Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in PeopleAggregator 1.2pre6, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the currentblockmodulepath parameter to 1 AudiosMediaGalleryModule/AudiosMediaGalleryModule.php, 2...

CVE-2007-5631

Vulnerability summary (CVE-2007-5631) : In PeopleAggregator 1.2pre6, multiple PHP remote file inclusion flaws exist when PHP register_globals is enabled. An attacker can abuse the current_blockmodule_path parameter (and related path_prefix usage) to cause arbitrary PHP code execution via modules ...

PeopleAggregator 1.2pre6-release-53 - Multiple Remote File Inclusions

PeopleAggregator 1.2pre6-release-53 - Multiple Remote File Inclusions PeopleAggregator 1.2pre6 Multiple Remote File Inclusion Vulnerabilities http://update.peopleaggregator.org/dist/peopleaggregator-1.2pre6-release-53.tar.gz DORK : "copyright 2006 Broadband Mechanics" POC :...