107 matches found
CVE-2007-2647: Undefined Security Weakness
Static code injection vulnerability in admin/adminconfiguration.php in Monalbum 0.8.7 allows remote authenticated users to inject arbitrary PHP code into the conf/config.inc.php file via the 1 gadmpass, 2 gadmuser, 3 gcfgHote, 4 gcfgPass, 5 gcfgUser, 6 gclassementrep, 7 gcontour, 8 gfond, 9...
CVE-2007-2620: Undefined Security Weakness
PHP remote file inclusion vulnerability in inc/config.inc.php in Jakub Steiner aka jimmac original 0.11 allows remote attackers to execute arbitrary PHP code via a URL in the x1 parameter...
Monalbum 0.8.7 Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================ Monalbum 0.8.7 Remote Code Execution Exploit ============================================ "; if isset$mod //submit $fichier = "../conf/config.inc.php"; $fd = fopen$fichier, "w"; $gcfgBase =...
Original 0.11 - config.inc.php?x[1] Remote File Inclusion
Original 0.11 - config.inc.php?x1 Remote File Inclusion Original Version 0.11config.inc.php Remote File Inclusion Vulnerability D.Script: http://xanatos.glo.org.mx/bi/original-0.11.tar.bz2 Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.Com/cc Exploit:Path/inc/config.inc.php?x1=Shell...
phpOracleView (include_all.inc.php page_dir) RFI Vulnerability
Exploit for unknown platform in category web applications ============================================================== phpOracleView includeall.inc.php pagedir RFI Vulnerability ============================================================== =============================== phporacleview = pagedi...
CVE-2007-2001: Undefined Security Weakness
Multiple direct static code injection vulnerabilities in admin/configurer2.php in Crea-Book 1.0 and earlier allow remote authenticated administrators to execute arbitrary PHP code via the "Fond de la page" background color field and other unspecified fields, which injects into config.inc.php3...
CVE-2007-0659
download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary files, as demonstrated by downloading config.inc.php to obtain database credentials...
CVE-2007-0659
download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary files, as demonstrated by downloading config.inc.php to obtain database credentials...
CVE-2007-0659: Undefined Security Weakness
download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary files, as demonstrated by downloading config.inc.php to obtain database credentials...
NSGalPHP Config.Inc.PHP远程文件包含漏洞
NSGalPHP是一款基于PHP的WEB应用程序。 NSGalPHP不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Config.Inc.PHP'脚本对用户提交的'racineTBS'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 nsGalPHP 目前没有解决方案提供,请关注以下链接： http://www.easy-script.com/compt.php?id=3521 http://www.example.com/path/includes/config.inc.php?racineTBS=PHPSHELL...
nsGalPHP (includes/config.inc.php racineTBS) Remote Inclusion Vuln
No description provided by source. | | \ | S.W.A.T. | / \ | | / / || \ /  ...
nsGalPHP (includes/config.inc.php racineTBS) Remote Inclusion Vuln
Exploit for unknown platform in category web applications ================================================================== nsGalPHP includes/config.inc.php racineTBS Remote Inclusion Vuln ================================================================== | | \ | S.W.A.T. | / \ | | / / || \ / ...
CVE-2007-0495: Undefined Security Weakness
PHP remote file inclusion vulnerability in include/config.inc.php in PhpSherpa allows remote attackers to execute arbitrary PHP code via a URL in the racine parameter...
PhpSherpa (include/config.inc.php) Remote File Include Vulnerability
No description provided by source. ------------------------------------------------------------------------------------------------------------------------ Script:PhpSherpa Affected Version:.... Downlaoad:http://linuxeduquebec.org/IMG/tgz/sherpa.tgz...
PHPSherpa - '/include/config.inc.php' Remote File Inclusion
------------------------------------------------------------------------------------------------------------------------ Script:PhpSherpa Affected Version:.... Downlaoad:http://linuxeduquebec.org/IMG/tgz/sherpa.tgz...
Torbstoff News 4 (pfad) Remote File Inclusion Vulnerability
No description provided by source. ================================================================= Torbstoff News 4 = pfad Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://www.torbstoff.de | |...
miniCWB <= 1.0.0 (contact.php) Local File Include Exploit
No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...
lesvisit (visiteurs) <= v2.0 (lvc_include_dir) Remote File Include Vulnerability
============================================================================================== lesvisit visiteurs = v2.0 lvcincludedir Remote File Include Vulnerability =============================================================================================== Critical Level : Dangerous...
Les Visiteurs (Visitors) 2.0 - config.inc.php File Inclusion
Les Visiteurs Visitors 2.0 - config.inc.php File Inclusion ============================================================================================== lesvisit visiteurs = v2.0 lvcincludedir Remote File Include Vulnerability...
Les Visiteurs (Visitors) 2.0 - 'config.inc.php' File Inclusion
============================================================================================== lesvisit visiteurs = v2.0 lvcincludedir Remote File Include Vulnerability =============================================================================================== Critical Level : Dangerous...