PT-2026-28779

Summary When AUTH TOKEN and ACCESS TOKEN environment variables are not set which is the default out-of-the-box configuration the /bridge HTTP endpoint is completely unauthenticated. Any network-accessible caller can POST a request with an attacker-controlled serverPath and args payload, causing t...

Unrestricted file upload

Unrestricted file upload vulnerability in upload/upload.php in Japanese PHP Gallery Hosting, when Open directory mode is enabled, allows remote attackers to upload and execute arbitrary PHP code via a ServerPath parameter specifying a filename with a double extension. NOTE: some of these details...

CVE-2007-5733

Unrestricted file upload vulnerability in upload/upload.php in Japanese PHP Gallery Hosting, when Open directory mode is enabled, allows remote attackers to upload and execute arbitrary PHP code via a ServerPath parameter specifying a filename with a double extension. NOTE: some of these details...

CVE-2007-5733: Improper Input Validation

Unrestricted file upload vulnerability in upload/upload.php in Japanese PHP Gallery Hosting, when Open directory mode is enabled, allows remote attackers to upload and execute arbitrary PHP code via a ServerPath parameter specifying a filename with a double extension. NOTE: some of these details...

CVE-2007-3315

Multiple PHP remote file inclusion vulnerabilities in YourFreeScreamer 1.0, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the serverPath parameter to bodyTemplate.php in 1 templates/Classic/, 2 templates/Classic Guestbook/, 3...

CVE-2007-3315: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in YourFreeScreamer 1.0, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the serverPath parameter to bodyTemplate.php in 1 templates/Classic/, 2 templates/Classic Guestbook/, 3...

YourFreeScreamer 1.0 (serverPath) Remote File Inclusion Vulnerability

No description provided by source. /////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Title : YourFreeScreamer 1.0 Remote File 脛掳nclude Author : CrackersChild Contact : [email protected] Bug : in...

Remote file inclusion

PHP remote file inclusion vulnerability in templates/2blue/bodyTemplate.php in YourFreeScreamer 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the serverPath parameter...

CVE-2007-3271: Undefined Security Weakness

PHP remote file inclusion vulnerability in templates/2blue/bodyTemplate.php in YourFreeScreamer 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the serverPath parameter...

yfs-rfi.txt

/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Title : YourFreeScreamer 1.0 Remote File İnclude Author : CrackersChild Contact : [email protected] Bug : in bodyTemplate.php " " Down :...

YourFreeScreamer 1.0 (serverPath) Remote File Inclusion Vulnerability

No description provided by source. /////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Title : YourFreeScreamer 1.0 Remote File °nclude Author : CrackersChild Contact : [email protected] Bug : in bodyTemplate.p...

YourFreeScreamer 1.0 (serverPath) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== YourFreeScreamer 1.0 serverPath Remote File Inclusion Vulnerability =====================================================================...

YourFreeScreamer 1.0 - serverPath Remote File Inclusion

YourFreeScreamer 1.0 - serverPath Remote File Inclusion /////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Title : YourFreeScreamer 1.0 Remote File Ä°nclude Author : CrackersChild Contact : [email protected]...

YourFreeScreamer 1.0 - 'serverPath' Remote File Inclusion

/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Title : YourFreeScreamer 1.0 Remote File Ä°nclude Author : CrackersChild Contact : [email protected] Bug : in bodyTemplate.php " " Down :...

PT-2007-1656 · Unknown · Allmyguests

Name of the Vulnerable Software and Affected Versions: AllMyGuests versions 0.3.0 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the AMG serverpath parameter to various PHP files, including "comments.php" and "signin.php", and possibly via a...

PT-2006-5736 · Allmyguests · Allmyguests

Name of the Vulnerable Software and Affected Versions: AllMyGuests versions 0.4.1 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the AMGconfigcfg serverpath parameter in 1 modules/AllMyGuests/signin.php and 2 AllMyGuests/signin.php...

CVE-2005-2155

PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows remote attackers to execute arbitrary code via the serverPath parameter...

CVE-2005-2155: Undefined Security Weakness

PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows remote attackers to execute arbitrary code via the serverPath parameter...