Enigma WordPress Bridge Enigma2.PHP远程文件包含漏洞

Enigma WordPress Bridge是一款基于PHP的WEB应用程序。 Enigma WordPress Bridge不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Enigma2.PHP'脚本对用户提交的'boarddir'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Enigma WordPress Bridge 目前没有解决方案提供： http://www.lunabyte.org/index.php?module=Downloads;catd=4...

enigma-rfi.txt

----------------------------------------------- Enigma Coppermine Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: requireonce$boarddir . '/PortalSources/Portal.ini.php';...

enigmawp-rfi.txt

----------------------------------------------- Enigma WordPress Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: requireonce$boarddir . '/PortalSources/Portal.ini.php';...

CVE-2006-6863

PHP remote file inclusion vulnerability in the Enigma2 plugin Enigma2.php in Enigma WordPress Bridge allows remote attackers to execute arbitrary PHP code via a URL in the boarddir parameter. NOTE: CVE disputes this issue, since $boarddir is set to a fixed value...

CVE-2006-6864

PHP remote file inclusion vulnerability in E2header.inc.php in Enigma2 Coppermine Bridge 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the boarddir parameter...

Enigma 2 Coppermine Bridge (boarddir) Remote File Include Vulnerability

No description provided by source. ----------------------------------------------- Enigma Coppermine Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: requireonce$boarddir...

Enigma WordPress Bridge (boarddir) Remote File Include

----------------------------------------------- Enigma WordPress Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: requireonce$boarddir . '/PortalSources/Portal.ini.php';...

Enigma Coppermine Bridge (boarddir) Remote File Include

----------------------------------------------- Enigma Coppermine Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: requireonce$boarddir . '/PortalSources/Portal.ini.php';...

Enigma 2 WordPress Bridge (boarddir) Remote File Include Vulnerability

No description provided by source. ----------------------------------------------- Enigma WordPress Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: requireonce$boarddir...

Enigma 2 WordPress Bridge (boarddir) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Enigma 2 WordPress Bridge boarddir Remote File Include Vulnerability ======================================================================...

WordPress Plugin Enigma 2 Bridge - boarddir Remote File Inclusion

WordPress Plugin Enigma 2 Bridge - boarddir Remote File Inclusion ----------------------------------------------- Enigma WordPress Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code:...

Enigma 2 Coppermine Bridge - 'boarddir' Remote File Inclusion

----------------------------------------------- Enigma Coppermine Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: requireonce$boarddir . '/PortalSources/Portal.ini.php';...

WordPress Plugin Enigma 2 Bridge - 'boarddir' Remote File Inclusion

----------------------------------------------- Enigma WordPress Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: requireonce$boarddir . '/PortalSources/Portal.ini.php';...

Enigma 2 Coppermine Bridge - boarddir Remote File Inclusion

Enigma 2 Coppermine Bridge - boarddir Remote File Inclusion ----------------------------------------------- Enigma Coppermine Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code:...

Enigma 2 Coppermine Bridge (boarddir) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Enigma 2 Coppermine Bridge boarddir Remote File Include Vulnerability =======================================================================...

DEBIAN-CVE-2006-6502

Use-after-free vulnerability in the LiveConnect bridge code for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service crash via unknown vectors...

CVE-2006-6502

Use-after-free vulnerability in the LiveConnect bridge code for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service crash via unknown vectors...

security flaw

Use-after-free vulnerability in the LiveConnect bridge code for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service crash via unknown vectors...

security flaw

Use-after-free vulnerability in the LiveConnect bridge code for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service crash via unknown vectors...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:151)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Prior to and including 2.6.16-rc2, when running on x8664 systems with preemption enabled, local users can cause a DoS oops via multiple ptrace tasks that perform single steps CVE-2006-1066. Prior to 2.6.16, a...