EUVD-2008-6456

Malware in sbrugna...

Remote file inclusion

PHP remote file inclusion vulnerability in slideshowuploadvideo.content.php in SharedLog, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSrootdir parameter...

CVE-2008-6486

PHP remote file inclusion vulnerability in slideshowuploadvideo.content.php in SharedLog, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSrootdir parameter...

CVE-2008-6486

CVE-2008-6486 refers to a PHP remote file inclusion in SharedLog’s slideshow_uploadvideo.content.php when register_globals is enabled, allowing an attacker to execute arbitrary PHP code via a URL supplied to GLOBALS[root_dir]. The connected records corroborate the vulnerability description across...

CVE-2008-6486

PHP remote file inclusion vulnerability in slideshowuploadvideo.content.php in SharedLog, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSrootdir parameter...

sharedlog CMS Remote File Includes

I have discovered a remote file include vulnerability in the sharedlog Content management system. http://www.shatm.com/ http://sourceforge.net/projects/sharedlog/ Vulnerable code segment: requireonce$GLOBALS'rootdir'.'classes/!class.memcache.inc.php'; Line 5 of slideshowuploadvideo.content.php As...