Directory traversal

Directory traversal vulnerability in data/inc/lib/pcltar.lib.php in Pluck 4.5.3, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the gpcltarlibdir parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter...

CVE-2009-0595

CVE-2009-0595 affects phpSkelSite 1.4: PHP remote file inclusion in skysilver/login.tpl.php when register_globals is enabled and magic_quotes_gpc is disabled. An attacker can cause arbitrary PHP code execution by supplying a URL in the theme parameter. Public references indicate existing exploit ...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in SnippetMaster 2.2.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 SESSIONSCRIPTPATH parameter to includes/vars.inc.php and the 2 gpcltarlibdir parameter to...

CVE-2009-0530

CVE-2009-0530: The vulnerability lies in SnippetMaster 2.2.2 where remote file inclusion is possible when PHP register_globals is enabled. An attacker can cause arbitrary PHP code execution by supplying a URL through (1) _SESSION[SCRIPT_PATH] to includes/vars.inc.php and (2) g_pcltar_lib_dir to i...

CVE-2009-0530

Multiple PHP remote file inclusion vulnerabilities in SnippetMaster 2.2.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 SESSIONSCRIPTPATH parameter to includes/vars.inc.php and the 2 gpcltarlibdir parameter to...

CVE-2009-0535

CVE-2009-0535 describes a directory traversal in export.php of Thyme 1.3 and earlier, where, when register_globals is disabled, an attacker can read arbitrary files by supplying a .. in the export_to parameter. The NVD entry scores this as 7.5/10 (HIGH) with network access, low attack complexity,...

Remote file inclusion

PHP remote file inclusion vulnerability in skinshop/standard/2viewbody/bodydefault.php in TECHNOTE 7.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the shopthisskinpath parameter, a different vector than CVE-2008-4138...

Thyme 1.3 Local File Inclusion

| Theme Local File Inclusion / Registerglobals: off | | Version: = 1.3 | | Dork: Thyme 1. © 2006 eXtrovert Software LLC. All rights reserved | | Founded by: cheverokatgmail.com | -------------------------------------------------------------------------------------- Intro: See info...

Thyme 1.3 - 'export_to' Local File Inclusion

| Theme Local File Inclusion / Registerglobals: off | | Version: = 1.3 | | Dork: Thyme 1. © 2006 eXtrovert Software LLC. All rights reserved | | Founded by: cheverokatgmail.com | -------------------------------------------------------------------------------------- Intro: See info...

Thyme <= 1.3 (export_to) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =========================================================== Thyme = 1.3 exportto Local File Inclusion Vulnerability =========================================================== | Theme Local File Inclusion / Registerglobals: off | | Version...

Thyme 1.3 - export_to Local File Inclusion

Thyme 1.3 - exportto Local File Inclusion | Theme Local File Inclusion / Registerglobals: off | | Version: = 1.3 | | Dork: Thyme 1. © 2006 eXtrovert Software LLC. All rights reserved | | Founded by: cheverokatgmail.com |...

CVE-2009-0441

PHP remote file inclusion vulnerability in skinshop/standard/2viewbody/bodydefault.php in TECHNOTE 7.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the shopthisskinpath parameter, a different vector than CVE-2008-4138...

CVE-2009-0441

CVE-2009-0441 describes a PHP remote file inclusion in TECHNOTE 7.2’s skin_shop/standard/2_view_body/body_default.php. The vulnerability occurs when register_globals is enabled and allows an attacker to execute arbitrary PHP code by supplying a URL in the shop_this_skin_path parameter (a differen...

Directory traversal

Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when registerglobals is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the SERVERConfigFile parameter to admin/index.php...

Coppermine Photo Gallery变量内容重写漏洞

Coppermine是用PHP编写的多用途集成Web图形库脚本。 Coppermine Photo Gallery处理用户请求数据时存在漏洞，远程攻击者可能利用此漏洞上传PHP脚本文件从而控制应用系统。 系统的include/init.inc.php脚本在过滤处理全局变量时存在问题，远程攻击者可以据此绕过安全限制上传任意脚本文件实现命令执行。要利用此漏洞需要系统的PHP打开registerglobals选项。 Coppermine Photo Gallery 1.x Coppermine Photo Gallery 临时解决方法：...

Coppermine Photo Gallery 1.4.19 Remote PHP File Upload Vulnerability

No description provided by source. Written By Michael Brooks Special thanks to str0ke! Coppermine Photo gallery - Remote PHP File Upload Affects: v1.4.19 Homepage: http://coppermine-gallery.net/ 5,239,057 downloads from sf.net! For this attack we need registerglobals=on . The problem is that the...

OpenHelpDesk 1.0.100 eval() Code Execution Exploit (meta)

Exploit for unknown platform in category web applications ========================================================= OpenHelpDesk 1.0.100 eval Code Execution Exploit meta ========================================================= $Id: phpeval.rb 5783 2008-10-23 02:43:21Z ramon $ This file is part o...

Coppermine Photo Gallery 1.4.19 Remote PHP File Upload Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Coppermine Photo Gallery 1.4.19 Remote PHP File Upload Vulnerability ==================================================================== Written By Michael Brooks...

Path traversal

Absolute path traversal vulnerability in sendfile.php in web-cp 0.5.7, when registerglobals is enabled, allows remote attackers to read arbitrary files via a full pathname in the filelocation parameter...