JoomlaFlash Component Multiple Remote File Inclusion

Autore: Smasher Sito: http://warwolfz.altervista.org Tipo: Remote File Inclusion Rischio: Alto A remote attacker can gain access to your website throug a Remote shell inclusion. PoC available:...

Debian: Security Advisory (DSA-1267-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1267-1 (webcalendar)

The remote host is missing an update to webcalendar announced via advisory DSA 1267-1. It was discovered that WebCalendar, a PHP-based calendar application, insufficiently protects an internal variable, which allows remote file inclusion. OpenVAS Vulnerability Test $Id: deb12671.nasl 6616...

CVE-2008-0287

PHP remote file inclusion vulnerability in VisionBurst vcart 3.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 index.php and 2 checkout.php...

Remote file inclusion

PHP remote file inclusion vulnerability in viewfunc.php in Member Area System MAS 1.7 and possibly others allows remote attackers to execute arbitrary PHP code via a URL in the i parameter. NOTE: a second vector might exist via the l parameter. NOTE: as of 20080118, the vendor has disputed the se...

Remote file inclusion

PHP remote file inclusion vulnerability in VisionBurst vcart 3.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 index.php and 2 checkout.php...

CVE-2008-0287

CVE-2008-0287 affects VisionBurst vcart 3.3.2, where the abs_path parameter in (1) index.php and (2) checkout.php enables a remote attacker to include arbitrary PHP files, leading to arbitrary code execution. The vulnerability is a PHP remote file inclusion (RFI) issue. Connected sources confirm ...

CVE-2008-0289

CVE-2008-0289 describes a PHP remote file inclusion in the Member Area System (MAS) 1.7 (and possibly others), exploitable via a URL parameter (i) to execute arbitrary PHP code, with a secondary vector potentially via the l parameter. This vulnerability’s root cause is unclear from the provided t...

CVE-2008-0283

PHP remote file inclusion vulnerability in /aides/index.php in DomPHP 0.81 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2008-0283

CVE-2008-0283 corresponds to a PHP remote file inclusion in /aides/index.php of DomPHP

Directory traversal

Multiple directory traversal vulnerabilities in index.php in Tuned Studios 1 Subwoofer, 2 Freeze Theme, 3 Orange Cutout, 4 Lonely Maple, 5 Endless, 6 Classic Theme, and 7 Music Theme webpage templates allow remote attackers to include and execute arbitrary files via ".." sequences in the page...

CVE-2008-0231

Multiple directory traversal vulnerabilities in index.php in Tuned Studios 1 Subwoofer, 2 Freeze Theme, 3 Orange Cutout, 4 Lonely Maple, 5 Endless, 6 Classic Theme, and 7 Music Theme webpage templates allow remote attackers to include and execute arbitrary files via ".." sequences in the page...

Remote file inclusion

PHP remote file inclusion vulnerability in php121db.php in osDate 2.0.8 and possibly earlier versions allows remote attackers to execute arbitrary PHP code via a URL in the php121dir parameter...

CVE-2008-0230

PHP remote file inclusion vulnerability in php121db.php in osDate 2.0.8 and possibly earlier versions allows remote attackers to execute arbitrary PHP code via a URL in the php121dir parameter...

vcart 3.3.2 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : vcart version 3.3.2 Discovered By : k1n9k0ng Scripts site : http://www.visionburst.com/ Thanks To : sekuritionline, semprol, bajingan, mimid, r.i.p, x-code,...

Members Area System 1.7 - view_func.php Remote File Inclusion

Members Area System 1.7 - viewfunc.php Remote File Inclusion source: https://www.securityfocus.com/bid/27244/info Members Area System is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitra...

CVE-2008-0231

Technical details about CVE-2008-0231 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

Members Area System 1.7 - 'view_func.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/27244/info Members Area System is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it i...

CVE-2008-0230

CVE-2008-0230 describes a PHP remote file inclusion vulnerability in the file php121db.php used by osDate 2.0.8 (and possibly earlier versions). An attacker can pass a URL in the php121dir parameter to cause the vulnerable script to include remote PHP code, potentially enabling arbitrary code exe...

vcart 3.3.2 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== vcart 3.3.2 Multiple Remote File Inclusion Vulnerabilities ==========================================================...