EUVD-2007-2754

Malware in sbrugna...

Build It Fast远程文件包含漏洞

Build It Fast是一款基于PHP的WEB应用程序。 Build It Fast不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'sysdir'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Build it Fast 0.4.1 目前没有解决方案提供： http://bif.lunix.com.ar/ http://www.example.com/Base/Application.php?peardir=Shell...

CVE-2007-2762

Multiple PHP remote file inclusion vulnerabilities in Build it Fast bif3 0.4.1 allow remote attackers to execute arbitrary PHP code via a URL in 1 the peardir parameter to Base/Application.php, or the 2 sysdir parameter to a Footer.php, b widget.BifContainer.php, c widget.BifRoot.php, d...

CVE-2007-2762

Multiple PHP remote file inclusion vulnerabilities in Build it Fast bif3 0.4.1 allow remote attackers to execute arbitrary PHP code via a URL in 1 the peardir parameter to Base/Application.php, or the 2 sysdir parameter to a Footer.php, b widget.BifContainer.php, c widget.BifRoot.php, d...

CVE-2007-2762

CVE-2007-2762 describes multiple PHP remote file inclusion vulnerabilities in Build it Fast (bif3) 0.4.1. An attacker can cause arbitrary PHP code execution by supplying a URL via (1) pear_dir to Base/Application.php or (2) sys_dir to any of the following files in Widgets/Base/: Footer.php, widge...

Build it Fast (bif3) 0.4.1 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. bif3-0.4.1 = Remote File Include Vulnerablitiy D.Script: http://bif.lunix.com.ar/tgz/bif3-0.4.1.tgz Discovered by: Alkomandoz Hacker Homepage: asb-may.net & mohandko.com & sniper-sa.com ====================================...

Build it Fast (bif3) 0.4.1 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ========================================================================= Build it Fast bif3 0.4.1 Multiple Remote File Inclusion Vulnerabilities ========================================================================= bif3-0.4.1 = Remote...