Directory traversal

Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop LWS php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template parameter...

CVE-2008-7240

CVE-2008-7240 describes a directory traversal vulnerability in Linux Web Shop (LWS) PHP User Base 1.3beta. The flaw is in include/unverified.inc.php and allows remote attackers to include and execute arbitrary local files by manipulating the template parameter. Public references (X-Force, Securit...

CVE-2008-7240: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop LWS php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template parameter...

CVE-2008-1043: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in templates/default/header.inc.php in Linux Web Shop LWS php User Base 1.3 BETA allows remote attackers to execute arbitrary PHP code via a URL in the menu parameter...

phpuserbase-lfi.txt

Author : BeyazKurt - [email protected] Script : php User Base 1.3b Risk : Local File Include Download : http://sourceforge.net/project/showfiles.php?groupid=200632 File : include/unverified.inc.php Code : Exploit : Vuln.Com/include/unverified.inc.php?template=CODE ----------------------------...

PHPUserBase 1.3b - 'unverified.inc.php' Local File Inclusion

Author : BeyazKurt - [email protected] Script : php User Base 1.3b Risk : Local File Include Download : http://sourceforge.net/project/showfiles.php?groupid=200632 File : include/unverified.inc.php Code : Exploit : Vuln.Com/include/unverified.inc.php?template=CODE ----------------------------...