CVE-2010-2341: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta allows remote attackers to execute arbitrary PHP code via a URL in the tplbasedir parameter...

greeting card remote Upload File vulnerability-vulnerability warning-the black bar safety net

greeting card program the presence of a remote file upload vulnerability, a registered user login you can upload a php executable code. Google Dork : "Send amazing greetings to your friends and relative!" trojandownloader : http://127.0.0.1/upload.php First register and the site and go to upload...

CVE-2010-2314: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in nucleus/plugins/NPTwitter.php in the NPTwitter Plugin 0.8 and 0.9 for Nucleus, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the DIRPLUGINS parameter. NOTE: some of these details are obtained from thi...

CVE-2010-2315: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in picturelib.php in SmartISoft phpBazar 2.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cat parameter...

CVE-2010-1514: Undefined Security Weakness

Unrestricted file upload vulnerability in TomatoCMS 2.0.6 and earlier allows remote authenticated users, with certain privileges, to execute arbitrary PHP code by uploading an image file, and then accessing it via a direct request to the file in an unspecified directory...

Remote file inclusion

PHP remote file inclusion vulnerability in index.php in CMS S.Builder 3.7 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in a binnincludepath cookie. NOTE: this can also be leveraged to include and execute arbitrary local files...

DaLogin 2.2 - 'FCKeditor' Arbitrary File Upload

Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm eidelweiss member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

Snipe Gallery 'cfg_admin_path' Multiple Remote File Include Vulnerabilities

The host is running Snipe Gallery and is prone to multiple remote file include vulnerabilities. OpenVAS Vulnerability Test $Id: gbsnipegalleryremotefileincludevuln.nasl 5373 2017-02-20 16:27:48Z teissa $ Snipe Gallery 'cfgadminpath' Multiple Remote File Include Vulnerabilities Authors: Sooraj KS...

JV2 Folder Gallery 'lang_file' Parameter RFI Vulnerability

JV2 Folder Gallery is prone to a remote file inclusion RFI vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DDLCMS 2.1 - 'skin' Remote File Inclusion

============================================================== DDLCMS v2.1 skin Remote File Inclusion Vulnerability ============================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ ...

Remote file inclusion

PHP remote file inclusion vulnerability in banned.php in Visitor Logger allows remote attackers to execute arbitrary PHP code via a URL in the VLincludepath parameter...

CVE-2010-2145: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in ClearSite Beta 4.50, and possibly other versions, allow remote attackers to execute arbitrary PHP code via a URL in the csbasepath parameter to 1 docs.php and 2 include/admin/deviceadmin.php. NOTE: the header.php vector is already covered by...

GLSA-201006-13 : Smarty: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201006-13 Smarty: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Smarty: The vendor reported that the modifier.regexreplace.php plug-in contains an input sanitation flaw related to the ASCII NUL characte...

CVE-2010-2137

PHP remote file inclusion vulnerability in center.php in ProMan 0.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2010-2137: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in center.php in ProMan 0.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2010-2126: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Snipe Gallery 3.1.5 allow remote attackers to execute arbitrary PHP code via a URL in the cfgadminpath parameter to 1 index.php, 2 view.php, 3 image.php, 4 search.php, 5 admin/index.php, 6 admin/gallery/index.php, 7 admin/gallery/view.php, 8...

Joomla! Component My Car 1.0 - Multiple Vulnerabilities

Joomla! Component My Car 1.0 - Multiple Vulnerabilities Exploit Title: Joomla Component My Car Multiple Vulnerabilities Date: 28th May 2010 Author: Valentin Category: webapps/0day Version: 1.0 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::...

Joomla! Component My Car 1.0 - Multiple Vulnerabilities

Exploit Title: Joomla Component My Car Multiple Vulnerabilities Date: 28th May 2010 Author: Valentin Category: webapps/0day Version: 1.0 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Joomla...

CVE-2010-2099

bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs that could contain the php bbcode tag, which allows remote attackers to execute arbitrary PHP code, as demonstrated using the toEmail method in contact.php, related to invocations of the toHTML method...

Design/Logic Flaw

bbcode/php.bb in e107 0.7.20 and earlier does not perform access control checks for all inputs that could contain the php bbcode tag, which allows remote attackers to execute arbitrary PHP code, as demonstrated using the toEmail method in contact.php, related to invocations of the toHTML method...