XOOPS Module icontent 1.0/4.5 - Remote File Inclusion Exploit

No description provided by source. html head meta http-equiv=Content-Type content=text/html; charset=windows-1254 titleXOOPS Module icontent v.1.0 Remote File Inclusion Exploit/title script language=JavaScript...

Xoops iContent模块Spaw_Control.Class.PHP远程文件包含漏洞

Xoops iContent模块是一款基于PHP的WEB应用程序。 Xoops iContent模块不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'SpawControl.Class.PHP'脚本对用户提交的WEB参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Xoops iContent Module 1.0 目前没有解决方案提供： http://mirror.in.th/sourceforge.net/x/xo/xoops...

CVE-2007-3057

PHP remote file inclusion vulnerability in include/wysiwyg/spawcontrol.class.php in the icontent 4.5 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter. NOTE: this issue is probably a duplicate of CVE-2006-4656...

CVE-2007-3057

Technical details about CVE-2007-3057 are not publicly available in the provided documents. Monitor for updates.

CVE-2007-3057

PHP remote file inclusion vulnerability in include/wysiwyg/spawcontrol.class.php in the icontent 4.5 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter. NOTE: this issue is probably a duplicate of CVE-2006-4656...

xoopsicontent-rfi.txt

XOOPS Module icontent v.1.0 Remote File Inclusion Exploit //'=============================================================================================== //'Script Name: XOOPS Module icontent v.1.0 //'Author : Mahmoodali //'S.Page :...

CVE-2007-3057: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/wysiwyg/spawcontrol.class.php in the icontent 4.5 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter. NOTE: this issue is probably a duplicate of CVE-2006-4656...

XOOPS Module icontent 1.0 Remote File Inclusion Exploit

No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titleXOOPS Module icontent v.1.0 Remote File Inclusion Exploit/title script language="JavaScript"...

XOOPS Module icontent 1.0/4.5 Remote File Inclusion Exploit

Exploit for unknown platform in category web applications =========================================================== XOOPS Module icontent 1.0/4.5 Remote File Inclusion Exploit =========================================================== XOOPS Module icontent v.1.0 Remote File Inclusion Exploit...

XOOPS Module icontent 1.0/4.5 Remote File Inclusion Exploit

No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titleXOOPS Module icontent v.1.0 Remote File Inclusion Exploit/title script language="JavaScript"...

XOOPS Module icontent 1.04.5 - Remote File Inclusion

XOOPS Module icontent 1.04.5 - Remote File Inclusion XOOPS Module icontent v.1.0 Remote File Inclusion Exploit //'=============================================================================================== //'Script Name: XOOPS Module icontent v.1.0 //'Author : Mahmoodali //'S.Page :...

XOOPS Module icontent 1.0/4.5 - Remote File Inclusion

XOOPS Module icontent v.1.0 Remote File Inclusion Exploit //'=============================================================================================== //'Script Name: XOOPS Module icontent v.1.0 //'Author : Mahmoodali //'S.Page :...