Remote file inclusion

PHP remote file inclusion vulnerability in index.php in DreamCost HostAdmin allows remote attackers to include arbitrary files via the $path variable, which is not initialized before use...

Remote file inclusion

PHP remote file inclusion vulnerability in preview.php in Reamday Enterprises Magic News Lite 1.2.3, when registerglobals is enabled, allows remote attackers to include arbitrary files via a URL in the phpscriptpath parameter...

CPGNuke Dragonfly 9.0.6.1 - Remote Command Execution

this works regardless of magicquotesgpc settings Sun-Tzu: "Thus it may be known that the leader of armies is the arbiter of the people's fate, the man on whom it depends whether the nation shall be in peace or in peril." / a short explaination: install.php is not deleted after dragonfly...

EUVD-2003-1282

PHP remote file include vulnerability in Derek Ashauer ashNews 0.83 allows remote attackers to include and execute arbitrary remote files via a URL in the pathtoashnews parameter to 1 ashnews.php and 2 ashheadlines.php...

PHP 5.1.x < 5.1.2 mysqli Error Message Format String

Binary data 3368.prm...

EUVD-2006-0107

PHP remote file include vulnerability in 1 include/templates/categories/default.php and 2 certain other include/templates/categories/ PHP scripts in Valdersoft Shopping Cart 3.0 allows remote attackers to execute arbitrary code via a URL in the catalogDocumentRoot parameter...

CVE-2006-0094

PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the incstat parameter, a different vulnerability than CVE-2006-0076. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2006-0076

PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter...

Make Apache/1.3. x + php_4. 0. 6 Server denial of service-vulnerability warning-the black bar safety net

PHP supports multipart/form-data POST request, referred to as POST file upload. But phpmimesplit a function of the presence of a plurality of vulnerabilities, the exploitation of these vulnerabilities may make on the target system of the Apache denial of service. The code is as follows: include...

Tolva.txt

Script: Tolva PHP website system Version: 0.1.0 Language: PHP Official Website: http://sourceforge.net/projects/twebs Problem: Remote File Include Discovered by: beford Description: ============ A complete collection of php scripts that work tightly together to create a highly customizable, dynam...

CVE-2005-4163

Directory traversal vulnerability in captcha.php in Captcha PHP 0.9 allows remote attackers to read arbitrary files via the tcf parameter...

CVE-2005-3883

PHP before 5.1.0 contains a CRLF header-injection flaw in mb_send_mail that can be exploited remotely via the To address to inject arbitrary email headers. Multiple OpenVAS/Nessus results corroborate CVE-2005-3883 as part of broader PHP

[SA17359] vBulletin Image Script Insertion Vulnerability

TITLE: vBulletin Image Script Insertion Vulnerability SECUNIA ADVISORY ID: SA17359 VERIFY ADVISORY: http://secunia.com/advisories/17359/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: vBulletin 3.x http://secunia.com/product/3212/ vBulletin 2.x...

CVE-2005-3392

Unspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2, allows remote attackers to bypass safemode and openbasedir directives...

PHP 4.x5.0.x - Arbitrary File Upload GLOBAL Variable Overwrite

PHP 4.x5.0.x - Arbitrary File Upload GLOBAL Variable Overwrite source: https://www.securityfocus.com/bid/15250/info PHP is prone to a vulnerability that allows attackers to overwrite the GLOBAL variable via HTTP POST requests. By exploiting this issue, remote attackers may be able to overwrite th...

CVE-2005-3328

PHP remote file inclusion vulnerability in common.php in PunBB 1.1.2 through 1.1.5 allows remote attackers to execute arbitrary code via the punroot parameter...

USN-207-1: PHP vulnerability

A bug has been found in the handling of the openbasedir directive handling. Contrary to the specification, the value of openbasedir was handled as a prefix instead of a proper directory name even if it was terminated by a slash '/'. For example, this allowed PHP scripts to access the directory...

PHP 5.0.5 - Safedir Restriction Bypass

PHP 5.0.5 - Safedir Restriction Bypass source: https://www.securityfocus.com/bid/15119/info PHP is prone to multiple vulnerabilities that permit an attacker to bypass the 'safedir' directory restriction. An attacker can exploit these vulnerabilities to possible execute arbitrary code currently...

vlbook10.txt

------------------------------------------------------ Nightmare TeAmZ Advisory 005 ------------------------------------------------------ Date - 10/2005 vlbook Remote File Inclusion AFFECTED PRODUCTS ================= vlbook 1.0 Guestbook http://vlbook.com/ OVERVIEW ======== he vlbook is a free,...

My Little Forum 1.5 / 1.6beta SQL Injection

My Little Forum 1.5 / 1.6beta SQL Injection software: site: http://www.mylittlehomepage.net/mylittleforum software: "A simple web-forum that supports classical thread view message tree as well as messagebord view to display the messages. Requires PHP 4.1 and a MySQL database." 1 look at the...