EUVD-2006-1929

Malware in sbrugna...

EUVD-2006-5788

Malware in sbrugna...

EUVD-2006-4751

Malware in sbrugna...

EUVD-2006-4445

Malware in sbrugna...

EUVD-2007-5756

Malware in sbrugna...

EUVD-2006-2396

Malware in sbrugna...

Jinzora <= 2.1 (media.php) Remote File Include Vulnerability

No description provided by source. Jinzora = 2.1 Remote File Inclusion Download Source : http://www.jinzora.com/downloads/j2.1.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; media.php bugs ; // include classes for extending. requireonce$includepath...

Fedora 16 : php-pear-CAS-1.3.0-2.fc16 (2012-4119)

Upstream changelog Changes in version 1.3.0 Bug Fixes : - the saml logout url should be parsed urlencoded 24 dlineate - fix a proxy mode bug introduced in a previous comitt 16 Adam Franco - Fix includepath order so that the phpCAS path takes precedence 13 Adam Franco - fix invalid characters in t...

CVE-2010-3210: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Multi-lingual E-Commerce System 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the includepath parameter to 1 checkout2-CYM.php, 2 checkout2-EN.php, 3 checkout2-FR.php, 4 cat-FR.php, 5 cat-EN.php, 6 cat-CYM.php, 7...

Dark Hart Portal - 'login.php' Remote File Inclusion

------------------------------------------------------------------------------------- Dark Portal login.php Remote File Inclusion Vulnerability ------------------------------------------------------------------------------------- Author: CoBRa21 Mail: [email protected] Script Download:...

PHPAuctionSystem - Multiple Remote File Inclusions

»=======================================================================================================-X » » » PHPAuctionSystem Multiple Remote File Inclusion Vulnerability » » » » ======= ------d-------m------ ==== ==== » » || = | |o o| | || || || » » || = |||| || || » » =======...

PHPauction 'include_path'远程文件包含漏洞

BUGTRAQ ID: 28284 CNCAN ID:CNCAN-2008032103 PHPauction是一款基于PHP的WEB应用程序。 PHPauction不正确检查用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意PHP命令。 问题存在于多个脚本对用户提交的'includepath'参数缺少过滤，指定远程服务器上的任意文件作为包含对象，可导致以WEB权限执行任意PHP命令。 PHPAuction PHPAuction 2.51 目前没有解决方案提供： http://www.johnrayfield.com/phpauction/...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in PHPauction GPL 2.51 allow remote attackers to execute arbitrary PHP code via a URL in the includepath parameter to 1 converter.inc.php, 2 messages.inc.php, and 3 settings.inc.php in includes/...

CVE-2007-5786: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in GoSamba 1.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the includepath parameter to 1 HTMLoben.php, 2 incfreigabe.php, 3 incfreigabe1.php, or 4 incfreigabe3.php in include/; 5 incgroup.php; 6 incmanager.php; 7...

CVE-2007-2345

CVE-2007-2345 affects CodeWand phpBrowse. The vulnerability is a PHP remote file inclusion in include/include_stream.inc.php that allows remote attackers to execute arbitrary PHP code via a URL supplied in the include_path parameter. According to the NVD entry, the flaw yields a CVSS v2 base scor...

CVE-2007-2345: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/includestream.inc.php in CodeWand phpBrowse allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...

CVE-2007-2185: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Supasite 1.23b allow remote attackers to execute arbitrary PHP code via a URL in the supadbpath parameter to 1 commonfunctions.php, 2 adminauthcookies.php, 3 adminmods.php, 4 adminnews.php, 5 admintopics.php, 6 adminusers.php, 7...

CVE-2007-1924: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in phpContact allow remote attackers to execute arbitrary PHP code via a URL in the includepath parameter to 1 contactbusiness.php or 2 contactperson.php. NOTE: this issue is disputed by CVE and a reliable third party, because includepath is...

CVE-2007-1809: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in GraFX Company WebSite Builder CWB PRO 1.5 allow remote attackers to execute arbitrary PHP code via a URL in the INCLUDEPATH parameter to 1 clsheadlineprod.php, 2 clslistorders.php, or 3 clsviewpastorders.php in include/, different vectors than...

CVE-2007-1513: Undefined Security Weakness

PHP remote file inclusion vulnerability in comanda.php in GraFX Company WebSite Builder CWB PRO 1.9.8, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the INCLUDEPATH parameter...