21 matches found
Fantastic News <= 2.1.3 (script_path) Remote File Include Vulnerability
No description provided by source. ============================================================================================== Fantastic News = v2.1.3 CONFIGscriptpath Remote File Inclusion Exploit ===============================================================================================...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in SnippetMaster 2.2.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 SESSIONSCRIPTPATH parameter to includes/vars.inc.php and the 2 gpcltarlibdir parameter to...
CVE-2009-0530
Multiple PHP remote file inclusion vulnerabilities in SnippetMaster 2.2.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 SESSIONSCRIPTPATH parameter to includes/vars.inc.php and the 2 gpcltarlibdir parameter to...
CVE-2009-0530: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in SnippetMaster 2.2.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 SESSIONSCRIPTPATH parameter to includes/vars.inc.php and the 2 gpcltarlibdir parameter to...
Apartment Search Script (RFU/XSS) Multiple Remote Vulnerabilities
No description provided by source. Apartment Search Script Multiple Remote Vuln. Remote File Upload & XSS ---------------------------------------------------------- Discovered By: ZoRLu Date: 02.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI...
openEngine 2.0 beta2 Remote File Inclusion Vulnerability
No description provided by source. Author : By CrackersChild Contact: [email protected] Greetz : str0ke & All My Friends Script : openEngine 2. 0 beta2 Remote File include Vulnerable Download :http://downloads.sourceforge.net/openengine/openengine20beta2.zip?modtime=1203083918&bigmirror=0...
CVE-2008-3710: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 scriptpath parameter to a options.php and the 2 langcode parameter to b copyvip.php and c processeditboard.php in...
CVE-2008-3707: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in CyBoards PHP Lite 1.21 allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to 1 flatread.php, 2 post.php, 3 processpost.php, 4 processsearch.php, 5 forum.php, 6 processsubscribe.php, 7 read.php, 8...
CVE-2007-1983
PHP remote file inclusion vulnerability in include/defaultheader.php in Cyboards PHP Lite 1.21 allows remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter, a different vector than CVE-2006-2871...
CVE-2007-1983: Undefined Security Weakness
PHP remote file inclusion vulnerability in include/defaultheader.php in Cyboards PHP Lite 1.21 allows remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter, a different vector than CVE-2006-2871...
CyBoards PHP Lite 1.21 (script_path) Remote File Include Exploit
Exploit for unknown platform in category web applications ================================================================ CyBoards PHP Lite 1.21 scriptpath Remote File Include Exploit ================================================================ !/usr/bin/perl CyBoards PHP Lite 1.21 scriptpat...
Limbo CMS Module event 1.0 - Remote File Inclusion
Limbo CMS Module event 1.0 - Remote File Inclusion ----------------------------------------------- Limbo CMS event module lmabsolutepath Remote File Include Vulnerabilities ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code:...
PhpbbXtra 2.0 - 'phpbb_root_path' Remote File Inclusion
----------------------------------------------- PhpbbXtra v2.0 phpbbrootpath Remote File Include Vulnerability ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: include$phpbbrootpath . 'includes/bbcode.'.$phpEx;...
CVE-2006-4823: Undefined Security Weakness
PHP remote file inclusion vulnerability in scripts/newspage.php in Reamday Enterprises Magic News Pro 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter...
Shadowed Portal 5.599 - root Remote File Inclusion
Shadowed Portal 5.599 - root Remote File Inclusion ====================== C Y B E R - W A R R I O R T I M ====================== +Shadowed Portal 5.599 root Remote File Include Vulnerability ============================================================================== +Author: madhacker turkish...
phpAtm <= 1.21 (include_location) Remote File Include Vulnerabilities
phpAtm = v1.21 includelocation Remote File Inclusion Exploit Level : Dangerous Download : http://phpatm.free.fr/ Version : v1.21 Found By: KinSize MHG Security Team Code : include$includelocation.'include/conf.php'; exploit:...
CVE-2006-4285: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in news.php in Fantastic News 2.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGscriptpath parameter. NOTE: it was later reported that 2.1.5 is also affected...
Fantastic News 2.1.3 - script_path Remote File Inclusion
Fantastic News 2.1.3 - scriptpath Remote File Inclusion ============================================================================================== Fantastic News = v2.1.3 CONFIGscriptpath Remote File Inclusion Exploit...
CVE-2006-2871: Undefined Security Weakness
PHP remote file inclusion vulnerability in include/common.php in CyBoards PHP Lite 1.25 allows remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter. NOTE: CVE disputes this issue, since $scriptpath is set to a constant value...
Remote file inclusion
PHP remote file inclusion vulnerability in archive.php in Fantastic News 2.1.2 allows remote attackers to include arbitrary files via the CONFIGscriptpath variable. NOTE: 2.1.4 was also reported to be vulnerable...