CVE-2006-6769: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in PHP Live! 3.2.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 searchstring parameter in a setup/transcripts.php, the 2 l parameter in b index.php, the 3 login field in c phplive/index.php, and the 4 deptid...

CVE-2006-6710: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in PgmReloaded 0.8.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 lang parameter to a index.php, the 2 CFGlibdir and 3 CFGlocaledir parameters to b common.inc.php, and the CFGlocalelangdir parameter to c...

3editor CMS 0.42 - 'index.php' Local File Inclusion

script Name: 3editor CMS index.php Local File Include Exploit Download:http://www.matteolucarelli.net/3editor/index.htm Author : Dr Max Virus Contact :[email protected] Bug & Problem In file index.php Let's Take a look; if !isset$GET'page' include'phplib/treeedit.php'; else...

3editor CMS <= 0.42 (index.php) Local File Include Vulnerability

No description provided by source. script Name: 3editor CMS index.php Local File Include Exploit Download:http://www.matteolucarelli.net/3editor/index.htm Author : Dr Max Virus Contact :[email protected] Bug & Problem In file index.php Let's Take a look; if !isset$GET'page'...

CWMExplorer Index.PHP源代码信息泄露漏洞

CWMExplorer是一款基于PHP的WEB应用程序。 CWMExplorer不正确过滤用户提交的输入，远程攻击者可以利用漏洞获得敏感信息。 问题是'index.php'脚本对用户提交的'file'参数缺少过滤，提交脚本文件作为参数，可导致源代码泄露。 cwm-design cwmExplorer 1.0 http://explorer.cwm-design.de/ http://www.example.com/path/index.php?d=0&showfile=file...

3editor CMS <= 0.42 (index.php) Local File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================ 3editor CMS = 0.42 index.php Local File Include Vulnerability ================================================================ script Name: 3editor CMS index.php Local File...

CVE-2006-6695

CVE-2006-6695 : XSS in Carsen Klock TextSend 1.5, affected via index.php, vulnerable parameters (1) error and (2) success. This allows remote attackers to inject arbitrary script/HTML. According to NVD, base CVSS v2 score is 6.8 (Medium) with network attack vector, no authentication, and partial ...

CVE-2006-6695

Multiple cross-site scripting XSS vulnerabilities in index.php in Carsen Klock TextSend 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 error or 2 success parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party...

CVE-2006-6695: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index.php in Carsen Klock TextSend 1.5 allow remote attackers to inject arbitrary web script or HTML via the 1 error or 2 success parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party...

VerliAdmin Index.PHP远程文件包含漏洞

VerliAdmin是一款基于PHP的WEB应用程序。 VerliAdmin不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Index.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 VerliAdmin VerliAdmin 0.3 目前没有详细解决方案提供： http://bohyn.czechweb.cz/ ? / P.S Chcialem serdecznie niepozdrowic wszystkie kurwy takie jak Ne0 i jego...

CVE-2006-6666: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in VerliAdmin 0.3 and earlier allows remote authenticated users to execute arbitrary PHP code via a URL in the q parameter...

CVE-2006-6616

index.php in w00t Gallery 1.4.0 allows remote authenticated users with privileges for one installation to gain access to other installations on the same web server, aka "multi-gallery admin session spanning." NOTE: some of these details are obtained from third party information...

VerliAdmin <= 0.3 (index.php) Remote File Include Exploit

Exploit for unknown platform in category web applications ========================================================= VerliAdmin = 0.3 index.php Remote File Include Exploit ========================================================= ? / P.S Chcialem serdecznie niepozdrowic wszystkie kurwy takie jak N...

CVE-2006-6616: Undefined Security Weakness

index.php in w00t Gallery 1.4.0 allows remote authenticated users with privileges for one installation to gain access to other installations on the same web server, aka "multi-gallery admin session spanning." NOTE: some of these details are obtained from third party information...

Graphiks GrapAgenda Index.PHP远程文件包含漏洞

Graphiks GrapAgenda是一款基于PHP的WEB应用程序。 Graphiks GrapAgenda不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Index.PHP'脚本对用户提交的'cmd'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Graphiks GrapAgenda 0.1 http://www.graphiks.net/ http://www.example.com/agendapath/index.php?page=yourcode.txt?cmd=id...

CVE-2006-6592: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Bloq 0.5.4 allow remote attackers to execute arbitrary PHP code via a URL in the pagepath parameter to 1 index.php, 2 admin.php, 3 rss.php, 4 rdf.php, 5 rss2.php, or 6 files/mainfile.php...

Devsyn Open Bulletin Board Index.PHP远程文件包含漏洞

Devsyn Open Bulletin Board是一款基于PHP的论坛程序。 Devsyn Open Bulletin Board不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Index.PHP'脚本对用户提交的'rootpath'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 OpenBB OpenBB 1.0.8 目前没有解决方案提供,请关注以下链接： http://www.openbb.co.uk/...

CVE-2006-6526: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in Gizzar 03162002 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the basePath parameter...

DieselScript Smart Traffic Index.PHP远程文件包含漏洞

DieselScript Smart Traffic是一款基于PHP的WEB应用程序。 DieselScript Smart Traffic不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'index.php'脚本对用户提交的'src'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 DieselScripts Smart Traffic http://www.dieselscripts.com/ http://www.example.com/Script...

WikiWebWeaver Index.PHP任意文件上传漏洞

WikiWebWeaver是一款基于PHP的WIKI程序。 WikiWebWeaver不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞提交任意文件，造成以WEB权限执行。 问题是'index.php'脚本对用户提交的WEB参数缺少过滤，可导致提交任意PHP文件，攻击者借此可以WEB权限执行。 WikiWebWeaver WikiWebWeaver 1 beta 2 http://wikiwebweaver-devel.teuwen.org:8080/wiki/index.php?l=FR&display=QuoiDeNeufFR...