Remote file inclusion

PHP remote file inclusion vulnerability in display.php in RSS-aggregator allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-2836

PHP remote file inclusion vulnerability in sendreminders.php in WebCalendar 1.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter and a 0 value for the noSet parameter, a different vector than CVE-2007-1483...

CVE-2008-2792

SQL injection vulnerability in index.php in eroCMS 1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the site parameter...

PHP 5.2.6 - 'chdir()' Function http URL Argument Safe_mode Restriction Bypass

source: https://www.securityfocus.com/bid/29796/info PHP is prone to multiple 'safemode' restriction-bypass vulnerabilities. Successful exploits could allow an attacker to determine the presence of files in unauthorized locations; other attacks are also possible. Exploiting these issues allows...

PHP <= 4.3.7 openlog() Buffer Overflow Exploit

No description provided by source. ? PUBLIC EXPLOIT PHP v4.3.x exploit by The Warlock BhQ, http://go.to/biohazardhq mail:[email protected] PUBLIC EXPLOIT / This "Proof of Concept" sploit is only for Win2k SP4 + PHP 4.3.5 on Apache 2.0.49...

Remote file inclusion

PHP remote file inclusion vulnerability in chreadalso.php in News Manager 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the readxmlinclude parameter...

Code injection

Static code injection vulnerability in admincp.php in DeluxeBB 1.2 and earlier allows remote authenticated administrators to inject arbitrary PHP code into logs/cp.php via the URI...

CVE-2008-2198

The CVE-2008-2198 entry describes a PHP remote file inclusion vulnerability in Kmita Tellfriend 2.0 and earlier, specifically in kmitaadmin/kmitat/htmlcode.php when register_globals is enabled. The root cause is the ability to specify a URL in the file parameter, allowing an attacker to execute a...

[ECHO_ADV_94$2008] Kmita Mail <= 3.0 (file) Remote File Inclusion Vulnerability

ECHOADV94$2008 ----------------------------------------------------------------------------------------- ECHOADV94$2008 Kmita Mail = 3.0 file Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran Addahroni...

CVE-2008-0599

The initrequestinfo function in sapi/cgi/cgimain.c in PHP before 5.2.6 does not properly consider operator precedence when calculating the length of PATHTRANSLATED, which might allow remote attackers to execute arbitrary code via a crafted URI. Recent assessments: sulinhyo at March 28, 2022 7:35a...

YouTube Clone Script - spages.php Remote Code Execution

YouTube Clone Script - spages.php Remote Code Execution !/usr/bin/perl inphex /siteadmin/spages.php include"../include/config.php"; include"../include/function.php"; if$REQUEST'update' $filepath = $config'BASEDIR'."/templates/".$REQUEST'page'; iffileexists$filepath $handle =...

Remote file inclusion

PHP remote file inclusion vulnerability in newsshow.php in Newanz NewsOffice 1.0 and 1.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the newsofficedirectory parameter...

EUVD-2008-1903

PHP remote file inclusion vulnerability in newsshow.php in Newanz NewsOffice 1.0 and 1.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the newsofficedirectory parameter...

CVE-2008-1776

PHP remote file inclusion vulnerability in modules/basicfog/basicfogfactory.class.php in PhpBlock A8.4 allows remote attackers to execute arbitrary PHP code via a URL in the PATHTOCODE parameter...

CVE-2008-1384

CVE-2008-1384: In PHP 5.2.5 and earlier, an integer overflow in printf/ sprintf formatting (via the php_sprintf_appendstring path in formatted_print.c) can be triggered by a large width specifier, leading to a denial of service and potentially other impact. Affected software is PHP 5.2.5 and olde...

CVE-2008-1126

PHP remote file inclusion vulnerability in main.php in Barryvan Compo Manager 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the pageURL parameter...

EUVD-2008-1135

PHP remote file inclusion vulnerability in main.php in Barryvan Compo Manager 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the pageURL parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in footer.php in Quinsonnas Mail Checker 1.55 allows remote attackers to execute arbitrary PHP code via a URL in the opfooterbody parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in mod/mod.extmanager.php in DBHcms 1.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the extmanagerinstall parameter...

CVE-2008-1038

CVE-2008-1038 : A PHP remote file inclusion vulnerability exists in DBHcms versions 1.1.4 and earlier, in the file mod/extmanager.php (extmanager_install parameter). The underlying issue allows remote attackers to cause arbitrary PHP code execution by supplying a crafted URL. Included connected r...