CVE-2006-5431: Undefined Security Weakness

PHP remote file inclusion vulnerability in gorum/dbproperty.php in PHPOutsourcing Zorum 3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the appDirName parameter...

zorum_3_5.txt

======================================================================= ======================= zorum35 =dbproperty.php Remote File Inclusion Exploit ======================================================================= ======================== Bug in :dbproperty.php Vlu Code :...

zorum_3_5 <=(dbproperty.php) Remote File Inclusion Exploit

======================================================================= ======================= zorum35 =dbproperty.php Remote File Inclusion Exploit ======================================================================= ======================== Bug in :dbproperty.php Vlu Code :...

Zorum 3.5 - 'DBProperty.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20606/info Zorum is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit of this issue allows an attacker to execute arbitrary server-side script code on an affected computer with the...