CVE-2007-3118

Multiple PHP remote file inclusion vulnerabilities in Kravchuk letter K-letter 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the scdir parameter to 1 action.php, 2 subs.php, or 3 unsubs.php...

PT-2007-4161 · Abc · Abc Excel Parser Pro

Name of the Vulnerable Software and Affected Versions: ABC Excel Parser Pro version 4.0 Description: A remote file inclusion issue allows attackers to execute arbitrary PHP code via a URL in the parser path parameter. Recommendations: For ABC Excel Parser Pro version 4.0, consider restricting...

Ol Bookmarks Manager 0.7.4 (root) Remote File Inclusion Vulnerabilities

No description provided by source. Olbookmarks =0.7.4 multiple RFI root Download script : D0rk : allintitle:ol'bookmarks Thanks Str0ke Exploit : http://mesh.dl.sourceforge.net/sourceforge/olbookmarks/olbookmarks-0.7.4.tar.gz http://victime.com/olbookmarks-0.7.4/themes/test1.php?root=shell...

CVE-2007-2607

PHP remote file inclusion vulnerability in views/print/printbar.php in LaVague 0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the viewspath parameter...

Original 0.11 config.inc.php x[1] Remote File Inclusion Vulnerability

No description provided by source. Original Version 0.11config.inc.php Remote File Inclusion Vulnerability D.Script: http://xanatos.glo.org.mx/bi/original-0.11.tar.bz2 Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.Com/cc Exploit:Path/inc/config.inc.php?x1=Shell Greetz To: Tryag-Tea...

PT-2007-1470 · Smarty · Smarty

Name of the Vulnerable Software and Affected Versions: Smarty version 2.6.1 Description: A remote file inclusion issue in the unit test/test cases.php file of Smarty allows remote attackers to execute arbitrary PHP code via a URL in the SMARTY DIR parameter. Recommendations: For Smarty version...

Free File Hosting System远程文件包含漏洞

Free File Hosting System是一款基于PHP的WEB应用程序。 Free File Hosting System不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'ADBODYTEMP'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Free PHP Scripts Free File Hosting 1.1 目前没有解决方案提供： http://www.free-php-scripts.net/...

CVE-2007-1695

PHP remote file inclusion vulnerability in includes/usercpregister.php in phpBB 2.0.19 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter. NOTE: this issue has been disputed by third-party researchers, stating that the file checks for a global constant...

CVE-2007-1697

PHP remote file inclusion vulnerability in header.inc.php in Philex 0.2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CssFile parameter...

PT-2007-3062 · Phpbb · Phpbb

Name of the Vulnerable Software and Affected Versions: phpBB version 2.0.19 Description: A remote file inclusion issue in the includes/usercp register.php file allows remote attackers to execute arbitrary PHP code via a URL in the phpbb root path parameter. However, it has been noted that this...

Free File Hosting System 1.1 - 'register.php?AD_BODY_TEMP' Remote File Inclusion

source: https://www.securityfocus.com/bid/23118/info Free File Hosting is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; othe...

PT-2007-3012 · Clbox · Clbox

Name of the Vulnerable Software and Affected Versions: CLBOX version 1.01 Description: A remote file inclusion issue in the signup.php file allows remote attackers to execute arbitrary PHP code via a URL in the header parameter. However, it's noted that this issue has been disputed by a reliable...

CVE-2007-1456

PHP remote file inclusion vulnerability in common.php in PHP Photo Album allows remote attackers to execute arbitrary PHP code via a URL in the dbfile parameter. NOTE: CVE disputes this vulnerability, because versions 0.3.2.6 and 0.4.1beta do not contain this file. However, it is possible that th...

CVE-2007-1414

Multiple PHP remote file inclusion vulnerabilities in Coppermine Photo Gallery CPG allow remote attackers to execute arbitrary PHP code via a URL in the 1 cmd parameter to a imageprocessor.php or b picmgmt.inc.php, or the 2 path parameter to c include/functions.php, d include/pluginapi.inc.php, e...

PT-2007-1398 · Php · Lib/Php/Phphtmllib +1

Name of the Vulnerable Software and Affected Versions: lib/php/phphtmllib-2.5.4 maintain version 3.0.0-RC2 Description: A remote file inclusion issue allows remote attackers to execute arbitrary PHP code via a URL in the phphtmllib parameter. This issue might be related to phpHtmlLib. It is noted...

spaw-rfi.txt

Remote IInclude File : SPAW Editor PHP Edition upgrade version 1.2.3 to 1.2.4 Discovered By : Hasadya Raed Contact Me : RaeDatBsdMaildotCom Download Script: http://heanet.dl.sourceforge.net/sourceforge/spaw/spaw-php-123-to-124.zip B.File :imglibrary.php : include $spawroot.'class/util.class.php';...

CVE-2007-1219

PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...

DBImageGallery 1.2.2 - donsimg_base_path Remote File Inclusion

DBImageGallery 1.2.2 - donsimgbasepath Remote File Inclusion DBImageGallery 1.2.2 Found by Denven Script: http://www.dbscripts.net/download/?file=1 ERROR: admin/attributes.php requireonce $donsimgbasepath admin/images.php requireonce $donsimgbasepath admin/scan.php requireonce $donsimgbasepath...

SMA-DB 0.3.9 - settings.php Remote File Inclusion

SMA-DB 0.3.9 - settings.php Remote File Inclusion To ConTacT mE:wWw.Asb-May.net/bb ScRiPt:-http://people.ee.ethz.ch/dmaeder/bluevirus/downloader.php?filename=U01BLURC&referrer=hots Discovered By:- ThE dE@Th Settings.php:- includeonce$pfadz."scripts/session.php";...

Phpbb Tweaked <= 3 (phpbb_root_path) Remote Inclusion Vulnerability

No description provided by source. ----------------------------------------------- Phpbb Tweaked phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz - xoron.info ----------------------------------------------- Code: includeonce...