EUVD-2006-6028

Malware in sbrugna...

CVE-2007-2422

Multiple PHP remote file inclusion vulnerabilities in Modules Builder modbuild 4.1 for Comdev One Admin allow remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter to 1 config-bak.php or 2 config.php. NOTE: CVE disputes this vulnerability because the unmodified...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Modules Builder modbuild 4.1 for Comdev One Admin allow remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter to 1 config-bak.php or 2 config.php. NOTE: CVE disputes this vulnerability because the unmodified...

CVE-2007-2422

Multiple PHP remote file inclusion vulnerabilities in Modules Builder modbuild 4.1 for Comdev One Admin allow remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter to 1 config-bak.php or 2 config.php. NOTE: CVE disputes this vulnerability because the unmodified...

CVE-2007-2422

The CVE-2007-2422 issue affects Comdev One Admin Modules Builder (modbuild) v4.1. A PHP Remote File Inclusion vulnerability exists via the path[docroot] parameter to the endpoints (1) config-bak.php and (2) config.php, enabling remote code execution. Root cause notes indicate unmodified scripts s...

CVE-2006-6045

Multiple PHP remote file inclusion vulnerabilities in Comdev One Admin Pro 4.1 allow remote attackers to execute arbitrary PHP code via a URL in the pathskin parameter to 1 adminfoot.php, 2 adminhead.php, or 3 adminlogin.php...

CVE-2006-6045

CVE-2006-6045 describes multiple PHP remote file inclusion vulnerabilities in Comdev One Admin Pro 4.1. The flaw allows remote attackers to execute arbitrary PHP code by passing a malicious URL in the path[skin] parameter to adminfoot.php, adminhead.php, or adminlogin.php. Affected software: Comd...

Comdev One Admin Pro path[docroot]及path[skin]参数文件包含漏洞

Comdev One Admin Pro是用于为数据库驱动的网站创建PHP模块的平台。 Comdev One Admin Pro的多个脚本在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 Comdev One Admin Pro的adminfoot.php、adminhead.php和adminlogin.php脚本没有正确地验证pathdocroot及pathskin参数的输入，允许攻击者通过包含本地或外部资源的文件导致执行任意PHP代码。漏洞相关的代码如下： ? include$path"docroot".$path"skin"...

comdev41.txt

Comdev One Admin Pro.v4.1 pathskin Remote File include Found by : AG-Spider C0ntAct : AG-Spider at msn dot com Affected Software : One Admin Pro.v4.1 Download Script : http://www.conovo.de/script/OneAdminPro.v4.1.zip KaBaRa.HaCk.eGy KILLERxXx CRASHOVERRIDE SwEEt-deVil Young Hacker Arab Security...

Comdev One Admin Pro.v4.1 ( path[skin] ) Remote File include

Comdev One Admin Pro.v4.1 pathskin Remote File include Found by : AG-Spider C0ntAct : AG-Spider at msn dot com Affected Software : One Admin Pro.v4.1 Download Script : http://www.conovo.de/script/OneAdminPro.v4.1.zip ? include$path"docroot".$path"skin". Exploit :-...

多个Comdev产品adminfoot.php远程文件包含漏洞

Comdev是一家软件开发公司，提供多种商业Web组件。 多个Comdev产品在处理用户请求时存在输入验证漏洞，远程攻击者可能利用漏洞在服务器上以Web进程权限执行任意命令。 多个Comdev产品的adminfoot.php脚本没有正确过滤对pathdocroot参数的输入，允许攻击者通过包含本地或外部资源的文件执行任意PHP代码。成功攻击要求打开了registerglobals。 Comdev Web Blogger 4.1 Comdev One Admin Pro 4.1 Comdev Misc Tools 4.1 Comdev Forum 4.1 Comdev Form...

ComdevOneAdmin4.1.txt

// http://www.w4cking.com CREDIT: w4ck1ng.com PRODUCT: Comdev One Admin 4.1 http://www.comdevweb.com/oneadmin.php VULNERABILITY: Remote File Inclusion NOTES: - requires register globals on - requires magic quotes off POC: //oneadmin/adminfoot.php?pathdocroot= ADVISORY & EXPLOIT requires...

Comdev One Admin 4.1 Remote File Inclusion

// http://www.w4cking.com CREDIT: w4ck1ng.com PRODUCT: Comdev One Admin 4.1 http://www.comdevweb.com/oneadmin.php VULNERABILITY: Remote File Inclusion NOTES: - requires register globals on - requires magic quotes off POC: host/path/oneadmin/adminfoot.php?pathdocroot=local/remote file ADVISORY &...

Comdev One Admin 4.1 - Adminfoot.php Remote Code Execution

Comdev One Admin 4.1 - Adminfoot.php Remote Code Execution !/usr/bin/php //oneadmin/adminfoot.php?pathdocroot= Googledork: inurl:/oneadmin/ w4ck1ng - w4ck1ng.com / if!$argv3 die"Usage: php $argv0 host path command\n Usage Example: php $argv0 domain.com /dolphin/ whoami\n"; function send$host, $pu...

Comdev One Admin 4.1 - 'Adminfoot.php' Remote Code Execution

!/usr/bin/php //oneadmin/adminfoot.php?pathdocroot= Googledork: inurl:/oneadmin/ w4ck1ng - w4ck1ng.com / if!$argv3 die"Usage: php $argv0 host path command\n Usage Example: php $argv0 domain.com /dolphin/ whoami\n"; function send$host, $put global $data; $conn = fsockopen gethostbyname$host,"80" ;...