CVE-2003-1412

PHP remote file inclusion vulnerability in index.php for GONiCUS System Administrator GOsa 1.0 allows remote attackers to execute arbitrary PHP code via the plugin parameter to 1 3fax/1blocklists/index.php; 2 6departamentadmin/index.php, 3 5terminals/index.php, 4 4mailinglists/index.php, 5...

GOsa Multiple Script plugin Parameter Remote File Inclusion

The remote web server is hosting GOnicus System Administrator GOsa, a PHP-based administration tool for managing accounts and systems in LDAP databases. The version of GOsa installed on the remote host fails to sanitize user input to the 'plugin' parameter of several scripts before using it to...

GOnicus System Administrator php injection

I. BACKGROUND The GOnicus System Administrator is a PHP based administration tool for managing accounts/systems in LDAP databases. Project homepage : http://www.gonicus.de II. DESCRIPTION A remote attacker can inject into GOsa arbitrary PHP code that executes under the privileges of the underlyin...

GONiCUS System Administrator 1.0 - Remote File Inclusion

source: https://www.securityfocus.com/bid/6922/info GONiCUS System Administrator is prone to an issue that may allow remote attackers to include files located on remote servers. This issue is present in several PHP pages existing in the /plugins and /includes folders. By crafting specific URI...

GONiCUS System Administrator 1.0 - Remote File Inclusion

GONiCUS System Administrator 1.0 - Remote File Inclusion source: https://www.securityfocus.com/bid/6922/info GONiCUS System Administrator is prone to an issue that may allow remote attackers to include files located on remote servers. This issue is present in several PHP pages existing in the...