EUVD-2007-2423

Malware in sbrugna...

Ahhp Portal Page.PHP Multiple Remote File Include Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/23658/info Ahhp Portal is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and...

CVE-2007-2428

Multiple PHP remote file inclusion vulnerabilities in page.php in Ahhp-Portal allow remote attackers to execute arbitrary PHP code via a URL in the 1 fp or 2 sc parameter...

CVE-2007-2428

Multiple PHP remote file inclusion vulnerabilities in page.php in Ahhp-Portal allow remote attackers to execute arbitrary PHP code via a URL in the 1 fp or 2 sc parameter...

Ahhp Portal Page.PHP远程文件包含漏洞

Ahhp Portal是一款基于PHP的WEB应用程序。 Ahhp Portal不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Page.PHP'脚本对用户提交的WEB参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Ahhp-Portal 目前没有解决方案提供： http://www.ahhope.org/ http://www.example.com/page.php?fp=r57shell? http://www.example.com/page.php?sc=r57shell?...

Ahhp Portal - page.php Multiple Remote File Inclusions

Ahhp Portal - page.php Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/23658/info Ahhp Portal is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromis...

Ahhp(php)-Portal Remote File Inclusion

Ahhp-Portal Remote File Inclusion SЭTE:www.ahhope.org Demo:http://xinan.ahtcm.edu.cn Demo2http://www.hfspaq.gov.cn Vul Code: ? if $sc=='' include$fp.".php"; else include$sc."/".$fp.".php"; ? ------------------------------------------------ example: http://site/page.php?fp=r57shell?...

Ahhp Portal - 'page.php' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/23658/info Ahhp Portal is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...