PHPMyBibli 1.32 Init.Inc.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23599/info PHPMyBibli is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the...

CVE-2008-4702

Multiple directory traversal vulnerabilities in PhpWebGallery 1.3.4 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 userlanguage and 2 usertemplate parameters to a init.inc.php, and b the userlanguage parameter to isadmin.inc.php...

Directory traversal

Multiple directory traversal vulnerabilities in PhpWebGallery 1.3.4 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 userlanguage and 2 usertemplate parameters to a init.inc.php, and b the userlanguage parameter to isadmin.inc.php...

cpg-lfiexec.txt

authenticate; ... 301. // Process language selection if present in URI or in user profile or try 302. // autodetection if default charset is utf-8 303. if !empty$GET'lang' 304. 305. $USER'lang' = ereg"^a-z0-9-$", $GET'lang' ? $GET'lang' : $CONFIG'lang'; 306. 307. 308. if isset$USER'lang' &&...

Coppermine Photo Gallery 1.4.18 - Local File Inclusion Remote Code Execution

Coppermine Photo Gallery 1.4.18 - Local File Inclusion Remote Code Execution authenticate; ... 301. // Process language selection if present in URI or in user profile or try 302. // autodetection if default charset is utf-8 303. if !empty$GET'lang' 304. 305. $USER'lang' = ereg"^a-z0-9-$",...

CVE-2007-2258: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/init.inc.php in PHPMyBibli allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter...

pmb-rfi.txt

PHPMyBibli [email protected] Homepage: http://www.MoHaNdKo.cOm Exploit:Path/includes/init.inc.php?basepath=Shell Greetz To: Tryag-Team & AsbMay's Group & Xp10 TeAm & CiTy GhOsTs TeAm Greetz To: mY Love Dr.hacker BiG seso...

CVE-2007-0135: Undefined Security Weakness

PHP remote file inclusion vulnerability in inc/init.inc.php in Aratix 0.2.2 beta 11 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the currentpath parameter...

CVE-2006-4076: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Wim Fleischhauer docpile: wim's edition docpile:we 0.2.2 allow remote attackers to execute arbitrary PHP code via a URL in the INITPATH parameter to 1 lib/access.inc.php, 2 lib/folders.inc.php, 3 lib/init.inc.php or 4 lib/templates.inc.php...

CVE-2006-0872: Undefined Security Weakness

Directory traversal vulnerability in init.inc.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary files via a .. dot dot sequence and trailing NULL %00 byte in the lang parameter...

cpg_143_incl_xpl

this works regardless of any php.ini settings, you need a normal user account with upload rights in personal albums and at least one album usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "The direct and the indirect lead on to each other in turn. It is like moving in a...

CVE-2004-1988: Undefined Security Weakness

PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary PHP code by modifying the CPGMDIR to reference a URL on a remote web server that contains functions.inc.php...

CVE-2005-1225: Undefined Security Weakness

SQL injection vulnerability in Coppermine Photo Gallery 1.3.2 allows remote attackers to execute arbitrary SQL commands via the favs parameter to 1 init.inc.php or 2 zipdownload.php...

CVE-2005-1172

CVE-2005-1172 describes a cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery 1.3.x, specifically in the file init.inc.php. The issue allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For parameter. Multiple connected sources corroborate this as a...

CVE-2005-1172: Undefined Security Weakness

Cross-site scripting XSS vulnerability in init.inc.php in Coppermine Photo Gallery 1.3.x allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For parameter...

CVE-2005-0698: Undefined Security Weakness

PHP remote file inclusion vulnerability in PHPWebLog 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the 1 GPATH parameter to init.inc.php or the 2 PATH parameter to index.php to reference a URL on a remote web server that contains the code...