A-Conman Common.Inc.PHP远程文件包含漏洞

A-Conman是一款基于php的WEB应用程序。 A-Conman不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Common.Inc.PHP'脚本对用户提交的'cmbasedir'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 a-ConMan a-ConMan 3.2b 目前没有解决方案提供： http://www.a-conman.com/...

Echo Security Advisory 2006.61

------------------------------------------------------------------------------ ECHOADV61$2006 a-ConMan = v3.2beta Remote File Inclusion ------------------------------------------------------------------------------ Author : Ahmad Maulana a.k.a Matdhule Date Found : November, 22nd 2006 Location :...

CVE-2006-6078

CVE-2006-6078 : PHP remote file inclusion in the a-ConMan 3.2 beta package. The vulnerability is in common.inc.php, allowing remote attackers to execute arbitrary PHP code by supplying a URL in the cm_basedir parameter. Documented impact is arbitrary code execution via crafted input; exploitation...

a-ConMan <= 3.2b (common.inc.php) Remote File Inclusion Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV61$2006 ------------------------------------------------------------------------------ ECHOADV61$2006 a-ConMan = v3.2beta Remote File Inclusion...