OpenDock FullCore 4.4 - Remote File Inclusion

--------------------------------------------------------------------------------- OpenDock FullCore = v4.4 Remote File Include Vulnerabilities --------------------------------------------------------------------------------- Author : Matdhule Contact : [email protected] Application : OpenDock...

Maintain 3.0.0-RC2 - 'Example6.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20560/info Maintain is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the conte...

OpenDock FullCore 4.4 - Remote File Inclusion

OpenDock FullCore 4.4 - Remote File Inclusion --------------------------------------------------------------------------------- OpenDock FullCore = v4.4 Remote File Include Vulnerabilities --------------------------------------------------------------------------------- Author : Matdhule Contact ...

CVE-2006-5289

Multiple PHP remote file inclusion vulnerabilities in Vtiger CRM 4.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the calpath parameter to 1 modules/Calendar/admin/update.php, 2 modules/Calendar/admin/scheme.php, or 3 modules/Calendar/calendar.php...

EUVD-2006-5267

Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to 1 report.php, 2 archive.php, 3 comments.php, 4 init.php, or 5 news.php...

CVE-2006-5281

PHP remote file inclusion vulnerability in naboardpnr.php in n@board 3.1.9e and earlier allows remote attackers to execute arbitrary PHP code via a URL in the skin parameter...

CVE-2006-5283

PHP remote file inclusion vulnerability in ftag.php in Minichat 6.0 allows remote attackers to execute arbitrary PHP code via a URL in the mostrar parameter...

CVE-2006-5253

PHP remote file inclusion vulnerability in strload.php in Dayana Networks phpOnline aka PHP-Online 2.1 allows remote attackers to execute arbitrary PHP code via a URL in the LangFile parameter...

CVE-2006-5256

PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includePath parameter...

CVE-2006-5254

PHP remote file inclusion vulnerability in registrationdetailed.inc.php in Mark Van Bellen Detailed User Registration comregistrationdetailed, aka regdetailed, 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2006-5263

Directory traversal vulnerability in templates/header.php3 in phpMyAgenda 3.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter, as demonstrated by a parameter value naming an Apache HTTP Server log file that apparently...

CVE-2006-5253

PHP remote file inclusion vulnerability in strload.php in Dayana Networks phpOnline aka PHP-Online 2.1 allows remote attackers to execute arbitrary PHP code via a URL in the LangFile parameter...

CVE-2006-5252

PHP remote file inclusion vulnerability in includes/core.lib.php in Webmedia Explorer 2.8.7 allows remote attackers to execute arbitrary PHP code via a URL in the pathinclude parameter...

CVE-2006-5251

PHP remote file inclusion vulnerability in index.php in Deep CMS 2.0a allows remote attackers to execute arbitrary PHP code via a URL in the ConfigDir parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-5241

Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Gallery 1.4 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the docdirectory parameter in 1 file.php; 2 finduser.php, 3 libuser.php, 4 libformuser.php, and 5 user.ph...

Echo Security Advisory 2006.48

ECHOADV48$2006 ----------------------------------------------------------------------------------------------- ECHOADV48$2006 WebYep = 1.1.9 webyepsIncludePath Multiple Remote File Inclusion Vulnerability...

CVE-2006-5240

The CVE refers to a PHP remote file inclusion in Docmint 2.0 and earlier, specifically in engine/require.php. The vulnerability requires register_globals to be enabled and allows remote code execution by supplying a URL in the MY_ENV[BASE_ENGINE_LOC] parameter. This is documented across sources (...

Echo Security Advisory 2006.49

ECHOADV49$2006 ----------------------------------------------------------------------------------------------- ECHOADV49$2006OpenDock Easy Doc =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...

CVE-2006-5230

PHP remote file inclusion vulnerability in forum.php in FreeForum 0.9.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter...

Dokeos 1.6.4 - Multiple Remote File Inclusions Vulnerabilities

source: https://www.securityfocus.com/bid/20468/info Dokeos is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing...