CVE-2007-6324

CVE-2007-6324 affects CityWriter 0.9.7 via a PHP remote file inclusion in head.php. The underlying issue is an RFI that allows an attacker to supply a URL in the path parameter, enabling arbitrary PHP code execution on the affected server. Connected sources confirm the vendor/product context and ...

CVE-2007-6325

CVE-2007-6325 affects Fastpublish CMS 1.9999; vulnerability in adminbereich/designconfig.php allows remote PHP code execution via a URL in config[fsBase]. This is a different vector from CVE-2006-2726. No remediation details are provided in the documents.

CityWriter 0.9.7 - 'head.php' Remote File Inclusion

Name : CityWriter 0.9.7 Remote File Include Download From : http://download.hulihanapplications.com/citywriter/citywriter-0.97.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : ============================================================================ Vulne Code In File head.php In Line 1:...

CityWriter 0.9.7 head.php Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================= CityWriter 0.9.7 head.php Remote File Inclusion Vulnerability ============================================================= Name : CityWriter 0.9.7 Remote File Include Download...

CityWriter 0.9.7 - head.php Remote File Inclusion

CityWriter 0.9.7 - head.php Remote File Inclusion Name : CityWriter 0.9.7 Remote File Include Download From : http://download.hulihanapplications.com/citywriter/citywriter-0.97.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet :...

ViArt CMS/Shop/HelpDesk 3.3.2 Remote File Inclusion Vulnerability

No description provided by source. Name : ViArt CMS 3.3.2 Remote File Include Download From : http://www.viart.com/downloads/viartcms-3.3.2.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : ============================================================================ Vulne Code : Line 4 :...

Fastpublish CMS 1.9999 - config[fsBase] Remote File Inclusion

Fastpublish CMS 1.9999 - configfsBase Remote File Inclusion Name : Fastpublish CMS 1.9999 configfsBase Remote File Include Download From : http://www.fastpublish.org/aufbau/phpcontent/downloadlist.php?action=download&id=53&sprache=en Found By : RoMaNcYxHaCkEr Home Page : Not Yet :...

Fastpublish CMS 1.9999 - config[fsBase] Remote File Inclusion

Name : Fastpublish CMS 1.9999 configfsBase Remote File Include Download From : http://www.fastpublish.org/aufbau/phpcontent/downloadlist.php?action=download&id=53&sprache=en Found By : RoMaNcYxHaCkEr Home Page : Not Yet : ===========================================================================...

ViArt CMSShopHelpdesk 3.3.2 - Remote File Inclusion

ViArt CMSShopHelpdesk 3.3.2 - Remote File Inclusion Name : ViArt CMS 3.3.2 Remote File Include Download From : http://www.viart.com/downloads/viartcms-3.3.2.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : ============================================================================ Vulne Code ...

Falcon CMS 1.4.3 (RFI/XSS) Multiple Remote Vulnerabilities

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...

ViArt CMS/Shop/HelpDesk 3.3.2 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= ViArt CMS/Shop/HelpDesk 3.3.2 Remote File Inclusion Vulnerability ================================================================= Name : ViArt CMS 3.3.2 Remote File Includ...

ViArt CMS/Shop/Helpdesk 3.3.2 - Remote File Inclusion

Name : ViArt CMS 3.3.2 Remote File Include Download From : http://www.viart.com/downloads/viartcms-3.3.2.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : ============================================================================ Vulne Code : Line 4 : includeonce$rootfolderpath...

CVE-2007-6289

Multiple PHP remote file inclusion vulnerabilities in SerWeb 2.0.0 dev1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 SERWEBconfigdir parameter to loadlang.php, 2 SERWEBfunctionsdir parameter to mainprepend.php, and the 3 PHPLIBlibdir parameter to...

CVE-2007-6296

PHP remote file inclusion vulnerability in userspopupL.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via a URL in the From parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in userspopupL.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via a URL in the From parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in SerWeb 2.0.0 dev1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 SERWEBconfigdir parameter to loadlang.php, 2 SERWEBfunctionsdir parameter to mainprepend.php, and the 3 PHPLIBlibdir parameter to...

CVE-2007-6289

CVE-2007-6289 describes multiple PHP remote file inclusion vulnerabilities in SerWeb (versions 0.9.6 and later, and 2.0.0 dev1 and earlier). The flaw allows an attacker to execute arbitrary PHP code by supplying a URL in parameters such as _SERWEB[configdir] to load_lang.php, _SERWEB[functionsdir...

CVE-2007-6296

CVE-2007-6296 : PHP remote file inclusion in phpMyChat 0.14.5, via a URL in the From parameter of users_popupL.php3, allows remote attackers to execute arbitrary PHP code. The provided sources confirm an RFI vulnerability without detailing a vendor patch or fixed version. The underlying issue is ...

Rayzz Class_HeaderHandler.Lib.PHP远程文件包含漏洞

Rayzz是一款基于PHP的WEB应用程序。 Rayzz不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'ClassHeaderHandler.Lib.PHP'脚本对用户提交的'CFGsiteprojectpath'参数缺少过滤，指定远程服务器上的任意文件作为包含参数，可导致以WEB权限执行任意PHP代码。 Rayzz 2.0 目前没有详细解决方案提供： http://www.rayzz.net/...

Tellmatic tm_includepath远程文件包含漏洞

Tellmatic是一款基于PHP的WEB应用程序。 Tellmatic不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于脚本对用户提交的'tmincludepath'参数缺少过滤，指定远程服务器上的任意文件作为包含参数，可导致以WEB权限执行任意PHP代码。 Tellmatic Tellmatic 1.0.7 Tellmatic Tellmatic 1.0.7.1 目前没有详细解决方案提供： http://www.tellmatic.org/...