EUVD-2005-1363

Malware in sbrugna...

GrayCMS 1.1 Error.PHP Remote File Include Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class GrayCMSRemoteFileIncludePOCBase: vulID = '79199' version = '1' vulDate = '2005-04-26' author = ' '...

CVE-2005-1360

PHP remote file inclusion vulnerability in error.php in GrayCMS 1.1 allows remote attackers to execute arbitrary PHP code by modifying the pathprefix parameter to reference a URL on a remote web server that contains the code...

CVE-2005-1360

PHP remote file inclusion vulnerability in error.php in GrayCMS 1.1 allows remote attackers to execute arbitrary PHP code by modifying the pathprefix parameter to reference a URL on a remote web server that contains the code...

CVE-2005-1360

The CVE-2005-1360 issue affects GrayCMS 1.1 and concerns a PHP remote file inclusion in error.php. The underlying problem is that the path_prefix parameter can be manipulated to reference a URL on a remote server that contains executable PHP code, enabling remote code execution. The connected doc...

GrayCMS php code injection

Version: 1.1 Severity: High Vendor: http://gcms.graymur.net/ Vulnerable code is in "code/error.php": ----begin---- ... if !isset$page $page = ''; if !isset$pathprefix $pathprefix = '../'; if empty$main require $pathprefix.'code/main.dat'; if isset$e404 or isset$GET'e404' ... if isset$e403 or...

GrayCMS 1.1 - error.php Remote File Inclusion

GrayCMS 1.1 - error.php Remote File Inclusion source: https://www.securityfocus.com/bid/13381/info GrayCMS is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

GrayCMS 1.1 - 'error.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/13381/info GrayCMS is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary server-side script code on an affected...