4 matches found
CVE-2008-1069: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in Quantum Game Library 0.7.2c allow remote attackers to execute arbitrary PHP code via a URL in the CONFIGgameroot parameter to 1 serverrequest.php and 2 qlib/smarty.inc.php...
Quantum Game Library 0.7.2c Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ================================================================= Quantum Game Library 0.7.2c Remote File Inclusion Vulnerabilities ================================================================= Name : Quantum Game Library 0.7.2c Multip...
Shadows Rising RPG远程文件包含漏洞
Shadows Rising RPG是一款基于PHP的论坛程序。 Shadows Rising RPG不正确过滤用户提交的URI数据,远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于多个脚本对用户提交的'CONFIGgameroot'参数缺少过滤,提交恶意的远程服务器作为包含对象,可导致以WEB进程权限执行任意PHP代码。 Shadows Rising RPG Shadows Rising RPG 0.0.5b Pre Alpha http://sourceforge.net/projects/shadowsrising/...
CVE-2006-4329: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in Shadows Rising RPG Pre-Alpha 0.0.5b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONFIGgameroot parameter to 1 core/includes/security.inc.php, 2 core/includes/smarty.inc.php, 3 qcms/includes/smarty.inc.php ...