PeopleAggregator <= 1.2pre6-release-53 Multiple RFI Vulnerabilities

No description provided by source. PeopleAggregator 1.2pre6 Multiple Remote File Inclusion Vulnerabilities http://update.peopleaggregator.org/dist/peopleaggregator-1.2pre6-release-53.tar.gz DORK : copyright 2006 Broadband Mechanics POC : /web/Flickrclient.php?pathprefix=shell...

PeopleAggregatory security advisory - re CVE-2007-5631

Hi all, This is a notification that the remote file inclusion vulnerabilities reported in CVE-2007-5631 have been fixed in PeopleAggregator v1.2pre6-release-55, and are not exploitable if PHP's registerglobals directive is disabled. CVE entry: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-5631 ---...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in PeopleAggregator 1.2pre6, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the currentblockmodulepath parameter to 1 AudiosMediaGalleryModule/AudiosMediaGalleryModule.php, 2...

CVE-2007-5631

Multiple PHP remote file inclusion vulnerabilities in PeopleAggregator 1.2pre6, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the currentblockmodulepath parameter to 1 AudiosMediaGalleryModule/AudiosMediaGalleryModule.php, 2...

CVE-2007-5631

Multiple PHP remote file inclusion vulnerabilities in PeopleAggregator 1.2pre6, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the currentblockmodulepath parameter to 1 AudiosMediaGalleryModule/AudiosMediaGalleryModule.php, 2...

CVE-2007-5631

Vulnerability summary (CVE-2007-5631) : In PeopleAggregator 1.2pre6, multiple PHP remote file inclusion flaws exist when PHP register_globals is enabled. An attacker can abuse the current_blockmodule_path parameter (and related path_prefix usage) to cause arbitrary PHP code execution via modules ...

PeopleAggregator &lt;= 1.2pre6-release-53 Multiple RFI Vulnerabilities

No description provided by source. PeopleAggregator 1.2pre6 Multiple Remote File Inclusion Vulnerabilities http://update.peopleaggregator.org/dist/peopleaggregator-1.2pre6-release-53.tar.gz DORK : "copyright 2006 Broadband Mechanics" POC : /web/Flickrclient.php?pathprefix=shell...

PeopleAggregator <= 1.2pre6-release-53 Multiple RFI Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== PeopleAggregator = 1.2pre6-release-53 Multiple RFI Vulnerabilities =================================================================== PeopleAggregator 1.2pre6 Multiple...

PeopleAggregator 1.2pre6-release-53 - Multiple Remote File Inclusions

PeopleAggregator 1.2pre6-release-53 - Multiple Remote File Inclusions PeopleAggregator 1.2pre6 Multiple Remote File Inclusion Vulnerabilities http://update.peopleaggregator.org/dist/peopleaggregator-1.2pre6-release-53.tar.gz DORK : "copyright 2006 Broadband Mechanics" POC :...

PeopleAggregator 1.2pre6-release-53 - Multiple Remote File Inclusions

PeopleAggregator 1.2pre6 Multiple Remote File Inclusion Vulnerabilities http://update.peopleaggregator.org/dist/peopleaggregator-1.2pre6-release-53.tar.gz DORK : "copyright 2006 Broadband Mechanics" POC : /web/Flickrclient.php?pathprefix=shell /web/networkmoduleselector.php?pathprefix=shell...