TeamCal Pro <= 2.8.001 (app_root) Remote file Include Vulnerability

No description provided by source. Author:PSYCH@ [email protected] TeamCal Pro 2.8.001 approot Remote file inclusion Vulnerabilities Demo: www.lewe.com/tcpro/ Code: include $tcconfig'approot'."includes/footer.html.inc.php" ; Exploit...

CVE-2006-4788: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/log.inc.php in Telekorn SignKorn Guestbook SL 1.3 and earlier, when registerglobals is enabled and SESSIONpermission parameter is set to "yes", allows remote attackers to execute arbitrary PHP code via a URL in the dirpath parameter...

CVE-2006-4780: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functions.php in phpBB XS 0.58 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-4779: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functionsportal.php in Vitrax Premodded phpBB 1.0.6-R3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-4772: Undefined Security Weakness

HotPlug CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password and database credentials via a direct request for includes/class/config.inc...

AzzCoder => phpBB XS 0.58 Remote File Include

A important vulnerability into functions.php will allow a malicious user to insert a remote file. The Vulnerable Code: includeonce $phpbbrootpath . './includes/functionscategorieshierarchy.' . $phpEx ; The phpbbrootpath isn't initialize and PHPBBIN isn't checked...

phpBB XS 0.58 - functions.php Remote File Inclusion

phpBB XS 0.58 - functions.php Remote File Inclusion Author: AzzCoder Vendor: http://www.phpbbxs.eu/ Vulnerable File: includes/functions.php Vulnerable Code: //The phpbbrootpath isn't initialize includeonce $phpbbrootpath . './includes/functionscategorieshierarchy.' . $phpEx ; Method To Use:...

CVE-2006-4670: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PhotoKorn Gallery 1.52 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the dirpath parameter in 1 includes/cart.inc.php or 2 extras/extcats.php...

CVE-2006-4664: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functionsportal.php in Premod Shadow 2.7.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-4526: Undefined Security Weakness

SQL injection vulnerability in includes/content/viewCat.inc.php in CubeCart 3.0.12 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary SQL commands via the searchArray parameter...

CVE-2006-4448

Multiple PHP remote file inclusion vulnerabilities in interact 2.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 CONFIGBASEPATH parameter in a admin/autoprompter.php and b includes/common.inc.php, and the 2 CONFIGLANGUAGECPATH parameter ...

CVE-2006-4448: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in interact 2.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 CONFIGBASEPATH parameter in a admin/autoprompter.php and b includes/common.inc.php, and the 2 CONFIGLANGUAGECPATH parameter ...

CVE-2006-4425

Multiple PHP remote file inclusion vulnerabilities in phpCOIN 1.2.3 allow remote attackers to execute arbitrary PHP code via the CCFGPKGPATHINCL parameter in coinincludes scripts including 1 api.php, 2 common.php, 3 core.php, 4 custom.php, 5 db.php, 6 redirect.php or 7 sessionset.php. NOTE: the...

CVE-2006-4368: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/functionsportal.php in IntegraMOD Portal 2.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-4329: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Shadows Rising RPG Pre-Alpha 0.0.5b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONFIGgameroot parameter to 1 core/includes/security.inc.php, 2 core/includes/smarty.inc.php, 3 qcms/includes/smarty.inc.php ...

CVE-2006-4198: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/session.php in Wheatblog wB 1.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the wbclassdir parameter...

CVE-2006-4036: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/usercpregister.php in ZoneMetrics ZoneX Publishers Gold Edition 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-3972: Undefined Security Weakness

Directory traversal vulnerability in includes/operatorchattranscript.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to read arbitrary files via a .. dot dot in the chatid parameter...

VisNetic Mail Server 8.3.5 - Multiple File Inclusions

VisNetic Mail Server 8.3.5 - Multiple File Inclusions source: https://www.securityfocus.com/bid/19002/info VisNetic Mail Server is prone to multiple local file-include vulnerabilities and a remote file includes vulnerability. These issues are due to a failure in the application to properly saniti...

CVE-2006-3532: Undefined Security Weakness

PHP file inclusion vulnerability in includes/editnew.php in Pivot 1.30 RC2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a FTP URL or full file path in the Pathsextensionspath parameter...