EUVD-2003-0553

Malware in sbrugna...

PHPForum 2.0 RC1 Mainfile.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8158/info phpForum is prone to a vulnerability that may permit remote attackers to include and execute malicious PHP scripts. This could be exploited to execute malicious PHP commands in the context of the web server...

phpforum11.txt

Vendor: Phpforum, http://www.phpforums.net/ Product: McGallery v 1.1 Vulnerability: files reading on disk Consequences: Web server paths are opened Risk: High Description: Attacker can form the query in URL form ang get the access to the system files Example:...

CVE-2003-0559

mainfile.php in phpforum 2 RC-1, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by modifying the MAINPATH parameter to reference a URL on a remote web server that contains the code...

CVE-2003-0559

mainfile.php in phpforum 2 RC-1, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by modifying the MAINPATH parameter to reference a URL on a remote web server that contains the code...

CVE-2003-0559

The CVE-2003-0559 entry describes a remote PHP code execution vulnerability in phpforum 2 RC-1 (and possibly earlier) where an attacker can set MAIN_PATH to reference a URL containing PHP code on a remote server. This affects phpforum’s mainfile.php; exploitation would allow arbitrary code execut...

PHPForum 2.0 RC1 - Mainfile.php Remote File Inclusion

PHPForum 2.0 RC1 - Mainfile.php Remote File Inclusion source: https://www.securityfocus.com/bid/8158/info phpForum is prone to a vulnerability that may permit remote attackers to include and execute malicious PHP scripts. This could be exploited to execute malicious PHP commands in the context of...

PHPForum 2.0 RC1 - 'Mainfile.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/8158/info phpForum is prone to a vulnerability that may permit remote attackers to include and execute malicious PHP scripts. This could be exploited to execute malicious PHP commands in the context of the web server process...