CVE-2006-5678: Undefined Security Weakness

PHP remote file inclusion vulnerability in common/visiteurs/include/library.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences phpMyConference 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the lvcmodulesdir paramete...

phpMyConferences-8.0.2-2.txt

phpMyConferences [email protected] brazil rlz Greetz: F-117, Silver lords e pra tu pri : Arquivo: library.inc.php Bug: if !$gloadedmodules$imagename include$lvcmodulesdir.'/'.$modulename.'.module.php'; $gloadedmodules$modulename = true; Exploit:...

phpMyConferences <= 8.0.2 Remote File Inclusion

phpMyConferences = 8.0.2 Remote File Inclusion Found by mfp.c = [email protected] brazil rlz Greetz: F-117, Silver lords e pra tu pri : Arquivo: library.inc.php Bug: if !$gloadedmodules$imagename include$lvcmodulesdir.'/'.$modulename.'.module.php'; $gloadedmodules$modulename = true; Exploit:...