EUVD-2008-6260

Malware in sbrugna...

Directory traversal

Directory traversal vulnerability in includefile.php in nicLOR Sito, when registerglobals is enabled or magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary files via a .. dot dot in the pagefile parameter...

CVE-2008-6290

CVE-2008-6290 describes a directory traversal in includefile.php of nicLOR Sito. When register_globals is enabled or magic_quotes_gpc is disabled, remote attackers can cause local file inclusion via a ".." in the page_file parameter. The vulnerability can affect confidentiality, integrity, and av...

nicLOR Sito includefile Local File Inclusion Vulnerabilities

No description provided by source. ------------------------------------------------------------ Sito includefile in PHP Local File Inclusion Vulnerabilities ------------------------------------------------------------ Discovered By StAkeRathotmaildotit Download On...