EUVD-2006-2925

Malware in sbrugna...

cms-bandits2.5.txt

----------------------------------------------------- Advisory id: FSA:006 Author: Federico Fazzi Date: 08/06/2006, 11:09 Sinthesis: cms-bandits 2.5, Remote command execution Type: high Product: http://sourceforge.net/projects/cms-bandits Patch: unavailable...

CVE-2006-2928

Multiple PHP remote file inclusion vulnerabilities in CMS-Bandits 2.5 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter in 1 dialogs/img.php and 2 dialogs/td.php...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in CMS-Bandits 2.5 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter in 1 dialogs/img.php and 2 dialogs/td.php...

CVE-2006-2928

CMS-Bandits 2.5 and earlier are affected by multiple PHP remote file inclusion vulnerabilities when register_globals is enabled. The issue allows remote attackers to execute arbitrary PHP code by supplying a crafted URL in the spaw_root parameter of dialogs/img.php and dialogs/td.php. Root cause:...

cms-bandits 2.5, Remote command execution

----------------------------------------------------- Advisory id: FSA:006 Author: Federico Fazzi Date: 08/06/2006, 11:09 Sinthesis: cms-bandits 2.5, Remote command execution Type: high Product: http://sourceforge.net/projects/cms-bandits Patch: unavailable...

cms-bandits 2.5 (spaw_root) Remote File Include Vulnerabilities

No description provided by source. Author: Federico Fazzi Contact: [email protected] Date: 08/06/2006, 11:09 Sinthesis: cms-bandits 2.5, Remote file disclosure Product: http://sourceforge.net/projects/cms-bandits http://site/cms-bandits/dialogs/td.php?spawroot=evil script...

cms-bandits 2.5 (spaw_root) Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications =============================================================== cms-bandits 2.5 spawroot Remote File Include Vulnerabilities =============================================================== Author: Federico Fazzi Contact: email protected...