EUVD-2007-2184

Malware in sbrugna...

Remote file inclusion

PHP remote file inclusion vulnerability in admin/adminalbumotf.php in the MX Smartor Full Album Pack FAP 2.0 RC1 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2007-2189

PHP remote file inclusion vulnerability in admin/adminalbumotf.php in the MX Smartor Full Album Pack FAP 2.0 RC1 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2007-2189

PHP remote file inclusion vulnerability in admin/adminalbumotf.php in the MX Smartor Full Album Pack FAP 2.0 RC1 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2007-2189

CVE-2007-2189 corresponds to a PHP remote file inclusion vulnerability in the MX Smartor Full Album Pack (FAP) 2.0 RC1 module for mxBB. The flaw resides in admin/admin_album_otf.php and allows remote attackers to execute arbitrary PHP code via a URL supplied to the phpbb_root_path parameter. Mult...

Mx Module Smartor Album FAP 2.0 RC 1 - Remote File Inclusion

mxBB Module MX Smartor FAP 2.0 RC1 Remote File Inclusion Vulnerability Class: Remote Vendor: http://www.mx-system.com/modules/mxpafiledb/dload.php?action=download&fileid=364 Founder: bd0rk Contact: bd0rkathackermail.com Vulnerable Code in /admin/adminalbumotf.php...

Mx Module Smartor Album FAP 2.0 RC 1 - Remote File Inclusion

Mx Module Smartor Album FAP 2.0 RC 1 - Remote File Inclusion mxBB Module MX Smartor FAP 2.0 RC1 Remote File Inclusion Vulnerability Class: Remote Vendor: http://www.mx-system.com/modules/mxpafiledb/dload.php?action=download&fileid=364 Founder: bd0rk Contact: bd0rkathackermail.com Vulnerable Code ...

MX Smartor Album Module Remote File Include

MX Smartor Album Module Remote File Include Discovered by Paul Bakoyiannis winsec ------------------------------------------------- Vulnerable Code: if $mode == 'albumcat' include$modulerootpath. 'includes/albumcat.'.$phpEx; the rest of the vulnerable code removed for brevity Vulnerability:...