inc.php in includes/...

Immunity Canvas: FUZZYLIME_INCLUDE

Name| fuzzylimeinclude ---|--- CVE| CVE-2008-1405 Exploit Pack| CANVAS Description| fuzzylime cms = 3.01 Remote File include Notes| CVE Name: CVE-2008-1405 VENDOR: FuzzyLime Repeatability: Infinite References: http://www.securityfocus.com/bid/28838 CVE Url: https://vulners.com/cve/CVE-2008-1405...

Remote file inclusion

PHP remote file inclusion vulnerability in code/display.php in fuzzylime cms 3.01 allows remote attackers to execute arbitrary PHP code via a URL in the admindir parameter...

CVE-2008-1416

Multiple PHP remote file inclusion vulnerabilities in PHPauction GPL 2.51 allow remote attackers to execute arbitrary PHP code via a URL in the includepath parameter to 1 converter.inc.php, 2 messages.inc.php, and 3 settings.inc.php in includes/...

CVE-2008-1405

The CVE-2008-1405 entry concerns fuzzylime CMS (versions ≤ 3.01). A PHP remote file inclusion vulnerability in code/display.php allows an attacker to execute arbitrary PHP code by supplying a URL in the admindir parameter. The issue enables remote code execution, with the CVSS base score reported...

CVE-2008-1416

CVE-2008-1416 : PHPAuction GPL 2.51 contains multiple remote file inclusion vulnerabilities in the includes/ files (converter.inc.php, messages.inc.php, settings.inc.php) that allow an attacker to execute arbitrary PHP code via a crafted include_path URL. Root cause is unsanitized include handlin...

W-Agora 4.0 - create_user.php?bn_dir_default Remote File Inclusion

W-Agora 4.0 - createuser.php?bndirdefault Remote File Inclusion source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...

W-Agora 4.0 - 'delete_notes.php?bn_dir_default' Remote File Inclusion

source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

W-Agora 4.0 - 'mail_users.php?bn_dir_default' Remote File Inclusion

source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

W-Agora 4.0 - 'delete_user.php?bn_dir_default' Remote File Inclusion

source: https://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...