Newxooper Mapage.PHP远程文件包含漏洞

Newxooper是一款基于PHP的WEB应用程序。 Newxooper不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Mapage.PHP'脚本对用户提交的'chemin'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 newxooper newxooper 0.9.1 目前没有解决方案提供： http://www.easy-script.com http://www.example.com/compteur/mapage.php?chemin=Evil Code...

CVE-2006-6711

CVE-2006-6711 affects Newxooper 0.9.1, where PHP remote file inclusion is possible via the chemin parameter in compteur/mapage.php, enabling remote code execution. Affected component: mapage.php within compteur; underlying vulnerability: improper handling of user-supplied URL leading to RFI. Publ...

Newxooper-php 0.9.1 (mapage.php) Remote File Include Vulnerability

No description provided by source. Newxooper-php v0.9.1chemin Remote File Include Vulnerabilty Download:http://www.easy-script.com/newxoope-091.zip Author:Dr Max Virus Location:Egypt Bug in compteur/mapage.php In Line:37 Vul Code: REQUIRE "$chemin/compteur/mapage.txt"; POC:...

Newxooper-php 0.9.1 (mapage.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================== Newxooper-php 0.9.1 mapage.php Remote File Include Vulnerability ================================================================== Newxooper-php v0.9.1chemin Remote File...

Newxooper-php v0.9.1(chemin) Remote File Include Vulnerabilty

Newxooper-php v0.9.1chemin Remote File Include Vulnerabilty Download:http://www.easy-script.com/newxoope-091.zip Author:Dr Max Virus Location:Egypt Bug in compteur/mapage.php In Line:37 Vul Code: REQUIRE "$chemin/compteur/mapage.txt"; POC: http://target/path/compteur/mapage.php?chemin=Evil Code...

Newxooper-PHP 0.9.1 - mapage.php Remote File Inclusion

Newxooper-PHP 0.9.1 - mapage.php Remote File Inclusion Newxooper-php v0.9.1chemin Remote File Include Vulnerabilty Download:http://www.easy-script.com/newxoope-091.zip Author:Dr Max Virus Location:Egypt Bug in compteur/mapage.php In Line:37 Vul Code: REQUIRE "$chemin/compteur/mapage.txt"; POC:...

Newxooper-PHP 0.9.1 - 'mapage.php' Remote File Inclusion

Newxooper-php v0.9.1chemin Remote File Include Vulnerabilty Download:http://www.easy-script.com/newxoope-091.zip Author:Dr Max Virus Location:Egypt Bug in compteur/mapage.php In Line:37 Vul Code: REQUIRE "$chemin/compteur/mapage.txt"; POC: http://target/path/compteur/mapage.php?chemin=Evil Code...