15 matches found
WordPress Narnoo Distributor <=2.5.1 - Local File Inclusion Detection
WordPress Narnoo Distributor plugin 2.5.1 and prior is susceptible to local file inclusion. The plugin does not validate and sanitize the libpath parameter before being passed into a call to require via the narnoodistributorlibrequest AJAX action, and the content of the file is displayed in the...
EUVD-2009-1442
Malware in sbrugna...
EUVD-2002-0448
Malware in sbrugna...
VulnCheck KEV: CVE-2022-0679
The Narnoo Distributor WordPress plugin through 2.5.1 fails to validate and sanitize the libpath parameter before it is passed into a call to require via the narnoodistributorlibrequest AJAX action available to both unauthenticated and authenticated users which results in the disclosure of...
CVE-2022-0679
The Narnoo Distributor WordPress plugin through 2.5.1 fails to validate and sanitize the libpath parameter before it is passed into a call to require via the narnoodistributorlibrequest AJAX action available to both unauthenticated and authenticated users which results in the disclosure of...
CVE-2022-0679: Improper Limitation of a Pathname to a Restricted Directory
The Narnoo Distributor WordPress plugin through 2.5.1 fails to validate and sanitize the libpath parameter before it is passed into a call to require via the narnoodistributorlibrequest AJAX action available to both unauthenticated and authenticated users which results in the disclosure of...
CVE-2009-1444
PHP remote file inclusion vulnerability in indexk.php in WebPortal CMS 0.8-beta allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter...
CVE-2009-1444: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in indexk.php in WebPortal CMS 0.8-beta allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter...
CVE-2007-1708
PHP remote file inclusion vulnerability in lib/db/ezsql.php in ttCMS 4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter...
CVE-2007-1708: Undefined Security Weakness
PHP remote file inclusion vulnerability in lib/db/ezsql.php in ttCMS 4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter...
ttCMS <= v4 (ez_sql.php lib_path) Remote File Inclusion Vulnerability
DEVIL TEAM - HACKING POLISH TEAM Author: Kacper a.k.a Rahim Contact: [email protected] Homepage: http://www.rahim.webd.pl/ Irc: irc.milw0rm.com:6667 devilteam -------------------------------------------- Pozdro dla wszystkich z kanalu IRC oraz forum DEVIL TEAM. ttCMS = v4 ezsql.php libpath RFI...
CVE-2006-5123: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in Albrecht Guenther PHProjekt 5.1.x before 5.1.2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 libpath or 2 langpath parameter in unspecified files, related to code changes intended to fix inclusion, a different...
CVE-2006-4204: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in PHProjekt 5.1 and possibly earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 pathpre parameter in lib/specialdays.php and the 2 libpath parameter in lib/dbmanfilter.inc.php...
CVE-2002-0451
PHProjekt 3.1 and 3.1a contain a remote PHP code execution vulnerability in filemanager_forms.php. The issue arises from unsafely handling the lib_path parameter, allowing an attacker to specify a URL to executable code, enabling arbitrary code execution on the affected server. The CVE entry prov...
CVE-2002-0451: Undefined Security Weakness
filemanagerforms.php in PHProjekt 3.1 and 3.1a allows remote attackers to execute arbitrary PHP code by specifying the URL to the code in the libpath parameter...