Specimen Image Database - taxonservice.php?dir Remote File Inclusion

Specimen Image Database - taxonservice.php?dir Remote File Inclusion source: https://www.securityfocus.com/bid/28142/info SID Specimen Image Database is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may...

Specimen Image Database - 'taxonservice.php?dir' Remote File Inclusion

source: https://www.securityfocus.com/bid/28142/info SID Specimen Image Database is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the underlying...

Yap Blog 1.1 - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/28120/info Yap Blog is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

GROUP-E head_auth.php远程文件包含漏洞

BUGTRAQ ID: 28024 CVECAN ID: CVE-2008-1074 GROUP-E是基于LAMP架构的企业协作软件。 GROUP-E的www/lib/headauth.php文件中没有正确地验证对CFGPREPENDFILE参数的输入，这允许攻击者包含任意本地或外部资源的文件。成功攻击要求打开了registerglobals。 GROUP-E GROUP-E 1.6.41 厂商补丁： GROUP-E ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter to 1 123flashchat.php and 2 phpbbloginchat.php. NOTE: CVE disputes this issue because $phpbbrootpath is explicitl...

CVE-2008-1171

Multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter to 1 123flashchat.php and 2 phpbbloginchat.php. NOTE: CVE disputes this issue because $phpbbrootpath is explicitl...

CVE-2008-1170

Multiple PHP remote file inclusion vulnerabilities in KCWiki 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the page parameter to 1 minimal/wiki.php and 2 simplest/wiki.php...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in KCWiki 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the page parameter to 1 minimal/wiki.php and 2 simplest/wiki.php...

CVE-2008-1170

CVE-2008-1170 describes multiple PHP remote file inclusion vulnerabilities in KCWiki 1.0. An attacker can cause arbitrary PHP code execution by supplying a crafted URL in the page parameter to either minimal/wiki.php or simplest/wiki.php. The connected records confirm the affected product and vul...

CVE-2008-1170

Multiple PHP remote file inclusion vulnerabilities in KCWiki 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the page parameter to 1 minimal/wiki.php and 2 simplest/wiki.php...

CVE-2008-1171

CVE-2008-1171 concerns multiple PHP remote file inclusion vulnerabilities in the 123 Flash Chat Module for phpBB. An attacker could trigger code execution via a URL in the phpbb_root_path parameter to (1) 123flashchat.php and (2) phpbb_login_chat.php. The CVE notes a dispute: phpbb_root_path is e...

Podcast Generator <= 1.0 BETA 2 RFI / File Disclosure Vulnerabilities

No description provided by source. Podcast Generator = 1.0 BETA 2 RFI / File Disclosure Remote Vulnerabilities http://sourceforge.net/project/showfiles.php?groupid=163847 POC : I- Remote File Inclusion Vulnerabilities /podcastgen1.0beta2/components/xmlparser/loadparser.php?absoluteurl=shell...

SiteBuilder Elite 'CarpPath'远程文件包含漏洞

SiteBuilder Elite是一款基于PHP的WEB应用程序。 SiteBuilder Elite不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于脚本对用户提交的'CarpPath'参数处理缺少充分过滤，提交远程服务器的任意文件作为包含对象，可导致以WEB权限执行任意PHP代码。 NovaSoft SiteBuilder Elite 1.2 厂商解决方案 目前没有详细解决方案提供： http://sitebuilderelite.com/...

Barryvan Compo Manager 'main.php'远程文件包含漏洞

Barryvan Compo Manager是一款基于PHP的WEB应用程序。 Barryvan Compo Manager不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'main.php'脚本对用户提交的'pageURL'参数处理缺少充分过滤，提交远程服务器的任意文件作为包含对象，可导致以WEB权限执行任意PHP代码。 Barryvan Compo Manager Barryvan Compo Manager 0.3 目前没有详细解决方案提供： http://sourceforge.net/projects/barryvancompo...

Remote file inclusion

PHP remote file inclusion vulnerability in tourney/index.php in phpMyTourney 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2008-1128

PHP remote file inclusion vulnerability in tourney/index.php in phpMyTourney 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2008-1128

CVE-2008-1128 involves a PHP remote file inclusion in the PHPMyTourney 2 package, specifically in tourney/index.php. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a crafted value in the page parameter, leading to remote code execution via a network-accessible end...

CVE-2008-1123

Multiple PHP remote file inclusion vulnerabilities in SiteBuilder Elite 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the CarpPath parameter to 1 files/carprss.php and 2 files/amazon-bestsellers.php...

Immunity Canvas: PODCASTGEN_INCLUDE

Name| podcastgeninclude ---|--- CVE| CVE-2008-1124 Exploit Pack| CANVAS Description| Podcast Generator = 1.0 BETA 2 remote file include Notes| CVE Name: CVE-2008-1124 VENDOR: podcastgen Repeatability: Infinite References: http://www.securityfocus.com/bid/28038 CVE Url:...

CVE-2008-1124

Multiple PHP remote file inclusion vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absoluteurl parameter to 1 components/xmlparser/loadparser.php; 2 admin.php, 3 categories.php, 4 categoriesadd.php, 5...