EZContents 2.0.3 - 'showpoll.php?GLOBALS[admin_home]' Remote File Inclusion

source: https://www.securityfocus.com/bid/19776/info ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code a...

EZContents 2.0.3 - 'toprated.php?GLOBALS[language_home]' Remote File Inclusion

source: https://www.securityfocus.com/bid/19776/info ezContents is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code a...

ModuleBased CMS - Multiple Remote File Inclusions

ModuleBased CMS - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/19754/info ModuleBased CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary...

BigACE 1.8.2 - upload_form.php Remote File Inclusion

BigACE 1.8.2 - uploadform.php Remote File Inclusion source: https://www.securityfocus.com/bid/19723/info Bigace is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote PHP...

Jupiter CMS 1.1.5 - index.php Remote File Inclusion

Jupiter CMS 1.1.5 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/19721/info Jupiter CMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files...

Alstrasoft Video Share Enterprise 4.x - MyajaxPHP.php Remote File Inclusion

Alstrasoft Video Share Enterprise 4.x - MyajaxPHP.php Remote File Inclusion source: https://www.securityfocus.com/bid/19724/info AlstraSoft Video Share Enterprise is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit thi...

BigACE 1.8.2 - admin.cmd.php Remote File Inclusion

BigACE 1.8.2 - admin.cmd.php Remote File Inclusion source: https://www.securityfocus.com/bid/19723/info Bigace is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote PHP...

Joomla! Mambo Component Comprofiler 1.0 - class.php Remote File Inclusion

Joomla! Mambo Component Comprofiler 1.0 - class.php Remote File Inclusion source: https://www.securityfocus.com/bid/19725/info The Mambo and Joomla comcomprofiler component is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can...

BigACE 1.8.2 - item_main.php Remote File Inclusion

BigACE 1.8.2 - itemmain.php Remote File Inclusion source: https://www.securityfocus.com/bid/19723/info Bigace is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote PHP co...

Alstrasoft Video Share Enterprise 4.x - 'MyajaxPHP.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19724/info AlstraSoft Video Share Enterprise is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code an...

BigACE 1.8.2 - 'admin.cmd.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19723/info Bigace is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote PHP code and execute it in the context of the webserver...

BigACE 1.8.2 - 'item_main.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19723/info Bigace is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote PHP code and execute it in the context of the webserver...

BigACE 1.8.2 - 'upload_form.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19723/info Bigace is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote PHP code and execute it in the context of the webserver...

Jetbox CMS 2.1 - 'Search_function.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19722/info Jetbox CMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the...

Jupiter CMS 1.1.5 - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19721/info Jupiter CMS is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the...

Joomla! / Mambo Component Comprofiler 1.0 - 'class.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19725/info The Mambo and Joomla comcomprofiler component is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious P...

RedBlog 0.5 - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19658/info RedBLoG is prone a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context...

Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo Components ContXTD Attack method: Remote File Inclusion Source: ensure this file is being included by a parent file / defined 'VALIDMOS' or die 'Direct Access t...

Mambo Component EstateAgent 1.0.2 - MosConfig_absolute_path Remote File Inclusion

Mambo Component EstateAgent 1.0.2 - MosConfigabsolutepath Remote File Inclusion source: https://www.securityfocus.com/bid/19625/info The Mambo EstateAgent component is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit...

ToendaCMS 0.x1.0.x - TCMS_Administer Remote File Inclusion

ToendaCMS 0.x1.0.x - TCMSAdminister Remote File Inclusion source: https://www.securityfocus.com/bid/19626/info ToendaCMS is prone a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file...