CVE-2007-0683: Improper Input Validation

PHP remote file inclusion vulnerability in includes/functions.php in Omegaboard 1.0beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

phpBB++ Build 100 - 'phpbb_root_path' Remote File Inclusion

C xoron Name: phpBB++ phpbbrootpath Remote File Include Exploit Author: xoron Exploit coded by xoron Download: http://sourceforge.net/project/showfiles.php?groupid=86688&packageid=90098 xoron.biz - xoron.info Thanx: str0ke, kacper, k1tk4t, SHiKA, can bjorn Tesekkurler: chaos, pang0, DJR POC:...

Omegaboard <= 1.0beta4 (functions.php) Remote File Include Vuln

No description provided by source. ----------------------------------------------- Omegaboard v1.0b4 phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz - xoron.info ----------------------------------------------- Code: includeonce...

CVE-2007-0656: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functions.php in phpBB2-MODificat 0.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

phpbb2-rfi.txt

----------------------------------------------- phpBB2 MODificat phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz ----------------------------------------------- Code: includeonce $phpbbrootpath...

CVE-2007-0616: Undefined Security Weakness

Directory traversal vulnerability in zen/template-functions.php in zenphoto 1.0.4 up to 1.0.6 allows remote attackers to list arbitrary directories via ".." sequences in the album parameter to index.php...

Omegaboard 1.0beta4 - 'functions.php' Remote File Inclusion

----------------------------------------------- Omegaboard v1.0b4 phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz - xoron.info ----------------------------------------------- Code: includeonce $phpbbrootpath...

phpBB2 MODificat <= 0.2.0 (functions.php) Remote Include Vulnerability

No description provided by source. ----------------------------------------------- phpBB2 MODificat phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz ----------------------------------------------- Code: includeonce $phpbbrootpath...

phpBB2 MODificat <= 0.2.0 (functions.php) Remote Include Vulnerability

Exploit for unknown platform in category web applications ====================================================================== phpBB2 MODificat = 0.2.0 functions.php Remote Include Vulnerability ======================================================================...

CVE-2007-0581: Undefined Security Weakness

PHP remote file inclusion vulnerability in functions.php in EclipseBB 0.5.0 Lite allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

PHPBB2 MODificat 0.2.0 - 'functions.php' Remote File Inclusion

----------------------------------------------- phpBB2 MODificat phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz ----------------------------------------------- Code: includeonce $phpbbrootpath...

EclipseBB 0.5.0 Lite (phpbb_root_path) Remote File Include Exploit

Exploit for unknown platform in category web applications ================================================================== EclipseBB 0.5.0 Lite phpbbrootpath Remote File Include Exploit ================================================================== C xoron Bug name: EclipseBB 0.5.0 Lite...

LunarPoll 1.0 (show.php PollDir) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================== LunarPoll 1.0 show.php PollDir Remote File Include Vulnerability ================================================================== AYYILDIZ.ORG PreSents... Script:LunarPol...

CVE-2006-6808

Cross-site scripting XSS vulnerability in wp-admin/templates.php in WordPress 2.0.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter. NOTE: some sources have reported this as a vulnerability in the getfiledescription function in wp-admin/admin-functions.php...

CVE-2006-6808: Undefined Security Weakness

Cross-site scripting XSS vulnerability in wp-admin/templates.php in WordPress 2.0.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter. NOTE: some sources have reported this as a vulnerability in the getfiledescription function in wp-admin/admin-functions.php...

PHPMyProfiler Functions.PHP远程文件包含漏洞

PHPMyProfiler是一款基于PHP的WEB应用程序。 PHPMyProfiler不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Functions.PHP'脚本对用户提交的'pmprelpath'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 phpMyProfiler 0.9.6 目前没有详细解决方案提供，请关注以下链接： http://www.phpmyprofiler.de/...

CVE-2006-6635: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functions.php in JumbaCMS 0.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the jcmsrootpath parameter...

CVE-2006-6259: Undefined Security Weakness

Multiple directory traversal vulnerabilities in a class/functions.php and b class/mbro.php in AlternC 0.9.5 and earlier allow remote attackers to 1 create arbitrary files and directories via a .. dot dot in the "create name" field and 2 read arbitrary files via a .. dot dot in the "web root" fiel...

CVE-2006-6068

The CVE-2006-6068 entry concerns a directory traversal in the mAlbum 0.3 and earlier release. The vulnerability occurs in the cached_album function in functions.php, where user input passed via the gal parameter to index.php can be traversed using dot-dot sequences to list filenames of arbitrary ...

CVE-2006-6068: Undefined Security Weakness

Directory traversal vulnerability in the cachedalbum function in functions.php for mAlbum 0.3 and earlier allows remote attackers to list filenames of arbitrary images via a .. dot dot in the gal parameter to index.php...