PHP-CON 1.3 - include.php Remote File Inclusion

PHP-CON 1.3 - include.php Remote File Inclusion PHP-CON 1.3 - 'include.php' Remote File Inclusion Script : http://sourceforge.net/project/showfiles.php?groupid=182182 POC : /PHPCON/Exchange/include.php?webappcfgAPPPATH= Evil Code milw0rm.com 2007-11-28...

EHCP <= 0.22.8 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= EHCP | |||| /| / / --------------------------------------------------------------- Multiple Remote File Inclusion...

EHCP 0.22.8 - Multiple Remote File Inclusions

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Multiple...

pmapper-rfi.txt

p.mapper 3.2.0 RFI --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : p.mapper 3.2.0 --------------------- Download : http://downloads.sourceforge.net/pmapper/pmapper-3.2-beta3.zip?modtime=1196115954&bigmirror=0 ---------------------...

PHP-CON 1.3 - 'include.php' Remote File Inclusion

PHP-CON 1.3 - 'include.php' Remote File Inclusion Script : http://sourceforge.net/project/showfiles.php?groupid=182182 POC : /PHPCON/Exchange/include.php?webappcfgAPPPATH= Evil Code milw0rm.com 2007-11-28...

Remote file inclusion

PHP remote file inclusion vulnerability in admin/kfm/initialise.php in DevMass Shopping Cart 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the kfmbasepath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in Mp3 ToolBox 1.0 beta 5 allows remote attackers to execute arbitrary PHP code via a URL in the skinfile parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in IAPR COMMENCE 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the a phprootpath and sometimes the b privilegerootpath parameter to various PHP scripts under 1 admin/includes/, 2 admin/phase/, 3 includes/, 4...

CVE-2007-6133

CVE-2007-6133 : A PHP remote file inclusion vulnerability in DevMass Shopping Cart 1.0 and earlier allows an attacker to execute arbitrary PHP code via the kfm_base_path parameter in admin/kfm/initialise.php. The root cause is inclusion of remote files through a user-controlled URL, enabling arbi...

CVE-2007-6147

Multiple PHP remote file inclusion vulnerabilities in IAPR COMMENCE 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the a phprootpath and sometimes the b privilegerootpath parameter to various PHP scripts under 1 admin/includes/, 2 admin/phase/, 3 includes/, 4...

CVE-2007-6133

PHP remote file inclusion vulnerability in admin/kfm/initialise.php in DevMass Shopping Cart 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the kfmbasepath parameter...

CVE-2007-6139

CVE-2007-6139 is a PHP remote file inclusion vulnerability in Mp3 ToolBox 1.0 beta 5. The flaw is in index.php where an attacker can supply a URL in the skin_file parameter to execute arbitrary PHP code. Affected software: Mp3 ToolBox 1.0 beta 5 (index.php, skin_file). The linked sources show pub...

CVE-2007-6147

CVE-2007-6147 affects IAPR COMMENCE 1.3 and describes multiple PHP remote file inclusion vulnerabilities. The flaw allows an attacker to cause arbitrary PHP code execution by supplying a URL in the php_root_path (and sometimes privilege_root_path) parameter to various PHP scripts under admin/incl...

CVE-2007-6139

PHP remote file inclusion vulnerability in index.php in Mp3 ToolBox 1.0 beta 5 allows remote attackers to execute arbitrary PHP code via a URL in the skinfile parameter...

p.mapper 3.2 beta3 - pluginsexportmc_table.php?_SESSION[PM_INCPHP] Remote File Inclusion

p.mapper 3.2 beta3 - pluginsexportmctable.php?SESSIONPMINCPHP Remote File Inclusion source: https://www.securityfocus.com/bid/26614/info p.mapper is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allo...

project alumni 1.0.9 - index.php?act Local File Inclusion

project alumni 1.0.9 - index.php?act Local File Inclusion project alumni 1.0.9 remote file disclosure vulnerability download : https://sourceforge.net/projects/project-alumni/ vulnerable code on index.php include$SERVER'DOCUMENTROOT' . "/pages/" . $GET'act' . ".page.inc.php"; exploit :...

iaprcommence-rfi.txt

iaprcommence 1.3 RFI --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : iaprcommence 1.3 --------------------- Download : http://downloads.sourceforge.net/iaprcommence/CommenceV13.zip?modtime=1195816743&bigmirror=0...

p.mapper 3.2 beta3 - incPHPglobals.php?_SESSION[PM_INCPHP] Remote File Inclusion

p.mapper 3.2 beta3 - incPHPglobals.php?SESSIONPMINCPHP Remote File Inclusion source: https://www.securityfocus.com/bid/26614/info p.mapper is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an...

p.mapper 3.2 beta3 - '/plugins/export/mc_table.php?_SESSION[PM_INCPHP]' Remote File Inclusion

source: https://www.securityfocus.com/bid/26614/info p.mapper is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

p.mapper 3.2 beta3 - '/incPHP/globals.php?_SESSION[PM_INCPHP]' Remote File Inclusion

source: https://www.securityfocus.com/bid/26614/info p.mapper is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...