Remote file inclusion

PHP remote file inclusion vulnerability in manage/javascript/formjavascript.php in Ay System Solutions Web Content System WCS 2.7.1 allows remote attackers to execute arbitrary PHP code via a URL in the pathJavascriptEdit parameter...

CVE-2007-1771

PHP remote file inclusion vulnerability in manage/javascript/formjavascript.php in Ay System Solutions Web Content System WCS 2.7.1 allows remote attackers to execute arbitrary PHP code via a URL in the pathJavascriptEdit parameter...

CVE-2007-1771

CVE-2007-1771 : Concrete details from multiple sources show a PHP remote file inclusion in Ay System Solutions Web Content System (WCS) 2.7.1. The vulnerability occurs in manage/javascript/formjavascript.php, allowing remote attackers to execute arbitrary PHP code via a URL supplied in the path[J...

AY System Solutions Web Content System远程文件包含漏洞

AY System Solutions Web Content System是一款基于PHP的WEB应用程序。 AY System Solutions Web Content System不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'formjavascript.php'脚本对用户提交的'pathJavascriptEdit'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 AY System Solutions Web Content System 2.7.1 目前没有解决方案提供：...

Web Content System 2.7.1 Remote File Inclusion Exploit

No description provided by source. Web Content System //'=============================================================================================== //'Script Name : Web Content System //' //'? //'.... //'.. //'ERROR------------------------------...

Web Content System 2.7.1 Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ====================================================== Web Content System 2.7.1 Remote File Inclusion Exploit ====================================================== Web Content System...

Web Content System 2.7.1 - Remote File Inclusion

Web Content System //'=============================================================================================== //'Script Name : Web Content System //' //'? //'.... //'.. //'ERROR--------------------------------------------------------- // kezzap66345.Turkey // ... //Basic exploit,but any...

Web Content System 2.7.1 - Remote File Inclusion

Web Content System 2.7.1 - Remote File Inclusion Web Content System //'=============================================================================================== //'Script Name : Web Content System //' //'? //'.... //'.. //'ERROR--------------------------------------------------------- //...

AY Systems Web Content System远程文件包含漏洞

AY Systems Web Content System是一款基于PHP的WEB内容管理程序。 AY Systems Web Content System不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'main.php'脚本对用户提交的'pathShowProcessHandle'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 AY System Solutions Web Content System 2.6 http://www.aysad.net/...