67 matches found
Movie PHP Script 2.0 (init.php anticode) Code Execution Vulnerability
No description provided by source. + Movie PHP Script v2.0 Remote PHP Code Execution + Discovered By SirGod + www.mortal-team.org + Remote PHP Code Execution - Vulnerable code in system/services/init.php : --------------------------------------------------------------------------------- Line 84 :...
eXtplorer include/init.php本地文件包含漏洞
eXtplorer include/init.php本地文件包含漏洞 发布日期:2009-03-02 更新日期:2009-03-03 受影响系统: Soeren Eberhardt eXtplorer 2.0.0 不受影响系统: Soeren Eberhardt eXtplorer 2.0.1 描述:BUGTRAQ ID: 33955 eXtplorer是一款基于web的文件管理组件。...
CVE-2008-6305: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in init.php in Free Directory Script 1.1.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the APIHOMEDIR parameter...
CVE-2008-6251
PHP remote file inclusion vulnerability in includes/init.php in phpFan 3.3.4 allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...
CVE-2008-6251: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in includes/init.php in phpFan 3.3.4 allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...
PlaySms 0.9.3 - Multiple LocalRemote File Inclusions
PlaySms 0.9.3 - Multiple LocalRemote File Inclusions ==:RFI/LFI:== ===================== script:playsms 0.9.3 ========================================================================== download from:http://downloads.sourceforge.net/playsms/playsms-0.9.3.tar.gz?modtime=1211284086&bigmirror=0...
phpfan 3.3.4 (init.php includepath) Remote File Inclusion Vulnerability
No description provided by source. remote file include script: phpfan 3.3.4 download from:http://ishallnotcare.org/mint/pepper/tillkruess/downloads/tracker.php?url=http%3A//scriptsextra.ishallnotcare.org/phpfanbasic334.zip...
PHPfan 3.3.4 - init.php Remote File Inclusion
PHPfan 3.3.4 - init.php Remote File Inclusion remote file include script: phpfan 3.3.4 download from:http://ishallnotcare.org/mint/pepper/tillkruess/downloads/tracker.php?url=http%3A//scriptsextra.ishallnotcare.org/phpfanbasic334.zip...
phpfan 3.3.4 (init.php includepath) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ======================================================================= phpfan 3.3.4 init.php includepath Remote File Inclusion Vulnerability ======================================================================= remote file include scrip...
CVE-2008-4624: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in init.php in Fast Click SQL Lite 1.1.7, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the CFGCDIR parameter...
Fast Click SQL 1.1.7 Lite - init.php Remote File Inclusion
Fast Click SQL 1.1.7 Lite - init.php Remote File Inclusion =========================================================================================== o Fast CLick SQL Lite 1.1.7 Remote File Inclusion Vulnerability Software : Fast CLick SQL Lite version 1.1.7 Vendor : http://www.ftrsoft.com/...
CVE-2008-2854: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in Orlando CMS 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSpreloc parameter to 1 modules/core/logger/init.php and 2 AJAX/newscat.php...
CVE-2007-5165: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in init.php in Jens Tkotz myIpacNG-stats MINGS 0.05 allows remote attackers to execute arbitrary PHP code via a URL in the MINGSBASE parameter. NOTE: this issue is disputed by CVE because MINGSBASE is defined before use...
shnew31-rfi.txt
Found By : Hasadya Raed Contact : [email protected] --------------------------- Script : SH-News 3.1 Dork : "Powered by SH-News 3.1" Greetz : Guardian Information Systems --------------------------- B.Files : report.php archive.php comments.php init.php news.php Exploits :...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Softnews Media Group DataLife Engine allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to 1 init.php and 2 Ajax/editnews.php. NOTE: some of these details are obtained from third party information...
CVE-2007-1424: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in Softnews Media Group DataLife Engine allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to 1 init.php and 2 Ajax/editnews.php. NOTE: some of these details are obtained from third party information...
Remote File Include In Script SoftNews Media Group
By Hasadya Raed Contact : [email protected] ------------------------------------ Script : SoftNews Media Group Dork : "Copyright © 2004,2006 SoftNews Media Group" Greetz : Only To Security Focus ------------------------------------ B.Files : init.php editnews.php ----------------------------------...
CVE-2006-5282
SH-News 3.1 and earlier is affected by multiple PHP remote file inclusion vulnerabilities. The flaw allows an attacker to trigger arbitrary PHP code execution by supplying a URL in the scriptpath parameter to one of five pages: report.php, archive.php, comments.php, init.php, or news.php. The iss...
CVE-2006-5282: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to 1 report.php, 2 archive.php, 3 comments.php, 4 init.php, or 5 news.php...
vBulletin 3.0.14 ~ init.php~ registerring global arbitary variable~ XSS exploit
ORIGINAL ADVISORY: http://myimei.com/security/2006-07-24/vbulletin-3014-initphp-XSS-exploit.html http://www.kapda.ir/advisory-397.html VENDOR CREDIT: http://www.vbulletin.com/forum/showthread.php?t=194062 ——–Summary——– Software: vBulletin Sowtware’s Web Site: http://www.vBulletin.com Versions:...