CVE-2008-1042: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/body.inc.php in Linux Web Shop LWS php Download Manager 1.0 and 1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the content parameter...

pdm-lfi.txt

Author : BeyazKurt Contact : [email protected] Script : php Download Manager v1.1 & 1.0 Risk : Local File Include Download : http://sourceforge.net/project/showfiles.php?groupid=185482 File : include/body.inc.php Code : This page has no content."; ? Exploit :...

CVE-2006-5634

Multiple PHP remote file inclusion vulnerabilities in phpProfiles 2.1 Beta allow remote attackers to execute arbitrary PHP code via a URL in the 1 reqpath parameter to a body.inc.php and b bodyblog.inc.php in users/include/; or the 2 usrinc parameter in users/include/uploadht.inc.php...

CVE-2006-5634: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in phpProfiles 2.1 Beta allow remote attackers to execute arbitrary PHP code via a URL in the 1 reqpath parameter to a body.inc.php and b bodyblog.inc.php in users/include/; or the 2 usrinc parameter in users/include/uploadht.inc.php...