Remote file inclusion

PHP remote file inclusion vulnerability in views/print/printbar.php in LaVague 0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the viewspath parameter...

Immunity Canvas: LAVAGUE_INCLUDE

Name| lavagueinclude ---|--- CVE| CVE-2007-2607 Exploit Pack| CANVAS Description| LaVague 0.3 = Remote File Inclusion Vulnerability Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: adullact.net CVE Url: https://vulners.com/cve/CVE-2007-2607 CVE Name: CVE-2007-2607...

lavague-rfi.txt

LaVague 0.3 = Remote File Inclusion Vulnerability Dork:: Vuln Code ERROR1:views/print/printbar.php require $viewspath."/progressbar.php"; BUG1: Example1:http://site.com/path/views/print/printbar.php?viewspath=Sh3LL Script Script Download http://admisource.gouv.fr/frs/?groupid=30&releaseid=145...

LaVague 0.3 - printbar.php?views_path Remote File Inclusion

LaVague 0.3 - printbar.php?viewspath Remote File Inclusion §§§§§§§§§§ §§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§...