CVE-2002-1887: Undefined Security Weakness

PHP remote file inclusion vulnerability in customize.php for phpMyNewsletter 0.6.10 allows remote attackers to execute arbitrary PHP code via the l parameter...

PHPMyNewsLetter 0.6.11 - customize.php include problem

Vulnerable : PHPMyNewsLetter 0.6.11 Vulnerability : Unauthorised file access Product URL : http://gregory.kokanosky.free.fr/phpmynewsletter/ Contacted : 4.2.2003 Advisory by Eclipse at packx.net, visit www.packx.net. Description =========== PHPSecure.org's "fix" broke the functionality of...

CVE-2002-1887

PHP remote file inclusion vulnerability in customize.php for phpMyNewsletter 0.6.10 allows remote attackers to execute arbitrary PHP code via the l parameter...

phpMyNewsletter

Informations : °°°°°°°°°°°°°° Product : phpMyNewsletter Tested version : 0.6.10 Website : http://gregory.kokanosky.free.fr/phpmynewsletter/ Problem : include file PHP code : °°°°°°°°°° ---- /include/customize.php ---- ? $langfile = $l; include $l; ? ---- /include/customize.php ---- Exploit :...

phpMyNewsletter 0.6.10 - Remote File Inclusion

source: https://www.securityfocus.com/bid/5886/info A vulnerability has been discovered in phpMyNewsLetter. Reportedly, it is possible to pass an attacker-specified file include location to a CGI paramter of the 'customize.php' script. This may allow an attacker to execute arbitrary commands with...

phpMyNewsletter 0.6.10 - Remote File Inclusion

phpMyNewsletter 0.6.10 - Remote File Inclusion source: https://www.securityfocus.com/bid/5886/info A vulnerability has been discovered in phpMyNewsLetter. Reportedly, it is possible to pass an attacker-specified file include location to a CGI paramter of the 'customize.php' script. This may allow...