Chaussette远程文件包含漏洞

Chaussette是一款基于PHP的WEB应用程序。 Chaussette不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是多个脚本对用户提交的'BASE'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Chaussette http://freshmeat.net/redir/chaussette/64502/urlzip/chaussette.zip...

CVE-2006-6394

SQL injection vulnerability in certain database classes in Jonas Gauffin Publicera 1.0-rc2 and earlier might allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-6394

The CVE-2006-6394 entry describes an SQL injection vulnerability in certain database classes of Jonas Gauffin Publicera 1.0-rc2 and earlier, potentially allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected software: Jonas Gauffin Publicera 1.0-rc2 and earl...

Chaussette <= 080706 (_BASE) Remote File Include Vulnerabilities

No description provided by source. Chaussette Remote File Inclusion CreW: ToXiC Bug Found By Drago84 Source Code: http://freshmeat.net/redir/chaussette/64502/urlzip/chaussette.zip Page Affect /Classes/Evenement.php /Classes/Event.php /Classes/Eventformonth.php /Classes/Eventformonthperday.php...

CVE-2006-5911

CVE-2006-5911 concerns multiple PHP remote file inclusion vulnerabilities in Campware Campsite prior to 2.6.2. The flaw allows an attacker to cause arbitrary PHP code execution by supplying a URL in the g_documentRoot parameter to a large set of Campware PHP scripts (including Alias.php, Article....

CVE-2006-5911: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the gdocumentRoot parameter to 1 Alias.php, 2 Article.php, 3 ArticleAttachment.php, 4 ArticleComment.php, 5 ArticleData.php, 6 ArticleImage.php, 7...

IBM WebSphere snoopservlet Path Disclosure

This script attempts to enumerate the actual physical path of the servlet classes by requesting a version of 'snoopservlet' which is missing required classes. An attacker, gaining information about the actual physical layout of the file system, can use the information in crafting more complex...

CVE-2006-5731: Undefined Security Weakness

Directory traversal vulnerability in classes/index.php in Lithium CMS 4.04c and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the siteconfcurl parameter, as demonstrated by a POST to news/comment.php containing PHP code, which is stored under...

Jinzora <= 2.1 (media.php) Remote File Include Vulnerability

No description provided by source. Jinzora = 2.1 Remote File Inclusion Download Source : http://www.jinzora.com/downloads/j2.1.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; media.php bugs ; // include classes for extending. requireonce$includepath...

CVE-2006-5546: Undefined Security Weakness

PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System OTSCMS 1.3.0 through 1.4.1 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSconfigotscmsdirectoriesclasses parameter...

CVE-2006-5548: Undefined Security Weakness

PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System OTSCMS 2.0.0 through 2.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSconfigdirectoriesclasses parameter...

CVE-2006-5399: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in classes/ImportMM.class.php in PHPRecipeBook 2.36, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the grbbasedir parameter...

Jinzora-2.1.txt

Jinzora = 2.1 Remote File Inclusion Download Source : http://www.jinzora.com/downloads/j2.1.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; media.php bugs ; // include classes for extending. requireonce$includepath. 'backend/classes.php'; exmple and...

Jinzora 2.1 - media.php Remote File Inclusion

Jinzora 2.1 - media.php Remote File Inclusion Jinzora = 2.1 Remote File Inclusion Download Source : http://www.jinzora.com/downloads/j2.1.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; media.php bugs ; // include classes for extending...

Jinzora 2.1 - 'media.php' Remote File Inclusion

Jinzora = 2.1 Remote File Inclusion Download Source : http://www.jinzora.com/downloads/j2.1.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; media.php bugs ; // include classes for extending. requireonce$includepath. 'backend/classes.php'; exmple and...

Jinzora <= 2.1 (media.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================ Jinzora = 2.1 media.php Remote File Include Vulnerability ============================================================ Jinzora = 2.1 Remote File Inclusion Found By : k1tk4t -...

CVE-2006-4296: Undefined Security Weakness

PHP remote file inclusion vulnerability in classes/Tar.php in bigAPE-Backup component combabackup for Mambo 1.1 allows remote attackers to include arbitrary files via the mosConfigabsolutepath parameter...

CVE-2006-4234: Undefined Security Weakness

PHP remote file inclusion vulnerability in classes/query.class.php in dotProject 2.0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter...

CVE-2006-4159: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Chaussette 080706 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the BASE parameter to scripts in Classes/ including 1 Evenement.php, 2 Event.php, 3 Eventformonth.php, 4 Eventforweek.php, 5 MyLog.php, 6...

Chaussette <= 080706 (_BASE) Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ Chaussette = 080706 BASE Remote File Include Vulnerabilities ================================================================ Chaussette Remote File Inclusion CreW: ToXiC Bug...