12 matches found
EUVD-2008-3301
Malware in sbrugna...
CreaCMS fonctions/get_liste_langue.php cfg[base_uri_admin] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/30284/info CreaCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues can allow an attacker to compromise the application and the...
CreaCMS edition_article/edition_article.php cfg[document_uri] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/30284/info CreaCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues can allow an attacker to compromise the application and the...
CVE-2008-3313
Multiple PHP remote file inclusion vulnerabilities in CreaCMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 cfgdocumenturi parameter to administration/editionarticle/editionarticle.php and the 2 cfgbaseuriadmin parameter to administration/fonctions/getlistelangue.php...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in CreaCMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 cfgdocumenturi parameter to administration/editionarticle/editionarticle.php and the 2 cfgbaseuriadmin parameter to administration/fonctions/getlistelangue.php...
CVE-2008-3313
Multiple PHP remote file inclusion vulnerabilities in CreaCMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 cfgdocumenturi parameter to administration/editionarticle/editionarticle.php and the 2 cfgbaseuriadmin parameter to administration/fonctions/getlistelangue.php...
CVE-2008-3313
CVE-2008-3313 affects CreaCMS 1.0 with multiple PHP remote file inclusion vulnerabilities. The underlying issue allows an attacker to execute arbitrary PHP code by supplying a URL to two parameters: (1) cfg[document_uri] to _administration/edition_article/edition_article.php and (2) cfg[base_uri_...
CVE-2008-3313: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in CreaCMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 cfgdocumenturi parameter to administration/editionarticle/editionarticle.php and the 2 cfgbaseuriadmin parameter to administration/fonctions/getlistelangue.php...
CreaCMS - edition_articleedition_article.php?cfg[document_uri] Remote File Inclusion
CreaCMS - editionarticleeditionarticle.php?cfgdocumenturi Remote File Inclusion source: https://www.securityfocus.com/bid/30284/info CreaCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues can allow an...
CreaCMS - fonctionsget_liste_langue.php?cfg[base_uri_admin] Remote File Inclusion
CreaCMS - fonctionsgetlistelangue.php?cfgbaseuriadmin Remote File Inclusion source: https://www.securityfocus.com/bid/30284/info CreaCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues can allow an...
CreaCMS - '/edition_article/edition_article.php?cfg[document_uri]' Remote File Inclusion
source: https://www.securityfocus.com/bid/30284/info CreaCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues can allow an attacker to compromise the application and the underlying system; other attacks...
CreaCMS - '/fonctions/get_liste_langue.php?cfg[base_uri_admin]' Remote File Inclusion
source: https://www.securityfocus.com/bid/30284/info CreaCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues can allow an attacker to compromise the application and the underlying system; other attacks...