1169 matches found
CVE-2006-6957
PHP remote file inclusion vulnerability in addons/modmedia/body.php in Docebo 3.0.3 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSwhereframework parameter. NOTE: this issue might be resultant from a global overwrite...
Remote file inclusion
PHP remote file inclusion vulnerability in upload/top.php in Upload-Service 1.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the maindir parameter...
CVE-2007-0497
CVE-2007-0497 describes a PHP remote file inclusion in Upload-Service 1.0. The vulnerability is in upload/top.php when register_globals is enabled, allowing a remote attacker to execute arbitrary PHP code by supplying a URL in the maindir parameter. The CVSS-base score is 6.8 (Medium) with networ...
Upload Service 1.0 - top.php?maindir Remote File Inclusion
Upload Service 1.0 - top.php?maindir Remote File Inclusion ------------------------------------------------------------------------------------ ECHOADV62$2007 Upload Service 1.0 remote file inclusion ------------------------------------------------------------------------------------ Author : Ahm...
Oreon lang/index.php file Parameter Remote File Inclusion
The remote host is running Oreon, a web-based network supervision program based on Nagios. The installation of Oreon on the remote host fails to sanitize input to the 'file' parameter of the 'lang/index.php' script before using it to include PHP code. Regardless of PHP's 'registerglobals' setting...
netvigilance-sa10.txt
netVigilance Security Advisory 10 dtguestbook version 1.0f XSS vulnerability Description: dtguestbook is a fully-featured message board system with admin interface. Due to program flaws it is possible for the remote attacker to conduct XSS attacks. The remote attacker can convince the victim to...
Remote file inclusion
PHP remote file inclusion vulnerability in show.php in LunarPoll, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the PollDir parameter...
CVE-2007-0298
PHP remote file inclusion vulnerability in show.php in LunarPoll, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the PollDir parameter...
CVE-2007-0298
CVE-2007-0298 concerns a PHP remote file inclusion in LunarPoll’s show.php when register_globals is enabled. An attacker could cause arbitrary PHP code execution by supplying a URL in the PollDir parameter. The affected component is LunarPoll’s show.php, targeting the PollDir input; root cause is...
dt_guestbook version 1.0f XSS vulnerability
netVigilance Security Advisory 10 dtguestbook version 1.0f XSS vulnerability Description: dtguestbook is a fully-featured message board system with admin interface. Due to program flaws it is possible for the remote attacker to conduct XSS attacks. The remote attacker can convince the victim to...
L2J Statistik Script <= 0.09 (index.php page) Local File Include Exploit
Exploit for unknown platform in category web applications ======================================================================== L2J Statistik Script = 0.09 index.php page Local File Include Exploit ======================================================================== ? print ' | \ | \ \ / |...
Jinzora Multiple Script include_path Parameter Remote File Inclusion
The remote host is running Jinzora, a web-based media streaming and management system written in PHP. The installation of Jinzora on the remote host fails to sanitize input to the 'includepath' parameter of several scripts before using it in the 'jzBackend.php' script to include PHP code. Provide...
CVE-2006-6801
PHP remote file inclusion vulnerability in misc.php in SH-News 0.93, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the newscfgpath parameter...
CVE-2006-6770
Multiple PHP remote file inclusion vulnerabilities in Jinzora Media Jukebox 2.7 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the includepath parameter in 1 popup.php, 2 rss.php, 3 ajaxrequest.php, and 4 mediabroadcast.php...
CVE-2006-6771
CVE-2006-6771 affects Irokez CMS 0.7.1 and earlier. When register_globals is enabled, remote attackers can craft a URL to set GLOBALS[PTH] parameters to include PHP code, enabling remote code execution. Affected files include (1) scripts/gallery.scr.php (func), (2) scripts/xtextarea.scr.php (spaw...
CVE-2006-6771
Multiple PHP remote file inclusion vulnerabilities in Irokez CMS 0.7.1 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 GLOBALSPTHfunc parameter in a scripts/gallery.scr.php; the 2 GLOBALSPTHspaw parameter in b...
MTCMS <= 2.0 (admin/admin_settings.php) Remote File Include Exploit
No description provided by source. !/usr/bin/perl +------------------------------------------------------------------------------------------- + MTCMS = 2.0 admin/adminsettings.php Remote File Include Exploit...
MTCMS 2.0 - '/admin/admin_settings.php' Remote File Inclusion
!/usr/bin/perl +------------------------------------------------------------------------------------------- + MTCMS + Requirements.......: registerglobals = on +------------------------------------------------------------------------------------------- use Getopt::Long; use URI::Escape; use...
MTCMS <= 2.0 (admin/admin_settings.php) Remote File Include Exploit
Exploit for unknown platform in category web applications =================================================================== MTCMS \n"; print "-h, --host\ttarget host\texample.com\n"; print "-f, --file\tremote file\thttp://evilsite.com/shell.php\n"; print "-d, --dir\tinstall dir\t/mtcms\n"; exit...
CVE-2006-6715
PowerClan 1.14a and earlier is affected by a PHP remote file inclusion in footer.inc.php. The root cause is a user-controllable URL passed via the settings[footer] parameter when register_globals is enabled, allowing remote attackers to execute arbitrary PHP code. This vulnerability can enable co...