CVE-2007-2317

Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier, as used by TOSMO/Mambo 4.0.12 and probably other products, allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to bbplugins.php in 1 components/minibb/ or 2...

CVE-2007-2307

PHP remote file inclusion vulnerability in engine/engine.inc.php in WebKalk2 1.9.0 allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter...

CVE-2007-2307: Undefined Security Weakness

PHP remote file inclusion vulnerability in engine/engine.inc.php in WebKalk2 1.9.0 allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter...

CVE-2007-2317: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier, as used by TOSMO/Mambo 4.0.12 and probably other products, allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to bbplugins.php in 1 components/minibb/ or 2...

CVE-2007-2181

PHP remote file inclusion vulnerability in admin/login.php in Webinsta FM Manager 0.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter, a different product and vector than CVE-2005-0748...

CVE-2007-2181: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/login.php in Webinsta FM Manager 0.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter, a different product and vector than CVE-2005-0748...

Tosmo Mambo <= 4.0.12 (absolute_path) Multiple RFI Vulnerabilities

======================================================= Tosmo Mambo = 4.0.12 absolutepath Multiple RFI Vulnerabilities ======================================================= Found By : Cold z3ro , [email protected] ======================================================= Homepage:...

CVE-2007-2089: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to comarticles.php in 1 components/ or 2 classes/html/...

Mambo/Joomla New Article Absolute_Path远程文件包含漏洞

Mambo/Joomla New Article是一款基于PHP的WEB应用程序。 Mambo/Joomla New Article不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是脚本对用户提交的'Absolutepath'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Mambo New Article Component 1.1 目前没有解决方案提供： http://mamboserver.com/...

CVE-2007-2049: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in the Calendar Module comcalendar 1.5.5 for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 comcalendar.php or 2 modcalendar.php...

WebKalk2 1.9.0 - absolute_path Remote File Inclusion

WebKalk2 1.9.0 - absolutepath Remote File Inclusion WebKalk2 1.9.0 Remote File Include Vulnerablity D.Script: http://www.linuxdelta.de/uploads/media/webkalk2-1.9.0.tar.gz Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/engine/engine.inc.php?absolutepath=Shell.txt?...

CVE-2006-6976: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in centipaidclass.php in CentiPaid 1.4.2 and earlier allows remote attackers to execute arbitrary code via a URL in the absolutepath parameter...

CVE-2006-3843: Undefined Security Weakness

PHP remote file inclusion vulnerability in comcalendar.php in Calendar Mambo Module 1.5.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter...

CVE-2006-3771: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in component.php in iManage CMS 4.0.12 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 articles.php, 2 contact.php, 3 displaypage.php, 4 faq.php, 5 mainbody.php, 6 news.php, 7...

iManage CMS 4.0.12 - 'absolute_path' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV40$2006 --------------------------------------------------------------------------------------------------- ECHOADV40$2006 iManage CMS = 4.0.12 absolutepath Remote File Inclusion...

iManage CMS <= 4.0.12 (absolute_path) Remote File Inclusion

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV40$2006 --------------------------------------------------------------------------------------------------- ECHOADV40$2006 iManage CMS = 4.0.12 absolutepath Remote File...

CVE-2006-3690

CVE-2006-3690 : The provided documents describe multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier. The flaw allows remote attackers to execute arbitrary PHP code by supplying a crafted URL in the absolute_path parameter to (1) components/com_minibb.php or (2) com...

CVE-2006-3690: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 components/comminibb.php or 2 components/minibb/index.php...

CVE-2005-0748: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in initdb.php for WEBInsta Mailing list manager 1.3d allows remote attackers to execute arbitrary PHP code by modifying the absolutepath parameter to reference a URL on a remote web server that contains the code...