EUVD-2008-0458

Malware in sbrugna...

CVE-2008-0448

CVE-2008-0448 describes a PHP remote file inclusion vulnerability in phpSearch, specifically in the file utils/class_HTTPRetriever.php where an attacker can cause arbitrary PHP code execution by supplying a URL in the parameter libcurlemuinc . The public description notes this as a remote code ex...

phpsearch-rfi.txt

Script : PhpSearch Bug : Remote File Inclusion Author : SekoMirza Company : http://www.hawkententerprises.org Download : http://www.hawkenterprises.org/dev/phpsearch.zip Dork : not yet Where : phpsearch/utils/classHTTPRetriever.php Bug : if isreadable$libcurlemuinc requireonce$libcurlemuinc;...