Lucene search
K

1978 matches found

exploitpack
exploitpack
added 2006/08/07 12:0 a.m.19 views

PHP Live Helper 2.0 - abs_path Remote File Inclusion

PHP Live Helper 2.0 - abspath Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV43$2006 ------------------------------------------------------------------------------ ECHOADV43$2006 PHP Live Helper = 2.0 abspath Remote File Inclusion...

0.1AI score
Exploits0
Exploit DB
Exploit DB
added 2006/08/07 12:0 a.m.28 views

PHP Live Helper 2.0 - 'abs_path' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV43$2006 ------------------------------------------------------------------------------ ECHOADV43$2006 PHP Live Helper = 2.0 abspath Remote File Inclusion...

7.4AI score
Exploits0
NVD
NVD
added 2006/08/05 1:4 a.m.14 views

CVE-2006-3997

PHP remote file inclusion vulnerability in hsList.php in WoWRoster aka World of Warcraft Roster 1.5.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter...

7.5CVSS7.6AI score0.03342EPSS
Exploits1References7
NVD
NVD
added 2006/08/05 12:4 a.m.20 views

CVE-2006-3984

PHP remote file inclusion vulnerability in phpAdsNew/view.inc.php in Albasoftware Phpauction 2.1 and possibly later versions, with phpAdsNew 2.0.5, allows remote attackers to execute arbitrary PHP code via a URL in the phpAdspath parameter...

7.5CVSS7.5AI score0.03179EPSS
Exploits1References6
Cvelist
Cvelist
added 2006/08/05 12:0 a.m.17 views

CVE-2006-3982

PHP remote file inclusion vulnerability in quickie.php in Knusperleicht Quickie, probably 0.2, allows remote attackers to execute arbitrary PHP code via a URL in the QUICKPATH parameter...

7.5AI score0.02484EPSS
Exploits1References4
NVD
NVD
added 2006/08/01 9:4 p.m.19 views

CVE-2006-3947

PHP remote file inclusion vulnerability in components/commambatstaff/mambatstaff.php in the Mambatstaff 3.1b and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

6.8CVSS7.6AI score0.03043EPSS
Exploits1References8
NVD
NVD
added 2006/07/24 12:19 p.m.21 views

CVE-2006-3676

admin/galleryadmin.php in planetGallery before 14.07.2006 allows remote attackers to execute arbitrary PHP code by uploading files with a double extension and directly accessing the file in the images directory, which bypasses a regular expression check for safe file types...

5.1CVSS7.6AI score0.017EPSS
Exploits1References8
securityvulns
securityvulns
added 2006/07/24 12:0 a.m.177 views

PHP Event Calendar versi 1.4 (path_to_calendar) Remote File Inclusion

SolpotCrew Community PHP Event Calendar versi 1.4 pathtocalendar Remote File Inclusion Vendor site : http://www.softcomplex.com/products/phpeventcalendar/ Bug Found By :Solpot a.k.a k. Hasibuan 13th july 2006 contact: [email protected] Website : http://www.solpotcrew.org/adv/solpot-adv-01.t...

1.5AI score
Exploits0
Cvelist
Cvelist
added 2006/07/21 5:0 p.m.24 views

CVE-2006-3774

PHP remote file inclusion vulnerability in performs.php in the perForms component comperforms 1.0 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

7.6AI score0.05753EPSS
Exploits1References7
0day.today
0day.today
added 2006/07/20 12:0 a.m.105 views

iManage CMS <= 4.0.12 (absolute_path) Remote File Inclusion

Exploit for unknown platform in category web applications =========================================================== iManage CMS = 4.0.12 absolutepath Remote File Inclusion =========================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ /...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2006/07/20 12:0 a.m.45 views

iManage CMS 4.0.12 - &#039;absolute_path&#039; Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV40$2006 --------------------------------------------------------------------------------------------------- ECHOADV40$2006 iManage CMS = 4.0.12 absolutepath Remote File Inclusion...

7.4AI score
Exploits0
NVD
NVD
added 2006/07/12 9:5 p.m.13 views

CVE-2006-3536

Direct static code injection vulnerability in code/classdbtext.php in EJ3 TOPo 2.2.178 and earlier allows remote attackers to execute arbitrary PHP code via parameters such as 1 descripcion and 2 pais, which are stored directly in a PHP script. NOTE: the provenance of this information is unknown;...

7.5CVSS7.4AI score0.01507EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2006/07/11 12:0 a.m.423 views

Mambo phpBB Component download.php phpbb_root_path Parameter Remote File Inclusion

The remote host is running the phpBB component for Mambo, a web-based bulletin board. The version of the phpBB component for Mambo installed on the remote host fails to sanitize input to the 'phpbbrootpath' parameter of the 'download.php' and other scripts before using it to include PHP code...

6.8CVSS6AI score0.05111EPSS
Exploits0References1
exploitpack
exploitpack
added 2006/07/09 12:0 a.m.14 views

Ottoman CMS 1.1.3 - ?default_path Remote File Inclusion (2)

Ottoman CMS 1.1.3 - ?defaultpath Remote File Inclusion 2 !/usr/bin/perl use IO::Socket; Jacek Wlodarczyk j4ck - jacekwloatgmaildotcom Title: Ottoman CMS \r\n"; print "-...

7.5AI score
Exploits0
0day.today
0day.today
added 2006/07/09 12:0 a.m.51 views

Ottoman CMS <= 1.1.3 (default_path) Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ================================================================= Ottoman CMS = 1.1.3 defaultpath Remote File Inclusion Exploit ================================================================= !/usr/bin/perl use IO::Socket; Jacek Wlodarcz...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2006/07/09 12:0 a.m.37 views

Ottoman CMS 1.1.3 - &#039;?default_path=&#039; Remote File Inclusion (2)

!/usr/bin/perl use IO::Socket; Jacek Wlodarczyk j4ck - jacekwloatgmaildotcom Title: Ottoman CMS \r\n"; print "- - Victim's ta...

7.4AI score
Exploits0
NVD
NVD
added 2006/07/06 8:5 p.m.21 views

CVE-2006-3374

PHP remote file inclusion vulnerability in index.php in Randshop 1.2 and earlier, including 0.9.3, allows remote attackers to execute arbitrary PHP code via a URL in the incl parameter...

7.5CVSS7.6AI score0.02562EPSS
Exploits1References4
Cvelist
Cvelist
added 2006/07/06 8:0 p.m.20 views

CVE-2006-3361

PHP remote file inclusion vulnerability in Stud.IP 1.3.0-2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the 1 PHPLIBlibdir parameter in studip-phplib/oohforms.inc and 2 ABSOLUTEPATHSTUDIP parameter in studip-htdocs/archivassi.php...

7.6AI score0.02649EPSS
Exploits1References5
Cvelist
Cvelist
added 2006/07/06 8:0 p.m.21 views

CVE-2006-3381

SturGeoN Upload allows remote attackers to execute arbitrary PHP code by uploading a file with a .php extension, then directly accessing the file. NOTE: It is uncertain whether this is a vulnerability or a feature of the product...

7.6AI score0.02575EPSS
Exploits1References4
Cvelist
Cvelist
added 2006/07/06 8:0 p.m.27 views

CVE-2006-3395

PHP remote file inclusion vulnerability in top.php in SiteBuilder-FX 3.5 allows remote attackers to execute arbitrary PHP code via a URL in the admindir parameter...

7.5AI score0.03081EPSS
Exploits1References7
Rows per page
Query Builder