Active PHP Bookmarks 1.1.2 APB_SETTINGS['apb_path'] Multiple Remote File Include Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/21263/info Active PHP Bookmarks application is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromis...

ISPConfig 2.2.2/2.2.3 Session.INC.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17909/info ISPConfig is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary...

sugar crm 5.5.0.rc2 and 5.2.0j Multiple Vulnerabilities

No description provided by source. Author: Janek Vind 'waraxe' Vulnerable: SugarCRM SugarCRM 5.5.0.RC2 SugarCRM SugarCRM 5.2.0j Product: http://www.sugarcrm.com/crm/ Description: SugarCRM is prone to multiple remote vulnerabilities, including: 1. Multiple SQL-injection vulnerabilities 2. Multiple...

Freeway 1.4.1 Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/30676/info Freeway is prone to multiple remote file-include and cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. Freeway 1.4.1.171 is affected; other versions may also be...

PHPMyChat 0.14/0.15 Languages.Lib.PHP Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20962/info phpMyChat is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts...

Image_Upload Script 2.0 - Multiple Remote File Include Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/23132/info ImageUpload Script is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...

PHPMyChat Plus 1.9 - Multiple Local File Include Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/20972/info phpMyChat is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. Exploiting these issues may allow an unauthorized user to view files and execute loca...

WebYep <= 1.1.9 (webyep_sIncludePath) File Include Vulnerabilities

No description provided by source...

CuteNews 0.88 comments.php Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6935/info CuteNews is prone to an issue that may allow remote attackers to include files located on remote servers. Under some circumstances, it is possible for remote attackers to influence the include path for several...

Forum Rank System 6 - 'settings['locale']' Parameter Multiple Local File Include Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/29077/info Forum Rank System is prone to local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to vie...

PHPLibrary <= 1.5.3 (grid3.lib.php) Remote File Include Vulnerability

No description provided by source...

Wheatblog <= 1.1 (session.php) Remote File Include Vulnerability

No description provided by source. Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.u.r.a & l2odon & DrtRp & Sh3ll ?php includeonce$wbclassdir/classDatabase.php; function StartSession global $sessiondir; if $sessiondir != '' sessionsavepath$sessiondir; if !...

DodosMail 2.5 'dodosmail.php' Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30112/info DodosMail is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to execute local...

KDPics 1.11/1.16 galeries.inc.php3 categories Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21515/info KDPics is prone to multiple input-validation vulnerabilities, including cross-site scripting and remote file-include issues, because the application fails to sanitize user-supplied input. A successful exploit m...

WEBInsta CMS <= 0.3.1 (users.php) Remote File Include Vulnerability

No description provided by source. / Vulnerable product : http://www.webinsta.com/download.html WEBInsta. CMS 0.3.1 Author : Yns - yns.zaxaz.com / Exploit: http://HOST/PATH/modules/usersonline/users.php?moduledir=REMOTEFILE milw0rm.com 2006-08-15...

eoCMS <= 0.9.03 Remote FIle Include Vulnerability

No description provided by source. Exploit Title: eoCMS = 0.9.03 Remote FIle Include Vulnerability Date: 14-12-2009 Author: 1nd0n3s14n l4m3r Software Link: http://eocms.com/index.php?act=plugin&id=4 Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A eoCMS = 0.9.03 Remote FIle Include...

MXBB Profile Control Panel 0.91c Module Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21520/info The mxBB profile Control Panel module is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary...

dotProject <= 2.0.4 (baseDir) Remote File Include Vulnerability

No description provided by source. / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - dotProject = 2.0.4 baseDir Remote File Include Vulnerabilities + - Script name: dotProject v. 2.0.4 - Script site: http://www.dotproject.net/ + + + - Find by: Kacper a.k.a Rahim + - Contact:...

Redaxo CMS <= 3.2 (INCLUDE_PATH) Remote File Include Vulnerabilities

No description provided by source. Script: Redaxo CMS Vendor: http://www.redaxo.de Discovered: beford xbefordx gmail com Redaxo 3.2 - 3.1 - 3.0 ./redaxo/include/addons/imageresize/pages/index.inc.php?REXINCLUDEPATH=attacker Redaxo 3.0...

Tagit! Tagit2b 2.1.B Build 2 tagmin/addTagmin.php configpath Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application...