CVE-2010-3206

Multiple PHP remote file inclusion vulnerabilities in DiY-CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 lang parameter to modules/guestbook/blocks/control.block.php, 2 mainmodule parameter to index.php, and 3 getFile parameter to includes/general.functions.php...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in DiY-CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 lang parameter to modules/guestbook/blocks/control.block.php, 2 mainmodule parameter to index.php, and 3 getFile parameter to includes/general.functions.php...

CVE-2010-3206

Multiple PHP remote file inclusion vulnerabilities in DiY-CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 lang parameter to modules/guestbook/blocks/control.block.php, 2 mainmodule parameter to index.php, and 3 getFile parameter to includes/general.functions.php...

CVE-2010-3206

DiY-CMS 1.0 is vulnerable to multiple remote file inclusion (RFI) flaws. The issues arise from unvalidated user input in three vectors: (1) lang parameter to modules/guestbook/blocks/control.block.php, (2) main_module parameter to index.php, and (3) getFile parameter to includes/general.functions...

CVE-2010-3206: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in DiY-CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 lang parameter to modules/guestbook/blocks/control.block.php, 2 mainmodule parameter to index.php, and 3 getFile parameter to includes/general.functions.php...

DiY-CMS 1.0 Remote File Inclusion

Exploit Title: DiY-CMS 1.0 Remote File Inclusion Date: 28-8-2010 Author: LoSt.HaCkEr aDaMTRoJaN Software Link: http://webscripts.softpedia.com/scriptDownload/DiY-CMS-Download-63258.html Version: v 1.0 Tested on: Windows XP CVE : Hacker town of Musayyib Contact: LoSt.HaCkEratyahoodotcom 0r...

DIY-CMS 1.0 - Multiple Remote File Inclusions

DIY-CMS 1.0 - Multiple Remote File Inclusions Exploit Title: DiY-CMS 1.0 Remote File Inclusion Date: 28-8-2010 Author: LoSt.HaCkEr aDaMTRoJaN Software Link: http://webscripts.softpedia.com/scriptDownload/DiY-CMS-Download-63258.html Version: v 1.0 Tested on: Windows XP CVE : Hacker town of...

DIY-CMS 1.0 - Multiple Remote File Inclusions

Exploit Title: DiY-CMS 1.0 Remote File Inclusion Date: 28-8-2010 Author: LoSt.HaCkEr aDaMTRoJaN Software Link: http://webscripts.softpedia.com/scriptDownload/DiY-CMS-Download-63258.html Version: v 1.0 Tested on: Windows XP CVE : Hacker town of Musayyib Contact: LoSt.HaCkEratyahoodotcom 0r...