47 matches found
ariadne-rfi.txt
Title : Ariadne = 2.4.1 Multiple Remote File Include Vulnerabilities Author : ajann Script Page : http://www.ariadne-cms.org/en/download/ Vuln; Files loader.php loader.cmd.php /Files Code,1 loader.php Error: .. .... require$ariadne."/configs/ariadne.phtml";...
CVE-2006-5067
PHPSaTK (PHP System Administration Toolkit) is affected by a remote file inclusion issue in loader.php via a URL in GLOBALS[config], allowing arbitrary PHP code execution. Affected component is loader.php in PHPSaTK; root cause is RFI through GLOBALS[config], as described in multiple sources. Som...
CVE-2006-5067: Undefined Security Weakness
PHP remote file inclusion vulnerability in loader.php in PHP System Administration Toolkit PHPSaTK allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSconfig parameter. NOTE: this issue is disputed by CVE; analysis shows that the GLOBALSconfig variable is initialized...
phpstak <= Remote File Include Vulnerability
PerSiaNFoX DigitaL SecuritY TeaM phpsatk= Remote File Include Vulnerabilities Script...
CVE-2005-1181
NOTE: this issue has been disputed by the vendor. PHP remote code injection vulnerability in loader.php for Ariadne CMS 2.4 allows remote attackers to execute arbitrary PHP code by modifying the ariadne parameter to reference a URL on a remote web server that contains the code. NOTE: the vendor h...
CVE-2005-1181
Ariadne CMS 2.4 is cited as affected by a PHP remote code injection in loader.php via the ariadne parameter referencing a remote URL. The vendor disputes the issue, arguing loader.php must include ariadne.inc (defining $ariadne) and cannot be modified by an attacker; CVE personnel have partially ...
CVE-2005-1181: Undefined Security Weakness
NOTE: this issue has been disputed by the vendor. PHP remote code injection vulnerability in loader.php for Ariadne CMS 2.4 allows remote attackers to execute arbitrary PHP code by modifying the ariadne parameter to reference a URL on a remote web server that contains the code. NOTE: the vendor h...