datecomm Social Networking Software Index.PHP远程文件包含漏洞

datecomm Social Networking Software是一款基于PHP的WEB应用程序。 datecomm Social Networking Software不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'index.php'脚本对用户提交的'pg'参数缺少过滤，指定远程服务器上的任意文件作为包含参数，可导致以WEB权限执行任意PHP代码。 Datecomm Social Networking Script 目前没有详细解决方案提供： http://www.datecomm.com/...

Rayzz Script 2.0 Remote / Local File Inclusion Vulnerabilities

No description provided by source. +By CrackersChild+ Script.......: Rayzz Script 2.0 Download.....: http://rapidshare.com/files/40333745/rayzznew6726.rar Nulled Author.......: CrackersChild | [email protected] & [email protected] Class........: Local File Inclusion Demo.........:...

tellmatic-rfi.txt

tellmatic 1.0.7 RFI --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : tellmatic 1.0.7 --------------------- Download : http://downloads.sourceforge.net/tellmatic/tellmatic-1.0.7.tgz?modtime=1196381865&bigmirror=0 -------------------...

tellmatic 1.0.7 - Multiple Remote File Inclusions

tellmatic 1.0.7 - Multiple Remote File Inclusions tellmatic 1.0.7 RFI --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : tellmatic 1.0.7 --------------------- Download :...

Rayzz Script 2.0 - Local/Remote File Inclusion

+By CrackersChild+ Script.......: Rayzz Script 2.0 Download.....: http://rapidshare.com/files/40333745/rayzznew6726.rar Nulled Author.......: CrackersChild | [email protected] & [email protected] Class........: Local File Inclusion Demo.........: http://rayzz.net/rayzzdemo/ ++ ++...

Rayzz Script 2.0 Remote / Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== Rayzz Script 2.0 Remote / Local File Inclusion Vulnerabilities ============================================================== +By CrackersChild+ Script.......: Rayzz Script 2.0...

tellmatic 1.0.7 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== tellmatic 1.0.7 Multiple Remote File Inclusion Vulnerabilities ============================================================== tellmatic 1.0.7 RFI --------------------- Author :...

tellmatic 1.0.7 - Multiple Remote File Inclusions

tellmatic 1.0.7 RFI --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : tellmatic 1.0.7 --------------------- Download : http://downloads.sourceforge.net/tellmatic/tellmatic-1.0.7.tgz?modtime=1196381865&bigmirror=0 -------------------...

CVE-2007-6191

Multiple PHP remote file inclusion vulnerabilities in Armin Burger p.mapper 3.2.0 beta3 allow remote attackers to execute arbitrary PHP code via a URL in the SESSIONPMINCPHP parameter to 1 incphp/globals.php or 2 plugins/export/mctable.php. NOTE: it could be argued that this vulnerability is caus...

CVE-2007-6191

Multiple PHP remote file inclusion vulnerabilities in Armin Burger p.mapper 3.2.0 beta3 allow remote attackers to execute arbitrary PHP code via a URL in the SESSIONPMINCPHP parameter to 1 incphp/globals.php or 2 plugins/export/mctable.php. NOTE: it could be argued that this vulnerability is caus...

CVE-2007-6191

CVE-2007-6191 : The connected records confirm multiple PHP remote file inclusion vulnerabilities in the Armin Burger p.mapper 3.2.0 beta3. An attacker could trigger remote PHP code execution by supplying a URL in the _SESSION[PM_INCPHP] parameter that is read by incphp/globals.php or plugins/expo...

Remote file inclusion

PHP remote file inclusion vulnerability in Exchange/include.php in PHPCON 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the webappcfgAPPPATH parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Charray's CMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the ccmslibrarypath parameter to 1 markdown.php and 2 gallery.php in decoder/...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Easy Hosting Control Panel for Ubuntu EHCP 0.22.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the confdir parameter to 1 dbutil.bck.php and 2 dbutil.php in config/...

CVE-2007-6179

Multiple PHP remote file inclusion vulnerabilities in Charray's CMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in the ccmslibrarypath parameter to 1 markdown.php and 2 gallery.php in decoder/...

Ossigeno CMS 2.2_pre1 - uploadxaxadminmodulesuninstall_module.php?level Remote File Inclusion

Ossigeno CMS 2.2pre1 - uploadxaxadminmodulesuninstallmodule.php?level Remote File Inclusion source: https://www.securityfocus.com/bid/26654/info Ossigeno CMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these...

Ossigeno CMS 2.2_pre1 - uploadxaxadminmodulesinstall_module.php?level Remote File Inclusion

Ossigeno CMS 2.2pre1 - uploadxaxadminmodulesinstallmodule.php?level Remote File Inclusion source: https://www.securityfocus.com/bid/26654/info Ossigeno CMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issue...

CVE-2007-6178

CVE-2007-6178 is a known remote file inclusion in Easy Hosting Control Panel (EHCP) for Ubuntu up to version 0.22.8 and earlier. The vulnerability allows an attacker to supply a URL in the confdir parameter to config/dbutil.bck.php and config/dbutil.php, potentially enabling arbitrary PHP code ex...

CVE-2007-6179

CVE-2007-6179 concerns multiple PHP remote file inclusion vulnerabilities in Charray’s CMS 0.9.3. The flaw allows an attacker to execute arbitrary PHP code by supplying a URL via the ccms_library_path parameter to the files in decoder/ (markdown.php and gallery.php). The underlying issue is a rem...

Ossigeno CMS 2.2_pre1 - uploadxaxadminpatchindex.php?level Remote File Inclusion

Ossigeno CMS 2.2pre1 - uploadxaxadminpatchindex.php?level Remote File Inclusion source: https://www.securityfocus.com/bid/26654/info Ossigeno CMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allo...