EUVD-2005-1885

Malware in sbrugna...

PHP multiple security vulnerabilities

DoS, basedir protection bypass, crossite scripting...

CVE-2009-3897

Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the basedir directory, and possibly the basedir directory...

CVE-2009-3897: Incorrect Permission Assignment for Critical Resource

Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the basedir directory, and possibly the basedir directory...

CVE-2009-2378: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in formmailer.admin.inc.php in Jax FormMailer 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the BASEDIRjaxformmailer parameter...

CVE-2008-1682: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in quiz/common/dbconfig.inc.php in the Online FlashQuiz comonlineflashquiz 1.0.2 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the basedir parameter...

CVE-2007-4978

Multiple PHP remote file inclusion vulnerabilities in phpSyncML 0.1.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the basedir parameter to 1 Decoder.php and 2 Encoder.php in WBXML/...

CVE-2007-4978

CVE-2007-4978 affects phpSyncML 0.1.2 and earlier. The vulnerability is a PHP remote file inclusion in WBXML/Decoder.php and WBXML/Encoder.php triggered by supplying a URL in the base_dir parameter, enabling remote attackers to execute arbitrary PHP code. The CVSS metrics indicate network access,...

phpCC 4.2 beta (base_dir) Remote File Inclusion Vulnerability

No description provided by source. SolpotCrew Community phpCC - Beta 4.2 basedir Remote File Inclusion Download file : http://www.phpcc.at/downloadfile1.html Bug Found By :Solpot a.k.a k. Hasibuan 06-08-2006 contact: [email protected] Website : http://www.solpotcrew.org/adv/solpot-adv-05.tx...

CVE-2006-4443: Undefined Security Weakness

PHP remote file inclusion vulnerability in myajaxphp.php in AlstraSoft Video Share Enterprise allows remote attackers to execute arbitrary PHP code via a URL in the configBASEDIR parameter...

CVE-2006-4073

Multiple PHP remote file inclusion vulnerabilities in Fabian Hainz phpCC Beta 4.2 allow remote attackers to execute arbitrary PHP code via a URL in the basedir parameter to 1 login.php, 2 reactivate.php, or 3 register.php...

CVE-2006-4073: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Fabian Hainz phpCC Beta 4.2 allow remote attackers to execute arbitrary PHP code via a URL in the basedir parameter to 1 login.php, 2 reactivate.php, or 3 register.php...

SolpotCrew Advisory #6 - phpCC - Beta 4.2 (base_dir) Remote File Inclusion

SolpotCrew Community phpCC - Beta 4.2 basedir Remote File Inclusion Download file : http://www.phpcc.at/downloadfile1.html Bug Found By :Solpot a.k.a k. Hasibuan 06-08-2006 contact: [email protected] Website : http://www.solpotcrew.org/adv/solpot-adv-05.txt Greetz: choi , h4ntu , Ibnusina ,...

phpCC 4.2 Beta - base_dir Remote File Inclusion

phpCC 4.2 Beta - basedir Remote File Inclusion SolpotCrew Community phpCC - Beta 4.2 basedir Remote File Inclusion Download file : http://www.phpcc.at/downloadfile1.html Bug Found By :Solpot a.k.a k. Hasibuan 06-08-2006 contact: [email protected] Website :...

phpCC 4.2 beta (base_dir) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================= phpCC 4.2 beta basedir Remote File Inclusion Vulnerability ============================================================= SolpotCrew Community phpCC - Beta 4.2 basedir Remote Fil...

CVE-2005-1883

global.php in YaPiG 0.92b allows remote attackers to include arbitrary local files via the BASEDIR parameter...

CVE-2005-1883

CVE-2005-1883 affects YaPiG (YaPiG 0.92b) and is documented as a local/remote file inclusion vulnerability. The root cause is an insecure handling of the BASE_DIR parameter in global.php, allowing attackers to include arbitrary local files. Public references (NVD, CVE listings) confirm this entry...

CVE-2005-1883: Undefined Security Weakness

global.php in YaPiG 0.92b allows remote attackers to include arbitrary local files via the BASEDIR parameter...

CVE-2004-2010

PHP remote file inclusion vulnerability in index.php in phpShop 0.7.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the basedir parameter to reference a URL on a remote web server that contains phpshop.cfg...

CVE-2004-2010: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in phpShop 0.7.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the basedir parameter to reference a URL on a remote web server that contains phpshop.cfg...