XOOPS Module XT-Conteudo (spaw_root) RFI Vulnerability

Exploit for unknown platform in category web applications ====================================================== XOOPS Module XT-Conteudo spawroot RFI Vulnerability ====================================================== / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | ||...

XOOPS Module cjay content 3 - Remote File Inclusion

/ \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title Cjay Content 3 WYSIWYG IE 5.5+ Remote File Inclusion Vulnerability Description Editor module for XOOPS CMS Vuln Code In...

XOOPS Module XFsection - 'modify.php' Remote File Inclusion

XOOPS Module XFsection Remote File Inclusion version: 1.07 source : http://prdownloads.sourceforge.net/xoops/xoops2-modxfsection-107.zip Discovered by SpLo1T from hTTp://hacking.3Xforum.Ro Bug : http://www.site.com/modules/xfsection/modify.php?dirmodule=evilcode.txt? Shoutz t0 :...

XOOPS Module XT-Conteudo - 'spaw_root' Remote File Inclusion

/ \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title XT-Conteudo XOOPS Module Remote File Inclusion Vulnerability Description Content module for XOOPS CMS Vuln Code In /admin/spaw/spawcontrol.class.php...

xoops module tinycontent 1.5 - Remote File Inclusion

xoops module tinycontent 1.5 - Remote File Inclusion XOOPS Module TinyContent Remote File Inclusion version: 1.5 source: http://prdownloads.sourceforge.net/xoops/xoops2-mod-tinycontent15.zip Discovered by SpLo1T from hTTP://hacking.3Xforum.Ro BUG:...

XOOPS Module TinyContent 1.5 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================ XOOPS Module TinyContent 1.5 Remote File Inclusion Vulnerability ================================================================ XOOPS Module TinyContent Remote File Inclusi...

XOOPS Module horoscope 2.0 - Remote File Inclusion

XOOPS Module horoscope 2.0 - Remote File Inclusion BeyazKurt - [email protected] XOOPS Modules Horoscope http://www.xoops.org/modules/repository/visit.php?cid=32&lid=1162 modules/horoscope/footer.php?xoopsConfigrootpath= NetLife Since : '2003-4' Emekli Heykır BeyazKurt - Neti bıraktım!...

XOOPS Module Horoscope <= 2.0 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= XOOPS Module Horoscope = 2.0 Remote File Inclusion Vulnerability ================================================================= BeyazKurt XOOPS Modules Horoscope...

XOOPS Module Horoscope &lt;= 2.0 Remote File Inclusion Vulnerability

No description provided by source. BeyazKurt - [email protected] XOOPS Modules Horoscope http://www.xoops.org/modules/repository/visit.php?cid=32&lid=1162 modules/horoscope/footer.php?xoopsConfigrootpath= NetLife Since : '2003-4' Emekli Heykır BeyazKurt - Neti bıraktım! Dönüşüm mükemm...

XOOPS Module horoscope 2.0 - Remote File Inclusion

BeyazKurt - [email protected] XOOPS Modules Horoscope http://www.xoops.org/modules/repository/visit.php?cid=32&lid=1162 modules/horoscope/footer.php?xoopsConfigrootpath= NetLife Since : '2003-4' Emekli Heykır BeyazKurt - Neti bıraktım! Dönüşüm mükemmel olcak ; milw0rm.com 2007-06-12...

xoops module tinycontent 1.5 - Remote File Inclusion

XOOPS Module TinyContent Remote File Inclusion version: 1.5 source: http://prdownloads.sourceforge.net/xoops/xoops2-mod-tinycontent15.zip Discovered by SpLo1T from hTTP://hacking.3Xforum.Ro BUG: http://www.site.com/modules/tinycontent/admin/spaw/spawcontrol.class.php?spawroot=evilcode.txt? Vuln...

Xoops iContent模块Spaw_Control.Class.PHP远程文件包含漏洞

Xoops iContent模块是一款基于PHP的WEB应用程序。 Xoops iContent模块不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'SpawControl.Class.PHP'脚本对用户提交的WEB参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Xoops iContent Module 1.0 目前没有解决方案提供： http://mirror.in.th/sourceforge.net/x/xo/xoops...

CVE-2007-3057

PHP remote file inclusion vulnerability in include/wysiwyg/spawcontrol.class.php in the icontent 4.5 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter. NOTE: this issue is probably a duplicate of CVE-2006-4656...

Remote file inclusion

PHP remote file inclusion vulnerability in include/wysiwyg/spawcontrol.class.php in the icontent 4.5 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter. NOTE: this issue is probably a duplicate of CVE-2006-4656...

Immunity Canvas: XOOPS_ICONTENT

Name| xoopsicontent ---|--- CVE| CVE-2007-3057 Exploit Pack| CANVAS Description| Xoops Icontent Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: Xoops CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3057 CVE Name: CVE-2007-3057...

CVE-2007-3057

PHP remote file inclusion vulnerability in include/wysiwyg/spawcontrol.class.php in the icontent 4.5 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter. NOTE: this issue is probably a duplicate of CVE-2006-4656...

CVE-2007-3057

Technical details about CVE-2007-3057 are not publicly available in the provided documents. Monitor for updates.

xoopsicontent-rfi.txt

XOOPS Module icontent v.1.0 Remote File Inclusion Exploit //'=============================================================================================== //'Script Name: XOOPS Module icontent v.1.0 //'Author : Mahmoodali //'S.Page :...

XOOPS Module icontent 1.0 Remote File Inclusion Exploit

No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titleXOOPS Module icontent v.1.0 Remote File Inclusion Exploit/title script language="JavaScript"...

XOOPS Multiple Modules spaw_control.class.php spaw_root Parameter Remote File Inclusion

The remote host is running a third-party module for XOOPS. The version of at least one such module installed on the remote host includes a copy of the SPAW PHP WYSIWYG editor control that fails to sanitize user-supplied input to the 'spawroot' parameter of the 'spawcontrol.class.php' script befor...