EUVD-2010-1008

Malware in sbrugna...

Rezervi <= 3.0.2 (mail.inc.php) RFI Vulnerability

No description provided by source. Rezervi = 3.0.2 mail.inc.php RFI Vulnerablities http://www.rezervi.com Discovered : r00t.h4x0r r00t.h4x0r!hotmail.com Homepage : !n y0ur m!nd PoC r00t : r00t.h4x0r/include/mail.inc.php?root=Shell 9r33tz : cr4wl3r INDONESIAN HACKER...

REZERVI Belegungsplan und Gästedatenbank 'include/mail.inc.php' Remote File Include Vulnerability

UTILO REZERVI Belegungsplan und Gästedatenbank is prone to a remote file-include vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the...

UTILO REZERVI 'include/mail.inc.php' Remote File Include Vulnerability

UTILO REZERVI is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

REZERVI 3.0.2 (root) Remote Command Execution Exploit

Exploit for php platform in category web applications ===================================================== REZERVI 3.0.2 root Remote Command Execution Exploit ===================================================== !/usr/bin/perl...

Remote file inclusion

PHP remote file inclusion vulnerability in include/mail.inc.php in Rezervi 3.0.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the root parameter, a different vector than CVE-2007-2156...

CVE-2010-0983

CVE-2010-0983 is a PHP remote file inclusion vulnerability in Rezervi 3.0.2 and earlier, exploitable when register_globals is enabled. The issue occurs in include/mail.inc.php, allowing an attacker to execute arbitrary PHP code via a URL provided in the root parameter (different vector than CVE-2...

CVE-2010-0983

PHP remote file inclusion vulnerability in include/mail.inc.php in Rezervi 3.0.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the root parameter, a different vector than CVE-2007-2156...

Rezervi 3.0.2 Remote File Inclusion

Rezervi Homepage : !n y0ur m!nd PoC r00t : r00t.h4x0r/include/mail.inc.php?root=Shell 9r33tz : cr4wl3r INDONESIAN HACKER...

Rezervi <= 3.0.2 (mail.inc.php) RFI Vulnerability

Exploit for unknown platform in category web applications ================================================= Rezervi = 3.0.2 mail.inc.php RFI Vulnerability ================================================= Rezervi = 3.0.2 mail.inc.php RFI Vulnerablities http://www.rezervi.com PoC r00t :...

Rezervi 3.0.2 - mail.inc.php Remote File Inclusion

Rezervi 3.0.2 - mail.inc.php Remote File Inclusion Rezervi Homepage : !n y0ur m!nd PoC r00t : r00t.h4x0r/include/mail.inc.php?root=Shell 9r33tz : cr4wl3r INDONESIAN HACKER...

Rezervi 3.0.2 - &#039;mail.inc.php&#039; Remote File Inclusion

Rezervi Homepage : !n y0ur m!nd PoC r00t : r00t.h4x0r/include/mail.inc.php?root=Shell 9r33tz : cr4wl3r INDONESIAN HACKER...

rezervi27-rfi.txt

------=Part10021926781377.1177148481272 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline App: Rezervi Availability 2.7 Source: http://www.rezervi.com/www/german/download/rezerviV27.zip Author: Arham Muhammad Vulnerable File:...

Rezervi Root远程文件包含漏洞

Rezervi是一款基于PHP的WEB应用程序。 Rezervi不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'root'B参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Rezervi 0.9 目前没有解决方案提供： http://www.rezervi.com/ http://www.example.com/templates/datumVonDatumBis.inc.php?root=Shell...

CVE-2007-2156

Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to 1 datumVonDatumBis.inc.php, 2 footer.inc.php, 3 header.inc.php, and 4 stylesheets.php in templates/; and 5 wochenuebersicht.inc.php, 6...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to 1 datumVonDatumBis.inc.php, 2 footer.inc.php, 3 header.inc.php, and 4 stylesheets.php in templates/; and 5 wochenuebersicht.inc.php, 6...

CVE-2007-2156

Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to 1 datumVonDatumBis.inc.php, 2 footer.inc.php, 3 header.inc.php, and 4 stylesheets.php in templates/; and 5 wochenuebersicht.inc.php, 6...

CVE-2007-2156

Summary of CVE-2007-2156 (initial document): Rezervi Generic 0.9 contains multiple PHP remote file inclusion vulnerabilities. An attacker can trigger PHP code execution by supplying a URL in the root parameter to various scripts under templates/ (datumVonDatumBis.inc.php, footer.inc.php, header.i...

EUVD-2007-2151

Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to 1 datumVonDatumBis.inc.php, 2 footer.inc.php, 3 header.inc.php, and 4 stylesheets.php in templates/; and 5 wochenuebersicht.inc.php, 6...

Rezervi Generic 0.9&#40;root&#41;Remote File Include Vulnerablities

Rezervi Generic 0.9rootRemote File Include Vulnerablities D.Script: http://www.rezervi.com/www/german/download/rezerviGenericV09.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/templates/datumVonDatumBis.inc.php?root=Shell...