CVE-2006-6864

PHP remote file inclusion vulnerability in E2header.inc.php in Enigma2 Coppermine Bridge 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the boarddir parameter...

CVE-2006-6864

Technical details about CVE-2006-6864 are not publicly available in the provided documents. Monitor for updates in connected sources for affected product/version, impact, and remediation information.

Enigma Coppermine Bridge E2_Header.Inc.PHP远程文件包含漏洞

Enigma WordPress Bridge是一款基于PHP的WEB应用程序。 Enigma WordPress Bridge不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'E2Header.Inc.PHP'脚本对用户提交的'boarddir'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Enigma WordPress Bridge 目前没有解决方案提供： http://www.lunabyte.org/index.php?module=Downloads;catd=4...

CVE-2006-6864: Undefined Security Weakness

PHP remote file inclusion vulnerability in E2header.inc.php in Enigma2 Coppermine Bridge 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the boarddir parameter...

enigma-rfi.txt

----------------------------------------------- Enigma Coppermine Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: requireonce$boarddir . '/PortalSources/Portal.ini.php';...

CVE-2006-6864

PHP remote file inclusion vulnerability in E2header.inc.php in Enigma2 Coppermine Bridge 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the boarddir parameter...

Enigma Coppermine Bridge (boarddir) Remote File Include

----------------------------------------------- Enigma Coppermine Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: requireonce$boarddir . '/PortalSources/Portal.ini.php';...

Enigma 2 Coppermine Bridge (boarddir) Remote File Include Vulnerability

No description provided by source. ----------------------------------------------- Enigma Coppermine Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: requireonce$boarddir...

Enigma 2 Coppermine Bridge (boarddir) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Enigma 2 Coppermine Bridge boarddir Remote File Include Vulnerability =======================================================================...

Enigma 2 Coppermine Bridge - boarddir Remote File Inclusion

Enigma 2 Coppermine Bridge - boarddir Remote File Inclusion ----------------------------------------------- Enigma Coppermine Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code:...

Enigma 2 Coppermine Bridge - 'boarddir' Remote File Inclusion

----------------------------------------------- Enigma Coppermine Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: requireonce$boarddir . '/PortalSources/Portal.ini.php';...

Coppermine Photo Gallery Theme.PHP远程文件包含漏洞

Coppermine Photo Gallery是一款基于PHP的图片管理程序。 Coppermine Photo Gallery不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'theme.php'脚本对用户提交的"THEMEDIR"参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Coppermine Photo Gallery 1.2.2 b-Nuke http://coppermine-gallery.net/index.php...

CVE-2006-6123

Coppermine Photo Gallery CPG 1.4.8 stable, with registerglobals enabled, allows remote attackers to bypass XSS protection and set arbitrary variables via a query string that causes the variable to be defined in global space, with separate GET, REQUEST, or other critical parameters, which are unse...

CVE-2006-6123

Coppermine Photo Gallery CPG 1.4.8 stable, with registerglobals enabled, allows remote attackers to bypass XSS protection and set arbitrary variables via a query string that causes the variable to be defined in global space, with separate GET, REQUEST, or other critical parameters, which are unse...

CVE-2006-6123

CVE-2006-6123 affects Coppermine Photo Gallery (CPG) 1.4.8 stable. With register_globals enabled, a crafted query string can cause variables to be defined in the global space, bypassing XSS protection and allowing remote attackers to set arbitrary variables via separate _GET, _REQUEST, or other p...

CVE-2006-6123: Undefined Security Weakness

Coppermine Photo Gallery CPG 1.4.8 stable, with registerglobals enabled, allows remote attackers to bypass XSS protection and set arbitrary variables via a query string that causes the variable to be defined in global space, with separate GET, REQUEST, or other critical parameters, which are unse...

CVE-2006-5622

SQL injection vulnerability in picmgr.php in Coppermine Photo Gallery 1.4.9 allows remote attackers to execute arbitrary SQL commands via the aid parameter...

CVE-2006-5622

SQL injection vulnerability in picmgr.php in Coppermine Photo Gallery 1.4.9 allows remote attackers to execute arbitrary SQL commands via the aid parameter...

CVE-2006-5622

CVE-2006-5622 affects Coppermine Photo Gallery 1.4.9, where SQL injection is possible in picmgr.php via the aid parameter. This could allow remote attackers to execute arbitrary SQL commands. The provided documents do not specify a fixed version patch or remediation, and exploitation details are ...

CVE-2006-5622: Undefined Security Weakness

SQL injection vulnerability in picmgr.php in Coppermine Photo Gallery 1.4.9 allows remote attackers to execute arbitrary SQL commands via the aid parameter...