CVE-2009-0530: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in SnippetMaster 2.2.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 SESSIONSCRIPTPATH parameter to includes/vars.inc.php and the 2 gpcltarlibdir parameter to...

CVE-2009-0513: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in WebFrame 0.76 allow remote attackers to execute arbitrary PHP code via a URL in the classFiles parameter to 1 admin/doc/index.php, 2 index.php, and 3 base/menu.php in mod/...

CVE-2008-6103

PHP remote file inclusion vulnerability in index.php in A4Desk Event Calendar, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the v parameter...

CVE-2009-0495

PHP remote file inclusion vulnerability in include/define.php in REALTOR 747 4.11 allows remote attackers to execute arbitrary PHP code via a URL in the INCDIR parameter...

Hedgedog CMS 1.21 LFI / Command Execution

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

Hedgehog-CMS 1.21 (LFI) Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

CVE-2008-6103: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in index.php in A4Desk Event Calendar, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the v parameter...

Hedgehog-CMS 1.21 (LFI) Remote Command Execution Exploit

Exploit for unknown platform in category web applications ======================================================== Hedgehog-CMS 1.21 LFI Remote Command Execution Exploit ======================================================== !/usr/bin/perl...

Hedgehog-CMS 1.21 - Local File Inclusion Remote Command Execution

Hedgehog-CMS 1.21 - Local File Inclusion Remote Command Execution !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

Unrestricted file upload

Unrestricted file upload vulnerability in pages/download.php in Iamma Simple Gallery 1.0 and 2.0 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads directory...

CVE-2008-6084

Unrestricted file upload vulnerability in pages/download.php in Iamma Simple Gallery 1.0 and 2.0 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads directory...

CVE-2008-6084

Unrestricted file upload vulnerability in pages/download.php in Iamma Simple Gallery 1.0 and 2.0 allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in the uploads directory...

CVE-2009-0456: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in examples/exampleclientsidejavascript.php in patForms, as used in Sourdough 0.3.5, allows remote attackers to execute arbitrary PHP code via a URL in the neededFilespatForms parameter...

Jaws language Parameter Multiple Local File Includes

Jaws, a Framework and Content Management System for building dynamic websites, is installed on the remote system. The installed version fails to filter input to the 'language' parameter before using it to include PHP code in '/upgrade/index.php' and '/install/index.php'. Regardless of PHP's...

CVE-2009-0441: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in skinshop/standard/2viewbody/bodydefault.php in TECHNOTE 7.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the shopthisskinpath parameter, a different vector than CVE-2008-4138...

CVE-2009-0444: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in GRBoard 1.8, when registerglobals is enabled and magicquotesgpc is disabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 theme parameter to a 179squareboxpdslist/view.php, b 179squareboxminishopexpand/view.php, c...

CVE-2008-6066: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in MeetWeb 0.8 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 modules.php, 2 ManagerResource.class.php, 3 ManagerRightsResource.class.php, 4 RegForm.class.php, 5 RegResource.class.php, and 6...

CMS Mini <= 0.2.2 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ================================================== CMS Mini ". "\n+ Ex. : php xpl.php localhost /CMSmini". "\n\n"; if $argc != 3 usage; $hostname = $argv 1; $path = $argv 2; $fp = fsockopen $hostname, 80; $post = "message="; $request = "PO...

OpenHelpDesk 1.0.100 Code Execution

$Id: phpeval.rb 5783 2008-10-23 02:43:21Z ramon $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2008-6022: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in includes/todofleetcontrol.php in an older version of Xnova, possibly 0.8 sp1, allows remote attackers to execute arbitrary PHP code via a URL in the ugamelarootpath parameter...