CVE-2007-6187

Multiple directory traversal vulnerabilities in PHP Content Architect aka NoAh 0.9 pre 1.2 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the filepath parameter to 1 cssfile.php, 2 jsfile.php, or 3 xmlfile.php in noah/modules/nosystem/templates/...

CVE-2007-6187

CVE-2007-6187 describes multiple directory traversal vulnerabilities in PHP Content Architect (aka NoAh) versions 0.9 pre 1.2 and earlier. The issue allows remote attackers to read arbitrary files by inserting ".." in the filepath parameter to css_file.php, js_file.php, or xml_file.php within noa...

CVE-2007-6187: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in PHP Content Architect aka NoAh 0.9 pre 1.2 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the filepath parameter to 1 cssfile.php, 2 jsfile.php, or 3 xmlfile.php in noah/modules/nosystem/templates/...

noah-rfi.txt

NoAh 0.9 The PHP Content Architect BUG: Example:http://site.com/path/noah/modules/noevents/templates/mfatheme.php?tpls1=Sh3LL Script Script Download http://sourceforge.net/project/showfiles.php?groupid=131995&packageid=148681&releaseid=318628 [email protected] Special Thanks: x0r0n ajan...

NoAh <= 0.9 pre 1.2 (mfa_theme.php) Remote File Inclusion Vulnerability

No description provided by source. NoAh 0.9 The PHP Content Architect = Remote File Inclusion Vulnerability Dork:: Vuln Code ERROR:noah/modules/noevents/templates/mfatheme.php ?php include$tpls1; ? BUG: Example:http://site.com/path/noah/modules/noevents/templates/mfatheme.php?tpls1=Sh3LL Script...

PHP Content Architect 0.9 pre 1.2 - MFA_Theme.php Remote File Inclusion

PHP Content Architect 0.9 pre 1.2 - MFATheme.php Remote File Inclusion source: https://www.securityfocus.com/bid/23843/info PHP Content Architect is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attack...

PHP Content Architect 0.9 pre 1.2 - 'MFA_Theme.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/23843/info PHP Content Architect is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attac...

NoAh 0.9 pre 1.2 - mfa_theme.php Remote File Inclusion

NoAh 0.9 pre 1.2 - mfatheme.php Remote File Inclusion NoAh 0.9 The PHP Content Architect BUG: Example:http://site.com/path/noah/modules/noevents/templates/mfatheme.php?tpls1=Sh3LL Script Script Download http://sourceforge.net/project/showfiles.php?groupid=131995&packageid=148681&releaseid=318628...

OPENi-CMS 1.0.1beta - config Remote File Inclusion

OPENi-CMS 1.0.1beta - config Remote File Inclusion Update: 22:44 09/11/06 Subject: "OPENi-CMS 1.0.1config Remote File Inclusion Vulnerability " Vulnerable version: OPENi-CMS 1.0.1 Operating System: - All OS Vendor URL: Support - [email protected] Website - http://www.openi-cms.org/ Descriptio...

OPENi-CMS <= 1.0.1beta (config) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================= OPENi-CMS = 1.0.1beta config Remote File Include Vulnerability ================================================================= Update: 22:44 09/11/06 Subject: "OPENi-CMS...

OPENi-CMS 1.0.1beta - 'config' Remote File Inclusion

Update: 22:44 09/11/06 Subject: "OPENi-CMS 1.0.1config Remote File Inclusion Vulnerability " Vulnerable version: OPENi-CMS 1.0.1 Operating System: - All OS Vendor URL: Support - [email protected] Website - http://www.openi-cms.org/ Description: Openi-CMS he one software PHP Content Management...

Flatnuke 2.5.6 - Privilege Escalation Remote Command Execution

Flatnuke 2.5.6 - Privilege Escalation Remote Command Execution ?php ---flatnuke256xpl.php 4.32 10/12/2005 Flatnuke 2.5.6 privilege escalation / remote commands execution exploit works with magicquotesgpc off, try this with 2.5.5: http://www.milw0rm.com/id.php?id=1140...

Flatnuke 2.5.6 Privilege Escalation / Remote Commands Execution Exploit

No description provided by source. ?php ---flatnuke256xpl.php 4.32 10/12/2005 Flatnuke 2.5.6 privilege escalation / remote commands execution exploit works with magicquotesgpc off, try this with 2.5.5: http://www.milw0rm.com/id.php?id=1140 coded by rgod at http://rgod.altervista.org mail: retrogo...

PostNuke Detection

The remote host is running PostNuke, a content manager system written in PHP. Development of Postnuke stopped in 2008. Security flaws will not be patched. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid15721; scriptversion"1.15";...