MySpeach <= 3.0.7 Remote/Local File Inclusion Vulnerability

No description provided by source. /======================================= | Advisory :: MySpeach = 3.0.7 | +=======================================+--------------------------------------------------------------- | | | Download link : http://www.graphiks.net/scripts-php/script-7-1-0.html | |...

MySpeach 3.0.7 - LocalRemote File Inclusion

MySpeach 3.0.7 - LocalRemote File Inclusion /=======================================\ | Advisory :: MySpeach = 5.0.0, registerglobals = On, allowurlfopen = On | | Vuln 2 : registerglobals = On | | Risk level : High | | |...

MySpeach <= 3.0.7 Remote/Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =========================================================== MySpeach = 5.0.0, registerglobals = On, allowurlfopen = On | | Vuln 2 : registerglobals = On | | Risk level : High | | |...

MySpeach 3.0.7 - Local/Remote File Inclusion

/=======================================\ | Advisory :: MySpeach = 5.0.0, registerglobals = On, allowurlfopen = On | | Vuln 2 : registerglobals = On | | Risk level : High | | | +-------------------------------------------------------------------------------------------------------+ | | | Program...

Remote file inclusion

PHP remote file inclusion vulnerability in up.php in MySpeach 2.1 beta and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the myroot parameter...

CVE-2007-0498

PHP remote file inclusion vulnerability in up.php in MySpeach 2.1 beta and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the myroot parameter...

CVE-2007-0498

MySpeach 2.1 beta (and possibly earlier) is affected by CVE-2007-0498 via up.php, allowing remote PHP code execution through a URL parameter my[root]. This is a PHP remote file inclusion vulnerability with a base score of 7.5 (HIGH) and network attack vector, per NVD, and the documents do not pro...

Remote file inclusion

PHP remote file inclusion vulnerability in up.php in Sky GUNNING MySpeach 3.0.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mymsroot parameter, a different vector than CVE-2006-4630. NOTE: Some of these details are obtained from third party information...

CVE-2007-0491

PHP remote file inclusion vulnerability in up.php in Sky GUNNING MySpeach 3.0.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mymsroot parameter, a different vector than CVE-2006-4630. NOTE: Some of these details are obtained from third party information...

CVE-2007-0491

PHP remote file inclusion vulnerability in up.php in Sky GUNNING MySpeach 3.0.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mymsroot parameter, a different vector than CVE-2006-4630. NOTE: Some of these details are obtained from third party information...

CVE-2007-0491

CVE-2007-0491 is a PHP remote file inclusion vulnerability in Sky GUNNING MySpeach 3.0.6 and earlier, exploitable via a URL in the my_ms[root] parameter of up.php. The issue is a separate vector from CVE-2006-4630 and affects MySpeach components prior to 3.0.6. The connected records confirm relat...

MySpeach 2.1b - up.php Remote File Inclusion

MySpeach 2.1b - up.php Remote File Inclusion ------------------------------------------------------------------------------------------------------------------------ Script:MySpeach Affected Version:beta2.1 and maybe older Downlaoad:http://www.graphiks.net/scripts/chat/myspeach-2.1beta.zip...

MySpeach <= 2.1b (up.php) Remote Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================== MySpeach = 2.1b up.php Remote Inclusion Vulnerability ========================================================...

MySpeach 2.1b - 'up.php' Remote File Inclusion

------------------------------------------------------------------------------------------------------------------------ Script:MySpeach Affected Version:beta2.1 and maybe older Downlaoad:http://www.graphiks.net/scripts/chat/myspeach-2.1beta.zip...

MySpeach &lt;= 2.1b (up.php) Remote Inclusion Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------------------------------------ Script:MySpeach Affected Version:beta2.1 and maybe older Downlaoad:http://www.graphiks.net/scripts/chat/myspeach-2.1beta.zip...

MySpeach JScript.PHP远程文件包含漏洞

MySpeach是一款基于PHP的WEB应用程序。 MySpeach不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'JScript.PHP'脚本对用户提交的'mymsroot'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 MySpeach MySpeach 3.0.2 http://www.myspeach.com/ http://www.example.com/Script Path/jscript.php?mymsroot=http://www.example.com...

CVE-2006-4630

PHP remote file inclusion vulnerability in jscript.php in Sky GUNNING MySpeach 3.0.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mymsroot parameter...

CVE-2006-4630

CVE-2006-4630 describes a PHP remote file inclusion in jscript.php for Sky GUNNING MySpeach 3.0.2 and earlier. When register_globals is enabled, an attacker can cause arbitrary PHP code execution via a URL in the my_ms[root] parameter. Affected versions are 3.0.2 and earlier; impact is remote cod...

EUVD-2006-4618

PHP remote file inclusion vulnerability in jscript.php in Sky GUNNING MySpeach 3.0.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mymsroot parameter...

MySpeach 3.0.2 - my_ms[root] Remote File Inclusion

MySpeach 3.0.2 - mymsroot Remote File Inclusion ============================================================================================== MySpeach = v3.0.2 mymsroot Remote File Inclusion Exploit ===============================================================================================...