EUVD-2008-1683

Malware in sbrugna...

Remote file inclusion

PHP remote file inclusion vulnerability in quiz/common/dbconfig.inc.php in the Online FlashQuiz comonlineflashquiz 1.0.2 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the basedir parameter...

CVE-2008-1682

PHP remote file inclusion vulnerability in quiz/common/dbconfig.inc.php in the Online FlashQuiz comonlineflashquiz 1.0.2 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the basedir parameter...

CVE-2008-1682

PHP remote file inclusion vulnerability in quiz/common/dbconfig.inc.php in the Online FlashQuiz comonlineflashquiz 1.0.2 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the basedir parameter...

CVE-2008-1682

CVE-2008-1682 describes a PHP remote file inclusion vulnerability in the Joomla! Online FlashQuiz (com_onlineflashquiz) 1.0.2 component. The flaw is in quiz/common/db_config.inc.php, where an attacker can supply a URL in the base_dir parameter to execute arbitrary PHP code on the affected system....

CVE-2008-1682: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in quiz/common/dbconfig.inc.php in the Online FlashQuiz comonlineflashquiz 1.0.2 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the basedir parameter...

joomlaonline-rfi.txt

/==============================================================================================================\ | | | o Online FlashQuiz 1.0.2 Remote File Inclusion Vulnerability | | | | Software : comonlineflashquiz version 1.0.2 - paid component | | Developer : www.elearningforce.biz | | Autho...