EUVD-2007-3077

Malware in sbrugna...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in PBSite allow remote attackers to execute arbitrary PHP code via a URL in the 1 dbpath parameter to a useronline.php, b ucp.php, c setcookie.php, d sendpm.php, e search.php, f register.php, g profile.php, h post.php, i pmpshow.php, j pm.php, k...

CVE-2007-3085

Multiple PHP remote file inclusion vulnerabilities in PBSite allow remote attackers to execute arbitrary PHP code via a URL in the 1 dbpath parameter to a useronline.php, b ucp.php, c setcookie.php, d sendpm.php, e search.php, f register.php, g profile.php, h post.php, i pmpshow.php, j pm.php, k...

CVE-2007-3085

CVE-2007-3085 describes multiple PHP remote file inclusion vulnerabilities in PBSite. The weakness allows remote attackers to execute arbitrary PHP code by supplying a URL in the dbpath parameter to a long list of PBSite pages (e.g., useronline.php, ucp.php, setcookie.php, etc.) or in the temppat...

CVE-2007-3085

Multiple PHP remote file inclusion vulnerabilities in PBSite allow remote attackers to execute arbitrary PHP code via a URL in the 1 dbpath parameter to a useronline.php, b ucp.php, c setcookie.php, d sendpm.php, e search.php, f register.php, g profile.php, h post.php, i pmpshow.php, j pm.php, k...

pbsite-rfi.txt

.-" "-. / \ | TiTaNiC | |, .-. .-. ,| | o/ \o | |/ /\ | @ ^^ \|IIIIII|/ @8@8 / \ HaCkEr / @ %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% script:PBSite - PHP Bulletin Site | CMS ==== RFI url:http://sourceforge.net/project/showfiles.php?groupid=88114...

MyEvent1.6 (template.php) Remote File Inclusion Vulnerability

.-" "-. / | TiTaNiC | |, .-. .-. ,| | o/ o | |/ / | @ ^^ |IIIIII|/ @8@8|-IIIIII/-| / HaCkEr / @ script:PBSite - PHP Bulletin Site | CMS ==== RFI url:http://sourceforge.net/project/showfiles.php?groupid=88114 authot:titanichacker [email protected] contact: hack-teach.com & mohandko.com...

pbsiteb1.txt

Title: PBSite = B1 C45.1 Remote File Inclusion Vulnerability The bug is Discovered by Minus-Power Mail: minus-power at myway dot com Date: 19.Aug 2006 -= Republic of IRAN =- Greetz : R00TATI - Stansar & members of RS Damn to : All Arab & Turkish hackers...