BASE < 1.2.5 BASE_path Parameter Remote File Inclusion

Binary data 3641.prm...

BASE Multiple Script BASE_path Parameter Remote File Inclusion

The remote host is running BASE, a web-based tool for analyzing alerts from one or more SNORT sensors. The version of BASE installed on the remote host fails to sanitize input to the 'BASEpath' parameter before using it in PHP includeonce function in several scripts. Provided PHP's...

Limbo CMS sql.php classes_dir Parameter Remote File Inclusion

The remote host is running Limbo CMS, a content-management system written in PHP. The version of Limbo CMS installed on the remote host fails to sanitize user-supplied input to the 'classesdir' parameter of the 'classes/adodbt/sql.php' script before using it in PHP 'includeonce' functions. Provid...