Actionpoll 1.1.1 - '/db/DataReaderWriter.php?CONFIG_DB' Remote File Inclusion

source: https://www.securityfocus.com/bid/20788/info Actionpoll is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code a...

Actionpoll 1.1.1 - dbPollDB.php?CONFIG_DATAREADERWRITER Remote File Inclusion

Actionpoll 1.1.1 - dbPollDB.php?CONFIGDATAREADERWRITER Remote File Inclusion source: https://www.securityfocus.com/bid/20788/info Actionpoll is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit the...

PLS-Bannieres 1.21 (bannieres.php) File Include

PLS-Bannieres 1.21 bannieres.php File Include Source Code: ftp://ftp1.comscripts.com/PHP/1959ban01-01.zip Vulnerable Code: modules/bannieres/bannieres.php In Line 13 : include "$chemin/includes/connexion.php" ; Exploit :...

MySource CMS <= 2.16.2 (init_mysource.php) Remote File Include Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? print ' | \\ | \\ | \ . . |\ \ \ /\ \ / /| || | | | | \ | \ Y / | || | | \ | \ \ / | || | |/ // / / ||| \ | / / \ / \ |\ /\ / / \ / \ | | | | / /\ \ / \ / \ | | | | / | / Y \ || / /| /| /...

Actionpoll 1.1.1 - dbDataReaderWriter.php?CONFIG_DB Remote File Inclusion

Actionpoll 1.1.1 - dbDataReaderWriter.php?CONFIGDB Remote File Inclusion source: https://www.securityfocus.com/bid/20788/info Actionpoll is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these...

ArticleBeach Script <= 2.0 Remote File Inclusion Vulnerability

------------------------------------------------------------------------------ ArticleBeach Script = 2.0 page Remote File Inclusion Vulnerability ------------------------------------------------------------------------------ Author : Zeni Susanto a.k.a Bithedz Date Found : October, 22th 2006...

Light Blog Multiple Vulnerabilities Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "\r\n"; echo "Light Blog Multiple Vulnerabilities Exploit\r\n"; echo "by BlackHawk [email protected]\r\n"; echo "Thanks to rgod for the php code and Marty for the Love\r\n\r\n"; if $argc4 echo "Usage: php ".$argv0."...

Segue CMS themesettings.inc.php themesdir Parameter Remote File Inclusion

The remote web server is running Segue CMS, an open source content management system tailored for educational institutions. The version of Segue CMS installed on the remote host fails to sanitize input to the 'themesdir' parameter before using it in the 'themes/program/themesettings.inc.php' scri...

CVE-2006-5594

PHP remote file inclusion vulnerability in University of British Columbia iPeer 2.0, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: it is possible that this issue is related to CakePHP...

PLS-Bannieres 1.21 - 'Bannieres.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20772/info PLS-Bannieres is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the...

Light Blog Remote - Multiple Vulnerabilities

Light Blog Remote - Multiple Vulnerabilities !/usr/bin/php -q -d shortopentag=on \r\n"; echo "Thanks to rgod for the php code and Marty for the Love\r\n\r\n"; if $argc Related: Title Post\r\n"; echo " |- Es: php ".$argv0." localhost /blog/ 1 Hacked I Got You\r\n\r\n"; echo " 2 - Deface Blog With...

CVE-2006-5548

PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System OTSCMS 2.0.0 through 2.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSconfigdirectoriesclasses parameter...

CVE-2006-5554

Directory traversal vulnerability in index.php in Imageview 5 allows remote attackers to read or execute arbitrary local files via a .. dot dot in the usersettings cookie, as demonstrated by using the MyFile parameter in albumview.php to upload a text/plain .gif file containing PHP code, which is...

CVE-2006-5554

Directory traversal vulnerability in index.php in Imageview 5 allows remote attackers to read or execute arbitrary local files via a .. dot dot in the usersettings cookie, as demonstrated by using the MyFile parameter in albumview.php to upload a text/plain .gif file containing PHP code, which is...

CVE-2006-5549

PHP remote file inclusion vulnerability in libraries/amfphp/amf-core/custom/CachedGateway.php in Adobe PHP SDK allows remote attackers to execute arbitrary PHP code via the AMFPHPBASE parameter. NOTE: this issue has been disputed by a third-party researcher who states that AMFPHPBASE is a constan...

TextPattern <= 1.19 (publish.php) Remote File Inclusion Vulnerability

No description provided by source. ----------------------------------------------------------------------------br / TextPattern =g1.19 txpcfgtxpath Remote File Inclusion Vulnerabilitybr / ----------------------------------------------------------------------------br / br / Author : Zeni Susanto...

PHPLeague 0.81 - consultminiseul.php?cheminmini Remote File Inclusion

PHPLeague 0.81 - consultminiseul.php?cheminmini Remote File Inclusion source: https://www.securityfocus.com/bid/20756/info Php League is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include...

CVE-2006-5510

Directory traversal vulnerability in explorerloadlang.php in PH Pexplorer 0.24 allows remote attackers to include arbitrary local files via ".." sequences in the Language cookie, as demonstrated by uploading a .gif file that contains PHP code...

EUVD-2006-5495

Directory traversal vulnerability in explorerloadlang.php in PH Pexplorer 0.24 allows remote attackers to include arbitrary local files via ".." sequences in the Language cookie, as demonstrated by uploading a .gif file that contains PHP code...

CVE-2006-5509

Eval injection vulnerability in addentry.php in WoltLab Burning Book 1.1.2 allows remote attackers to execute arbitrary PHP code via crafted POST requests that store PHP code in a database that is later processed by eval, as demonstrated using SQL injection via the n parameter...