SolpotCrew Advisory #15 (home_edition2001) - Weblogicnet (files_dir) Remote File Inclusion

Nyubicrew Community Weblogicnet filesdir Remote File Inclusion vendor : http://www.weblogicnet.com/ source : http://weblogicnet.com/data/weblogicnet.tgz Bug Found By :homeedition2001 a.k.a bius 31-08-2007 contact: [email protected] Website : www.solpotcrew.org/adv/homeedition2001-adv-02.txt Greetz:...

CVE-2007-4815: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in WebED in Markus Iser ED Engine 0.8999 alpha allow remote attackers to execute arbitrary PHP code via a URL in the Codebase parameter to 1 channeledit.php, 2 post.php, 3 view.php, or 4 viewitem.php in source/mod/rss/...

CVE-2007-4807: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Focus/SIS 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the staticpath parameter to 1 modules/Discipline/CategoryBreakdownTime.php or 2 modules/Discipline/StudentFieldBreakdown.php...

CVE-2007-4806: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in modules/Discipline/CategoryBreakdownTime.php in Focus/SIS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the FocusPath parameter...

Claroline inc/lib/language.lib.php language Parameter Traversal Local File Inclusion

The version of Claroline installed on the remote host fails to sanitize user-supplied input to the 'language' parameter before using it to include PHP code in the 'loadtranslation' method in 'claroline/inc/lib/language.lib.php'. Regardless of PHP's 'registerglobals' setting, an unauthenticated,...

CVE-2007-4757: Improper Input Validation

PHP remote file inclusion vulnerability in menu.php in phpMytourney allows remote attackers to execute arbitrary PHP code via a URL in the functionsfile parameter...

CVE-2007-4763: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in dbmodules/DBadodb.class.php in PHP Object Framework PHPOF 20040226 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PHPOFINCLUDEPATH parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library STPHPLibrary 0.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the STPHPLIBDIR parameter to 1 stphpapplication.php, 2 stphpbtnimage.php, or 3 stphpform.php...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library STPHPLibrary 0.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 dbconf or 2 ADODBDIR parameter to utils/stphpimageshow.php; or a URL in the STPHPLIBDIR parameter to 3 stphpbutton.php, 4...

CVE-2007-4738: Improper Input Validation

Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library STPHPLibrary 0.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 dbconf or 2 ADODBDIR parameter to utils/stphpimageshow.php; or a URL in the STPHPLIBDIR parameter to 3 stphpbutton.php, 4...

CVE-2007-4737: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library STPHPLibrary 0.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the STPHPLIBDIR parameter to 1 stphpapplication.php, 2 stphpbtnimage.php, or 3 stphpform.php...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Weblogicnet allow remote attackers to execute arbitrary PHP code via a URL in the filesdir parameter in 1 esdesp.php, 2 escustommenu.php, and 3 esoffer.php...

home_edition2001-adv-02.txt.txt

Nyubicrew Community Weblogicnet filesdir Remote File Inclusion vendor : http://www.weblogicnet.com/ source : http://weblogicnet.com/data/weblogicnet.tgz Bug Found By :homeedition2001 a.k.a bius 31-08-2007 contact: [email protected] Website : www.solpotcrew.org/adv/homeedition2001-adv-02.txt Greetz:...

CVE-2007-4715: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Weblogicnet allow remote attackers to execute arbitrary PHP code via a URL in the filesdir parameter in 1 esdesp.php, 2 escustommenu.php, and 3 esoffer.php...

SolpotCrew Advisory #15 (home_edition2001) - Weblogicnet (files_dir) Remote File Inclusion

Community Weblogicnet filesdir Remote File Inclusion vendor : http://www.weblogicnet.com/ source : http://weblogicnet.com/data/weblogicnet.tgz Bug Found By :homeedition2001 a.k.a bius 31-08-2007 contact: bius22 at mac dot com email concealed Website :...

Weblogicnet (files_dir) Multiple Remote File Inclusion Vulnerabilities

No description provided by source. Nyubicrew Community Weblogicnet filesdir Remote File Inclusion vendor : http://www.weblogicnet.com/ source : http://weblogicnet.com/data/weblogicnet.tgz Bug Found By :homeedition2001 a.k.a bius 31-08-2007 contact: [email protected] Website :...

Weblogicnet (files_dir) Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== Weblogicnet filesdir Multiple Remote File Inclusion Vulnerabilities ====================================================================== Nyubicrew Community Weblogicn...

Weblogicnet - files_dir Multiple Remote File Inclusions

Weblogicnet - filesdir Multiple Remote File Inclusions Nyubicrew Community Weblogicnet filesdir Remote File Inclusion vendor : http://www.weblogicnet.com/ source : http://weblogicnet.com/data/weblogicnet.tgz Bug Found By :homeedition2001 a.k.a bius 31-08-2007 contact: [email protected] Website :...

Weblogicnet - 'files_dir' Multiple Remote File Inclusions

Nyubicrew Community Weblogicnet filesdir Remote File Inclusion vendor : http://www.weblogicnet.com/ source : http://weblogicnet.com/data/weblogicnet.tgz Bug Found By :homeedition2001 a.k.a bius 31-08-2007 contact: [email protected] Website : www.solpotcrew.org/adv/homeedition2001-adv-02.txt Greetz:...

Remote file inclusion

PHP remote file inclusion vulnerability in protection.php in ePersonnel RC200402 allows remote attackers to execute arbitrary PHP code via a URL in the logoutpage parameter...