Softerra Time-Assistant 6.2 - 'inc_dir' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV80$2007 ----------------------------------------------------------------------------------------- ECHOADV80$2007 Softerra Time-Assistant = 6.2 incdir Remote File Inclusion Vulnerability...

[ECHO_ADV_78$2007] C-Arbre <= 0.6PR7 (root_path) Remote File Inclusion Vulnerability

ECHOADV78$2007 ----------------------------------------------------------------------------------------- ECHOADV78$2007 C-Arbre = 0.6PR7 rootpath Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran Addahro...

PHP会话数据反序列化代码执行漏洞

PHP是一款广泛使用的WEB开发脚本语言。 PHP会话数据反序列化存在问题，远程攻击者可利用此漏洞以应用程序权限执行任意指令。 当registerglobals激活时，会话数据反序列化可以覆盖任意全局变量，包括SESSION数组。特殊的实现可导致任意代码执行。 PHP PHP 5.1.6 PHP PHP 5.1.5 PHP PHP 5.1.4 PHP PHP 5.1.3 PHP PHP 5.1.3 PHP PHP 5.1.2 PHP PHP 5.1.1 PHP PHP 5.1 PHP PHP 5.0.5 PHP PHP 5.0.4 PHP PHP 5.0.3 + Trustix Secu...

CVE-2007-1701

Technical details for CVE-2007-1701 are not publicly provided in the supplied documents. The materials reference PHP-related advisories and multiple PHP issues but do not describe affected versions, root cause, impact, or remediation for this specific CVE. Monitor for updates.

C-Arbre 0.6PR7 - 'ROOT_PATH' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV78$2007 ----------------------------------------------------------------------------------------- ECHOADV78$2007 C-Arbre = 0.6PR7 rootpath Remote File Inclusion Vulnerability...

C-Arbre <= 0.6PR7 (root_path) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= C-Arbre = 0.6PR7 rootpath Remote File Inclusion Vulnerability ================================================================= \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / |...

C-Arbre 0.6PR7 - ROOT_PATH Remote File Inclusion

C-Arbre 0.6PR7 - ROOTPATH Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV78$2007 ----------------------------------------------------------------------------------------- ECHOADV78$2007 C-Arbre = 0.6PR7 rootpath Remote File Inclusion...

CVE-2007-1623

Multiple cross-site scripting XSS vulnerabilities in realGuestbook 5.01, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 bgcolor1, 2 fsmenu, 3 fcmenu, 4 ffmenu, 5 bgcolor2, 6 fsnormal, 7 fcnormal, and 8 ffnormal parameters to...

CVE-2007-1623

Multiple cross-site scripting XSS vulnerabilities in realGuestbook 5.01, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via the 1 bgcolor1, 2 fsmenu, 3 fcmenu, 4 ffmenu, 5 bgcolor2, 6 fsnormal, 7 fcnormal, and 8 ffnormal parameters to...

CVE-2007-1628

Multiple PHP remote file inclusion vulnerabilities in Study planner Studiewijzer 0.15 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the SPLCFGdirroot parameter to 1 service.alert.inc.php or 2 settings.ses.php in inc/; 3...

CVE-2007-1628

CVE-2007-1628 involves multiple PHP remote file inclusion vulnerabilities in Study planner (Studiewijzer) 0.15 and earlier. When register_globals is enabled, an attacker can execute arbitrary PHP code by supplying a URL in the SPL_CFG[dirroot] parameter to various files (e.g., service.alert.inc.p...

MOPB-26-2007:PHP mb_parse_str&#40;&#41; register_globals Activation Vulnerability

Summary When the mbparsestr function, which is the multibyte variant of the parsestr function, is called with only one parameter and is interrupted by for example a memorylimit violation the registerglobals directive will get internally activated during the process and not deactivated. Therefore...

mb_parse_str&#40;&#41; exceptional conditions protection bypass

Exceptional conditions during function invocation may lead to enabling registerglobals...

CVE-2007-1583

The mbparsestr function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal registerglobals flag and does not disable it in certain cases when a script terminates, which allows remote attackers to invoke available PHP scripts with registerglobals functionality that is not...

CVE-2007-1583

The mbparsestr function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal registerglobals flag and does not disable it in certain cases when a script terminates, which allows remote attackers to invoke available PHP scripts with registerglobals functionality that is not...

CVE-2007-1583

CVE-2007-1583 is a PHP mbstring issue. mb_parse_str() could force enablement of register_globals, leading to global variable injection via a script and potentially exposing or altering data. The description notes remote attackers could exploit this in a way that is not detectable by affected scri...

CVE-2007-1571

PHP remote file inclusion vulnerability in includes/base.php in Radical Designs Activist Mobilization Platform AMP 3.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter...

CVE-2007-1571

CVE-2007-1571 | Affected: Radical Designs Activist Mobilization Platform (AMP) 3.2. The vulnerability is in includes/base.php and is a PHP Remote File Inclusion . When register_globals is enabled, an attacker can supply a URL in the base_path parameter to cause the application to include remote P...

study planner (studiewijzer) 0.15 - Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV77$2007 ----------------------------------------------------------------------------------------- ECHOADV77$2007 Study planner Studiewijzer = 0.15 Remote File Inclusion Vulnerability...

study planner (studiewijzer) 0.15 - Remote File Inclusion

study planner studiewijzer 0.15 - Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV77$2007 ----------------------------------------------------------------------------------------- ECHOADV77$2007 Study planner Studiewijzer = 0.15 Remote...