CVE-2007-2346: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PHP-Generics 1.0 beta allow remote attackers to execute arbitrary PHP code via a URL in the APPRELATIVEPATH parameter to 1 include.php, 2 dbcommon/include.php, and 3 exception/include.php...

MyNewsGroups >> RFI in include.php

Author: Carlos Sanchez,[email protected] BY : www.hackerz.ir users, ali & saeid exploit : include.php?myngroot=http://shell...

PHP-Generics _App_Relative_Path远程文件包含漏洞

PHP-Generics是一款基于PHP的WEB应用程序。 PHP-Generics不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'APPRELATIVEPATH'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Mutant Mutant 0.9.2 Mutant Mutant 0.9.1 目前没有解决方案提供： http://sourceforge.net/projects/php-generics...

phpgenerics-rfi.txt

-------------------------------------------------------- php-generics 1.0 Remote File Inclusion Vulnerabilities -------------------------------------------------------- Software: php-generics 1.0Beta Vendor: http://ie.archive.ubuntu.com/sourceforge/p/ph/php-generics/php-generics-1.0.0-beta.zip...

PHP-Generics 1.0.0 beta Multiple Remote File Inclusion Vulnerabilities

No description provided by source. -------------------------------------------------------- php-generics 1.0 Remote File Inclusion Vulnerabilities -------------------------------------------------------- Software: php-generics 1.0Beta Vendor:...

PHP-Generics 1.0.0 beta Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== PHP-Generics 1.0.0 beta Multiple Remote File Inclusion Vulnerabilities ======================================================================...

CVE-2006-7115

SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid parameter to include.php when the path parameter is set to faq/faq.php, and other unspecified vectors involving guestbook/print.php...

CVE-2006-7115: Undefined Security Weakness

SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid parameter to include.php when the path parameter is set to faq/faq.php, and other unspecified vectors involving guestbook/print.php...

CVE-2006-7047

include.php in Shoutpro 1.0 might allow remote attackers to bypass IP ban restrictions via a URL in the path parameter that points to an alternate bannedips.php file. NOTE: this issue was originally reported as remote file inclusion, but CVE analysis suggests that this cannot be used for code...

CVE-2006-7047: Undefined Security Weakness

include.php in Shoutpro 1.0 might allow remote attackers to bypass IP ban restrictions via a URL in the path parameter that points to an alternate bannedips.php file. NOTE: this issue was originally reported as remote file inclusion, but CVE analysis suggests that this cannot be used for code...

CVE-2007-1024: Undefined Security Weakness

PHP remote file inclusion vulnerability in include.php in Meganoide's news 1.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the SERVERDOCUMENTROOT parameter...

Meganoide's news v1.1.1 < = RFi Vulnerabilities

Meganoide's news v1.1.1 = RFi Vulnerabilities Download : http://www.spacemarc.it/scriptphp/index.php?script=meganoidesnews111 Script Name : Meganoide's news v1.1.1 Coded By : KaRTaL Contact : k4rtalatgmaildotcom V.Code in : path/include.php include"$SERVERDOCUMENTROOT/news/config.inc.php"; Exploi...

CVE-2006-6850: Undefined Security Weakness

PHP remote file inclusion vulnerability in include.php in the Roster Module characterroster in Shadowed Portal 5.7 allows remote attackers to execute arbitrary PHP code via a URL in the modroot parameter...

CVE-2006-5624: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Multi-Page Comment System MPCS 1.0.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to 1 include.php or 2 functions.php. NOTE: the provenance of this information is unknown; the details are...

CVE-2006-5101: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in include.php in Comdev CSV Importer 3.1 and possibly 4.1, as used in 1 Comdev Contact Form 3.1, 2 Comdev Customer Helpdesk 3.1, 3 Comdev Events Calendar 3.1, 4 Comdev FAQ Support 3.1, 5 Comdev Guestbook 3.1, 6 Comdev Links Directory 3.1, 7 Comdev News...

Comdev Newsletter 3.1 :) <= Remote File Inclusion

+-------------------------------------------------------------------- + + Comdev Newsletter 3.1 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Comdev Newsletter 3.1 + Venedor ...........: http://www.comdevweb.com + Class...

CVE-2006-4921: Undefined Security Weakness

PHP remote file inclusion vulnerability in Site@School S@S 2.4.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to starnet/modules/include/include.php. NOTE: some of these details are obtained from third party information...

CVE-2006-4669: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/system/include.php in Somery 0.4.6 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter...

CVE-2006-0817: Undefined Security Weakness

Absolute path directory traversal vulnerability in a MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and b VisNetic MailServer before 8.5.0.5 allows remote attackers to include arbitrary files via a full Windows path and drive letter in the 1 language parameter in...

CVE-2006-3144

The CVE-2006-3144 entry concerns a PHP remote file inclusion in Implied By Design (IBD) Micro CMS 3.5 (aka 0.3.5) and earlier. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a URL in the microcms_path parameter; later reports note it can also be used to include an...