CVE-2012-5956: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ManageEngine AssetExplorer 5.6 before service pack 5614 allow remote attackers to inject arbitrary web script or HTML via fields in XML asset data to discoveryServlet/WsDiscoveryServlet, as demonstrated by the DocRoot/ComputerInformation/output...

CVE-2008-6138: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in adminhead.php in WebBiscuits Modules Controller 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter...

FishCart <= 3.2 RC2 (fc_example.php) Remote File Inclusion Vulnerability

No description provided by source. fishcartv3 fcexample.php Remote File Include Vulnerability +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : fishcartv3 Discovered By : k1n9k0ng Scripts site : http://fishcart.org/fcinstallersnap20070803.zip...

CVE-2007-4287: Undefined Security Weakness

PHP remote file inclusion vulnerability in fcfunctions/fcexample.php in FishCart 3.2 RC2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the docroot parameter...

FishCart 3.2 RC2 - fc_example.php Remote File Inclusion

FishCart 3.2 RC2 - fcexample.php Remote File Inclusion fishcartv3 fcexample.php Remote File Include Vulnerability +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : fishcartv3 Discovered By : k1n9k0ng Scripts site :...

CVE-2007-3084: Undefined Security Weakness

PHP remote file inclusion vulnerability in sampleblogger.php in Comdev Web Blogger 4.1 allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter, a different vector than CVE-2006-5441...

CVE-2007-3081: Undefined Security Weakness

PHP remote file inclusion vulnerability in sampleecommerce.php in Comdev eCommerce 4.1 allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter...

PT-2007-3754 · Comdev · Comdev One Admin Modules Builder

Name of the Vulnerable Software and Affected Versions: Comdev One Admin Modules Builder modbuild version 4.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter to 1 "config-bak.php" or 2 "config.php" endpoints. However, it's noted...

CVE-2007-2422: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Modules Builder modbuild 4.1 for Comdev One Admin allow remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter to 1 config-bak.php or 2 config.php. NOTE: CVE disputes this vulnerability because the unmodified...

Comdev One Admin Pro path[docroot]及path[skin]参数文件包含漏洞

Comdev One Admin Pro是用于为数据库驱动的网站创建PHP模块的平台。 Comdev One Admin Pro的多个脚本在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 Comdev One Admin Pro的adminfoot.php、adminhead.php和adminlogin.php脚本没有正确地验证pathdocroot及pathskin参数的输入，允许攻击者通过包含本地或外部资源的文件导致执行任意PHP代码。漏洞相关的代码如下： ? include$path"docroot".$path"skin"...

CVE-2006-5439: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in adminfoot.php in Comdev Misc Tools 4.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter. NOTE: the provenance of this information is unknown; the details are obtained from thir...

CVE-2006-5440: Undefined Security Weakness

PHP remote file inclusion vulnerability in adminfoot.php in Comdev Form Designer 4.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter. NOTE: the provenance of this information is unknown; the details are obtained from...

CVE-2006-5101: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in include.php in Comdev CSV Importer 3.1 and possibly 4.1, as used in 1 Comdev Contact Form 3.1, 2 Comdev Customer Helpdesk 3.1, 3 Comdev Events Calendar 3.1, 4 Comdev FAQ Support 3.1, 5 Comdev Guestbook 3.1, 6 Comdev Links Directory 3.1, 7 Comdev News...

PayProCart <= 1146078425 Multiple Remote File Include Vulnerabilities

+-------------------------------------------------------------------- + + ppalCart V2.5 EE Remote File Inclusion + +------------------------------------------------------------------- + + Affected Software .: Software + Version .............: ppalCart 2.5 EE + Venedor ...........:...

CVE-2006-4672: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in profitCode ppalCart 2.5 EE, possibly a component of PayProCart, allows remote attackers to execute arbitrary PHP code via a URL in the 1 proMod parameter to a index.php, or the 2 docroot parameter to b index.php or c mainpage.php...

PayProCart <= 1146078425 Multiple Remote File Include Vulnerabilities

No description provided by source. google dork :"powered by: profitCode" exploite: http://url/index.php?proMod=http://shell.txt? discoverde by momo26 ;!!!!!!!!!!!!!!! +-------------------------------------------------------------------- + + ppalCart V2.5 EE Remote File Inclusion +...

CVE-2005-2544: Undefined Security Weakness

PHP remote file inclusion vulnerability in config.php in Comdev eCommerce 3.0 allows remote attackers to execute arbitrary PHP code via the pathdocroot parameter...