CVE-2007-1219

PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...

CVE-2007-1219

Admin Phorum 3.3.1a is affected by CVE-2007-1219: a PHP remote file inclusion in actions/del.php that lets an attacker supply a URL via include_path to execute arbitrary PHP code. Impact is remote code execution with partial confidentiality/integrity/availability compromises as per CVSS 2.0 metri...

CVE-2007-1219

PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...

CVE-2007-1219: Undefined Security Weakness

PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...

Admin Phorum 3.3.1a (del.php include_path) RFI Vulnerability

No description provided by source. br / br / Admin Phorum 3.3.1.a del.php includepathFile Include Vulnerability br / br /...

Admin Phorum 3.3.1.a (del.php include_path)File Include Vulnerability

Admin Phorum 3.3.1.a del.php includepathFile Include Vulnerability Author: GoldM Hacker at w.Cn Mahmoodali Homepage: Www.Tryag.Cc Download S : http://www.phpforums.net/admin331.zip Other Info : http://www.phpforums.net/index.php?dir=dld v.Code : Line 3 require "$includepath/deletemessage.php";...

Admin Phorum 3.3.1a (del.asp include_path) RFI Vulnerability

No description provided by source. br / br / Admin Phorum 3.3.1.a del.php includepathFile Include Vulnerability br / br /...

XXS in script Phorum

======================================================================= title: XXS in script Phorum homepage: www.phorum.org found: 2007-02-25 by: Crackman ================================================= exemple: http://www.site.com/path/admin.php?upgradefile="scriptalertdocument.cookie;/script...

Admin Phorum 3.3.1a - 'del.php?include_path' Remote File Inclusion

Admin Phorum 3.3.1.a del.php includepathFile Include Vulnerability Author: GoldM Mahmoodali Homepage: Www.Tryag.Cc Download S : http://www.phpforums.net/admin331.zip Other Info : http://www.phpforums.net/index.php?dir=dld v.Code : Line 3 require "$includepath/deletemessage.php"; Exploit:...

Admin Phorum 3.3.1a - del.php?include_path Remote File Inclusion

Admin Phorum 3.3.1a - del.php?includepath Remote File Inclusion Admin Phorum 3.3.1.a del.php includepathFile Include Vulnerability Author: GoldM Mahmoodali Homepage: Www.Tryag.Cc Download S : http://www.phpforums.net/admin331.zip Other Info : http://www.phpforums.net/index.php?dir=dld v.Code : Li...

Admin Phorum 3.3.1a (del.php include_path) RFI Vulnerability

Exploit for unknown platform in category web applications ============================================================= Admin Phorum 3.3.1a del.php includepath RFI Vulnerability ============================================================ Admin Phorum 3.3.1.a del.php includepathFile Include...

Cross site scripting

Cross-site scripting XSS vulnerability in the core in Phorum before 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in register.php in Phorum 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the vendor disputes this vulnerability, stating that "The characters are escaped properly...

CVE-2006-6968

Cross-site scripting XSS vulnerability in the group moderation control center page in Phorum before 5.1.19 might allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-0767

Cross-site scripting XSS vulnerability in the core in Phorum before 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-0769

Cross-site scripting XSS vulnerability in register.php in Phorum 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the vendor disputes this vulnerability, stating that "The characters are escaped properly...

CVE-2006-6968

CVE-2006-6968 describes a cross-site scripting (XSS) vulnerability in the group moderation control center page of Phorum prior to 5.1.19. The affected component is the group moderation control center page, with the underlying cause being an XSS flaw that could allow remote attackers to inject arb...

CVE-2007-0769

Phorum 5.1.18 contains an XSS vulnerability in register.php (CVE-2007-0769). The vulnerability is described as allowing remote attackers to inject arbitrary scripts/HTML via unspecified vectors. The vendor disputes the flaw, stating that characters are escaped properly. Public details do not spec...

CVE-2007-0769

Cross-site scripting XSS vulnerability in register.php in Phorum 5.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the vendor disputes this vulnerability, stating that "The characters are escaped properly...