19447 matches found
CVE-2007-6485
Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 aka Oreon 1.4 allow remote attackers to execute arbitrary PHP code via a URL in the fileOreonConf parameter to 1 MakeXML.php or 2 MakeXML4statusCounter.php in include/monitoring/engine/...
CVE-2007-6475
Multiple directory traversal vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the langsel parameter to 1 updater.php and 2 thumber.php...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in 1 the dirclasses parameter to sitemap.xml.php or 2 the error parameter to errors.php...
CVE-2007-6488
Multiple PHP remote file inclusion vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in 1 the dirclasses parameter to sitemap.xml.php or 2 the error parameter to errors.php...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 aka Oreon 1.4 allow remote attackers to execute arbitrary PHP code via a URL in the fileOreonConf parameter to 1 MakeXML.php or 2 MakeXML4statusCounter.php in include/monitoring/engine/...
CVE-2007-6488
Multiple PHP remote file inclusion vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in 1 the dirclasses parameter to sitemap.xml.php or 2 the error parameter to errors.php...
CVE-2007-6485
Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 aka Oreon 1.4 allow remote attackers to execute arbitrary PHP code via a URL in the fileOreonConf parameter to 1 MakeXML.php or 2 MakeXML4statusCounter.php in include/monitoring/engine/...
CVE-2007-6485
Multiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 aka Oreon 1.4 allow remote attackers to execute arbitrary PHP code via a URL in the fileOreonConf parameter to 1 MakeXML.php or 2 MakeXML4statusCounter.php in include/monitoring/engine/...
CVE-2007-6488
Falcon Series One CMS 1.4.3 is affected by multiple PHP remote file inclusion vulnerabilities. An attacker can cause arbitrary PHP code execution by providing a URL in (1) dir[classes] to sitemap.xml.php or (2) error to errors.php. The underlying issue is insecure handling of user-supplied URLs l...
CVE-2007-6485
CVE-2007-6485 affects Centreon/Oreon 1.4.1. It enables remote PHP code execution via the fileOreonConf parameter in MakeXML.php and MakeXML4statusCounter.php under include/monitoring/engine/, exploitable by unauthenticated attackers over the network. The root cause is improper handling/sanitizati...
CVE-2007-6488
Multiple PHP remote file inclusion vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in 1 the dirclasses parameter to sitemap.xml.php or 2 the error parameter to errors.php...
CVE-2007-6464
Multiple PHP remote file inclusion vulnerabilities in Form tools 1.5.0b allow remote attackers to execute arbitrary PHP code via a URL in the grootdir parameter to 1 adminpageopen.php and 2 clientpageopen.php in global/templates/...
CVE-2007-6464
Multiple PHP remote file inclusion vulnerabilities in Form tools 1.5.0b allow remote attackers to execute arbitrary PHP code via a URL in the grootdir parameter to 1 adminpageopen.php and 2 clientpageopen.php in global/templates/...
CVE-2007-6464
CVE-2007-6464 affects Form Tools 1.5.0b, where PHP remote file inclusion is exploitable via the g_root_dir parameter in global/templates/admin_page_open.php and global/templates/client_page_open.php. The root cause is insufficient validation of a user-supplied URL, enabling execution of arbitrary...
PhpMyDesktop/Arcade 1.0 Final - 'phpdns_basedir' Remote File Inclusion
Name : PhpMyDesktop|arcade 1.0 Final phpdnsbasedir Remote File Include Download From : http://mesh.dl.sourceforge.net/sourceforge/pmd-arcade/pmdarcade10final.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : Google Dork : Powered by phpMyDesktop|arcade v1.0 final...
PhpMyDesktopArcade 1.0 Final - phpdns_basedir Remote File Inclusion
PhpMyDesktopArcade 1.0 Final - phpdnsbasedir Remote File Inclusion Name : PhpMyDesktop|arcade 1.0 Final phpdnsbasedir Remote File Include Download From : http://mesh.dl.sourceforge.net/sourceforge/pmd-arcade/pmdarcade10final.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : Google Dork : Powere...
phpsf-multi.txt
Title: PHP Security Framework Beta 1 Multiple Vulnerabilities and Security Bypass Vendor: http://benjilenoob.66ghz.com/projects/ Advisory: http://acid-root.new.fr/?0:16 Author: DarkFig Released on: 2007/12/16 Changelog: 2007/12/16 Summary: HT Remote File Inclusion MT SQL Injection MT SQL Injectio...
oreon-rfi.txt
By Michael Brooks Vulnerability Type: Multiple Remote File Inclusion. Software: Oreon and Centreon Homepage:http://www.oreon-project.org/ or http://www.centreon.com/ Versions: 1.4Oreon and 1.4.1Centreon The vulnerable file is: ./oreon-1.4/www/include/monitoring/engine/MakeXML.php Another,virtuall...
PHP Security Framework: Vuln and Security Bypass
Title: PHP Security Framework Beta 1 Multiple Vulnerabilities and Security Bypass Vendor: http://benjilenoob.66ghz.com/projects/ Advisory: http://acid-root.new.fr/?0:16 Author: DarkFig gmdarkfig at gmail dot com Released on: 2007/12/16 Changelog: 2007/12/16 Summary: HT Remote File Inclusion MT SQ...
PHP Security Framework - Multiple Input Validation Vulnerabilities
PHP Security Framework - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/26898/info PHP Security Framework is prone to multiple input-validation vulnerabilities, including multiple SQL-injection issues and remote file-include issues. A successful exploit may...