CVE-2006-6743

phpProfiles before 2.1.1 uses world writable permissions for certain profile files and directories, which allows local users to modify or delete files, related to 1 users/include/domakeprofile.inc.php and 2 users/include/copy.inc.php...

CVE-2006-6744

phpProfiles before 2.1.1 does not have an index.php or other index file in the 1 imagedata, 2 graphics/comm, or 3 users read/write directories, which might allow remote attackers to list directory contents or have other unknown impacts...

CVE-2006-6740

Multiple PHP remote file inclusion vulnerabilities in phpProfiles 3.1.2b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the menu parameter to 1 include/body.inc.php or 2 include/bodyadmin.inc.php; or a URL in the incpath parameter to 3 index.inc.php, 4...

CVE-2006-6740

CVE-2006-5634 affects phpProfiles 2.1 Beta, allowing remote PHP code execution via a URL in the reqpath parameter to body.inc.php and body_blog.inc.php in users/include/ or via usrinc in users/include/upload_ht.inc.php. This is a PHP remote file inclusion (RFI) vulnerability. CVE-2006-6740 covers...

CVE-2006-6743

CVE-2006-6743 affects phpProfiles prior to 2.1.1. The vulnerability arises from world-writable permissions on certain profile files and directories, enabling local users to modify or delete files. Affected elements include (1) users/include/do_makeprofile.inc.php and (2) users/include/copy.inc.ph...

CVE-2006-6744

CVE-2006-6744 affects phpProfiles prior to 2.1.1. The vulnerability arises because there is no index.php (or other index file) in (1) image_data, (2) graphics/comm, and (3) users read/write directories, which might allow remote attackers to list directory contents or cause other unknown impacts. ...

CVE-2006-6740: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in phpProfiles 3.1.2b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the menu parameter to 1 include/body.inc.php or 2 include/bodyadmin.inc.php; or a URL in the incpath parameter to 3 index.inc.php, 4...

PT-2006-7341 · Unknown · Phpprofiles

Name of the Vulnerable Software and Affected Versions: phpProfiles versions 3.1.2b and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the menu parameter to various PHP files, including "include/body.inc.php" and "include/body admin.inc.php", or a...

CVE-2006-6743: Undefined Security Weakness

phpProfiles before 2.1.1 uses world writable permissions for certain profile files and directories, which allows local users to modify or delete files, related to 1 users/include/domakeprofile.inc.php and 2 users/include/copy.inc.php...

CVE-2006-6744: Undefined Security Weakness

phpProfiles before 2.1.1 does not have an index.php or other index file in the 1 imagedata, 2 graphics/comm, or 3 users read/write directories, which might allow remote attackers to list directory contents or have other unknown impacts...

PHPProfiles远程文件包含漏洞

PHPProfiles是一款基于PHP的WEB应用程序。 PHPProfiles不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于多个脚本对用户提交的WEB参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 phpProfiles phpProfiles 3.1.2b phpProfiles phpProfiles 2.1 http://sourceforge.net/project/showfiles.php?groupid=176310...

phpProfiles <= 3.1.2b Multiple Remote File Include Vulnerabilities

+------------------------------------------------------------------------------------------- + phpProfiles = 3.1.2b Multiple Remote File Include Vulnerabilities +------------------------------------------------------------------------------------------- + Affected Software .: phpProfiles = 3.1.2b...

phpProfiles 3.1.2b - Multiple Remote File Inclusions

phpProfiles 3.1.2b - Multiple Remote File Inclusions +------------------------------------------------------------------------------------------- + phpProfiles +------------------------------------------------------------------------------------------- + Details: + phpProfiles has several scripts...

phpProfiles <= 3.1.2b Multiple Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== phpProfiles + include/account.inc.php, lines 09: include"$incpath/footer.inc.php"; + include/index.inc.php, lines 05: include"$incpath/adminerr.inc.php"; + ... see below fo...

phpProfiles 3.1.2b - Multiple Remote File Inclusions

+------------------------------------------------------------------------------------------- + phpProfiles +------------------------------------------------------------------------------------------- + Details: + phpProfiles has several scripts which do not initialize variables before using them ...

phpProfiles &lt;= 3.1.2b Multiple Remote File Include Vulnerabilities

No description provided by source. +------------------------------------------------------------------------------------------- + phpProfiles = 3.1.2b Multiple Remote File Include Vulnerabilities +------------------------------------------------------------------------------------------- + Affect...

CVE-2006-5634

Multiple PHP remote file inclusion vulnerabilities in phpProfiles 2.1 Beta allow remote attackers to execute arbitrary PHP code via a URL in the 1 reqpath parameter to a body.inc.php and b bodyblog.inc.php in users/include/; or the 2 usrinc parameter in users/include/uploadht.inc.php...

CVE-2006-5634

Multiple PHP remote file inclusion vulnerabilities in phpProfiles 2.1 Beta allow remote attackers to execute arbitrary PHP code via a URL in the 1 reqpath parameter to a body.inc.php and b bodyblog.inc.php in users/include/; or the 2 usrinc parameter in users/include/uploadht.inc.php...

CVE-2006-5634: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in phpProfiles 2.1 Beta allow remote attackers to execute arbitrary PHP code via a URL in the 1 reqpath parameter to a body.inc.php and b bodyblog.inc.php in users/include/; or the 2 usrinc parameter in users/include/uploadht.inc.php...

CVE-2006-5634

CVE-2006-5634 is associated with PHP remote file inclusion in phpProfiles. Connected records document additional PHP RFI vulnerabilities in phpProfiles 3.1.2b and earlier, with multiple vectors across include/body.inc.php, body_admin.inc.php, menu files, and various incpath parameters. The core i...