Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Direct News 4.10.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 admin/menu.php and 2 library/lib.menu.php; and the adminroot parameter to 3...

CVE-2010-1342

Multiple PHP remote file inclusion vulnerabilities in Direct News 4.10.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 admin/menu.php and 2 library/lib.menu.php; and the adminroot parameter to 3...

CVE-2010-1216

The CVE-2010-1216 entry concerns PHP remote file inclusion in notsoPureEdit prior to or including version 1.4.1, triggered when register_globals is enabled. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a URL in the content parameter, via a crafted request to tem...

Secunia Research: Pulse CMS login.php Arbitrary File Writing Vulnerability

====================================================================== Secunia Research 24/03/2010 - Pulse CMS login.php Arbitrary File Writing Vulnerability - ====================================================================== Table of Contents Affected...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in osDate 2.1.9 and 2.5.4, when magicquotesgpc is disabled and registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the configforuminstalled parameter to 1 forum/adminLogin.php and 2 forum/userLogin.php...

CVE-2009-4725

CVE-2009-4725 refers to a directory traversal vulnerability in Arab Portal

PHP-Nuke - ratedownload SQL Injection

PHP-Nuke - ratedownload SQL Injection =========================================================================== Topic : PHP-Nuke All Version Bug type : SQL Injection Download : http://phpnuke.org/modules.php?name=Downloads Advisory : http://itsecteam.com/fa/vulnerabilities/vulnerability21.htm...

PHP-Nuke - ratedownload SQL Injection

=========================================================================== Topic : PHP-Nuke All Version Bug type : SQL Injection Download : http://phpnuke.org/modules.php?name=Downloads Advisory : http://itsecteam.com/fa/vulnerabilities/vulnerability21.htm...

PHP-Nuke Ratedownload SQL Injection

Hello ITSecTeam has found new vulnerability in PHP-Nuke All Version. below is a copy of advisory and also attached with email. Have a good day =========================================================================== Topic : PHP-Nuke All Version Bug type : SQL Injection Download :...

Remote file inclusion

PHP remote file inclusion vulnerability in include/mail.inc.php in Rezervi 3.0.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the root parameter, a different vector than CVE-2007-2156...

Remote file inclusion

PHP remote file inclusion vulnerability in inc/config.php in deV!Lz Clanportal DZCP 1.5.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the basePath parameter...

CVE-2010-0966

PHP remote file inclusion vulnerability in inc/config.php in deV!Lz Clanportal DZCP 1.5.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the basePath parameter...

Rsstatic SQL Injection

Topic : Rsstatic Latest Version Bug tType : Sql Injection Credit : ITSecTeam Remote : Yes Status : Bug mail : [email protected] Dork : Rsstatic, Zend - is SUXX Special Tnx : Amin ShokohiPejvak, C0M0D0 , 0xd41684c654 , r3dmove And All It Security Team Members Website : WwW.ITSecTeam.com Exploit...

Rsstatic SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================== Rsstatic SQL Injection Vulnerability ==================================== Topic : Rsstatic Latest Version Bug tType : Sql Injection Credit : ITSecTeam Remote : Yes Status : Bug Dork : Rsstatic, Zend - i...

To bypass the PHP web site Access Denied-vulnerability warning-the black bar safety net

registerglobals = On ? php $sqlcontent = "? PHP exit"Access Denied"; ?& gt;".$ p."\ n"; fileputcontents$logfile, $sqlcontent; ?& gt; exp-demo. php? logfile=php://filter/write=convert. base64-decode/resource=abc. php&p=aPD9waHAgcGhwaW5mbygpOy8vPz4= http://marc.info/?l=full-disclosure& ... 7 1&w=2...

CVE-2010-0678

PHP remote file inclusion vulnerability in includes/moderation.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the includesdirectory parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in includes/moderation.php in Katalog Stron Hurricane 1.3.5, and possibly earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the includesdirectory parameter...

CVE-2010-0678

The vulnerability CVE-2010-0678 affects Katalog Stron Hurricane 1.3.5 (and possibly earlier) via a PHP remote file inclusion in includes/moderation.php when register_globals is enabled. An attacker can supply a URL in the includes_directory parameter to execute arbitrary PHP code on the server. T...

DBHCMS Web Content Management System v1.1.4 RFI Vulnerability

Securitylab.ir Application Info: Name: DBHCMS Web Content Management System Version: 1.1.4 Download: : Discoverd By: Securitylab.ir Website: http://Securitylab.ir Contacts: adminatsecuritylab.ir & [email protected] Vulnerability Info: Type: RFI Remote File Inclusion Risk: High...

Pragyan CMS 2.6.4 Remote File Inclusion

Author: Author: Mr.SeCreT E-mail: [email protected] From: Syria Greeting To: Milw0rm Script Information: Scipt: Pragyan CMS 2.6.4 Search.php Remote File Inclusion Vulnerability Language: PHP Download: http://garr.dl.sourceforge.net/project/pragyan/pragyan/2.6.4/pragyan-2.6.4.tar.gz registerglobals...