EUVD-2007-1980

Malware in sbrugna...

EUVD-2006-2816

Malware in sbrugna...

Barnraiser Prairie OpenID idp: Directory traversal attack

The OpenID idp software "Barnraiser Prairie" http://www.barnraiser.org/prairie/ is vulnerable to directory traversal attacks: ./getfile.php does not limit the given path and allows directory traversal attacks with full public access to all images on the server. Example exploit:...

Barnraiser Prairie - get_file.php Directory Traversal

Barnraiser Prairie - getfile.php Directory Traversal source: https://www.securityfocus.com/bid/60782/info Barnraiser Prairie is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. Remote attackers can use specially crafted requests with...

Barnraiser Prairie Directory Traversal

The OpenID idp software "Barnraiser Prairie" http://www.barnraiser.org/prairie/ is vulnerable to directory traversal attacks: ./getfile.php does not limit the given path and allows directory traversal attacks with full public access to all images on the server. Example exploit:...

Barnraiser Prairie - 'get_file.php' Directory Traversal

source: https://www.securityfocus.com/bid/60782/info Barnraiser Prairie is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. Remote attackers can use specially crafted requests with directory-traversal sequences '../' to access arbitrary image...

CVE-2007-1986

Multiple PHP remote file inclusion vulnerabilities in barnraiser AROUNDMe 0.7.7 allow remote attackers to execute arbitrary PHP code via a URL in the 1 languagepathcore parameter to inc/coreprofile.header.php, the 2 templatepathcore parameter to template/barnraiser01/maintcontactview.tpl.php, and...

CVE-2007-1986

Multiple PHP remote file inclusion vulnerabilities in barnraiser AROUNDMe 0.7.7 allow remote attackers to execute arbitrary PHP code via a URL in the 1 languagepathcore parameter to inc/coreprofile.header.php, the 2 templatepathcore parameter to template/barnraiser01/maintcontactview.tpl.php, and...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in barnraiser AROUNDMe 0.7.7 allow remote attackers to execute arbitrary PHP code via a URL in the 1 languagepathcore parameter to inc/coreprofile.header.php, the 2 templatepathcore parameter to template/barnraiser01/maintcontactview.tpl.php, and...

CVE-2007-1986

Multiple PHP remote file inclusion vulnerabilities in barnraiser AROUNDMe 0.7.7 allow remote attackers to execute arbitrary PHP code via a URL in the 1 languagepathcore parameter to inc/coreprofile.header.php, the 2 templatepathcore parameter to template/barnraiser01/maintcontactview.tpl.php, and...

CVE-2007-1986

CVE-2007-1986 describes multiple PHP remote file inclusion vulnerabilities in barnraiser AROUNDMe 0.7.7. The issue allows remote attackers to execute arbitrary PHP code by supplying URLs through one of three vectors: (1) language_path_core to inc/core_profile.header.php, (2) template_path_core to...

aroundme-rfi.txt

AROUNDMe 077 Found by kezzap66345 Script Download:http://download.savannah.gnu.org/releases/aroundme/aroundme077.tar.gz ERROR1: File:\components\core\inc\coreprofile.header.php includeonce$languagepathcore . 'inc/mecommon.inc.php'; rfi coded RFI2:...

Remote file inclusion

PHP remote file inclusion vulnerability in Wiki.php in Barnraiser Igloo 0.1.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cnodeclasspath parameter...

CVE-2006-2819

PHP remote file inclusion vulnerability in Wiki.php in Barnraiser Igloo 0.1.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cnodeclasspath parameter...

CVE-2006-2819

The provided records identify CVE-2006-2819 as a PHP remote file inclusion vulnerability in Barnraiser Igloo 0.1.9 and earlier, exploitable via a URL in the c_node[class_path] parameter of Wiki.php. The vulnerability could allow remote attackers to execute arbitrary PHP code. Affected software is...

CVE-2006-2819

PHP remote file inclusion vulnerability in Wiki.php in Barnraiser Igloo 0.1.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cnodeclasspath parameter...