uebimiau-disclose.txt

---- Uebimiau Web-Mail Remote File Reader ... ITDefence.ru Antichat.ru Uebimiau Web-Mail Remote File Reader Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ / / / / / / / / / / / //\ \ / / / / // / // / /\ / // 2007 //// // //\ \ \...

Tikiwiki CMS tiki-listmovies.php文件目录遍历漏洞

BUGTRAQ ID: 27008 TikiWiki是一款网站内容管理系统，基于PHP+ADOdb+Smarty等技术构建。 TikiWiki的实现上存在输入验证漏洞，远程攻击者可能利用此漏洞非授权访问到服务器上任意文件的部分内容。 TikiWiki的tiki-listmovies.php脚本允许用户获得任意文件的前1000个字节。该脚本将movie参数值设置为$movie，删除最后4字节并添加.xml扩展名，然后调用fopen$confFile,'r'打开文件并读取文件的前1000个字节，接着传送这1000字节用作MovieWidth和MovieHeight...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in CARE2X 2G 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 encopyrite.php, 2 vicopyrite.php, and 3 arcopyrite.php in language/ directories; 4 classaccess.php, 5 classdepartment.php, 6...

Remote file inclusion

PHP remote file inclusion vulnerability in lib/smarty/SmartyFU.class.php in Miplex2 Alpha 1 allows remote attackers to execute arbitrary PHP code via a URL in the systemsmartydir parameter...

PT-2007-3781 · Pixaria · Pixaria Gallery

Name of the Vulnerable Software and Affected Versions: Pixaria Gallery versions prior to 1.4.3 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the cfgsysbase path parameter in the resources/includes/class.Smarty.php file. Recommendations: For versions pri...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in HYIP Manager Pro allow remote attackers to execute arbitrary PHP code via a URL in the pluginfile parameter to 1 Smarty.class.php and 2 SmartyCompiler.class.php in inc/libs/; 3 core.displaydebugconsole.php, 4 core.loadplugins.php, 5...

pizaria-rfi.txt

Pixaria Gallery 1.x class.Smarty.php Remote File Include Vulnerability ----------------------------------------------------------------------------------------- scripts : Pixaria Gallery 1.x Discovered By : irvian scripts site : http://pixaria.com/ Thanks To : hitamputih nyubicrew patihack specia...

Pixaria Gallery 1.x (class.Smarty.php) Remote File Include Vulnerability

No description provided by source. Pixaria Gallery 1.x class.Smarty.php Remote File Include Vulnerability ----------------------------------------------------------------------------------------- scripts : Pixaria Gallery 1.x Discovered By : irvian scripts site : http://pixaria.com/ Thanks To :...

Pixaria Gallery 1.x - 'class.Smarty.php' Remote File Inclusion

Pixaria Gallery 1.x class.Smarty.php Remote File Include Vulnerability ----------------------------------------------------------------------------------------- scripts : Pixaria Gallery 1.x Discovered By : irvian scripts site : http://pixaria.com/ Thanks To : hitamputih nyubicrew patihack specia...

CVE-2007-2021

Multiple PHP remote file inclusion vulnerabilities in Pineapple Technologies Lore 1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 langpath parameter to thirdparty/phpmailer/class.phpmailer.php or the 2 getpluginfilepath parameter to...

CVE-2007-2021

CVE-2007-2021: Multiple PHP remote file inclusion flaws in Pineapple Technologies Lore 1 permit remote code execution via crafted URLs in the lang_path parameter of third_party/phpmailer/class.phpmailer.php or the get_plugin_file_path parameter of third_party/smarty/libs/plugins/function.html_che...

CVE-2006-7193

CVE-2006-7193 is a confirmed detail in the connected documents for Smarty 2.6.1. The vulnerability is a PHP remote file inclusion in Smarty’s unit_test/test_cases.php that could allow an attacker to execute arbitrary PHP code via a URL in the SMARTY_DIR parameter. The issue is explicitly describe...

CVE-2006-7193

PHP remote file inclusion vulnerability in unittest/testcases.php in Smarty 2.6.1 allows remote attackers to execute arbitrary PHP code via a URL in the SMARTYDIR parameter. NOTE: this issue is disputed by CVE and a third party because SMARTYDIR is a constant...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in PHPEcho CMS 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 pluginfile parameter to smarty/internals/core.loadpulgins.php or the 2 rootpath parameter to index.php. NOTE: CVE disputes 1 because the inclusion occurs...

PT-2007-1470 · Smarty · Smarty

Name of the Vulnerable Software and Affected Versions: Smarty version 2.6.1 Description: A remote file inclusion issue in the unit test/test cases.php file of Smarty allows remote attackers to execute arbitrary PHP code via a URL in the SMARTY DIR parameter. Recommendations: For Smarty version...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in smarty/smartyclass.php in Shop-Script FREE allow remote attackers to execute arbitrary PHP code via a URL in the 1 smartycompilepath, 2 smartycompilepath, 3 getpluginfilepath, 4 smartydir, and 5 filename parameters. NOTE: this issue might be...

Remot File Include In Shop-SCRIPT FREE

By Hasadya Raed Contact : [email protected] Israel ----------------------------------------- Script : Shop-SCRIPT FREE Dork : "Copyright c 2004 Articus consulting group. All rights reserved" ----------------------------------------- B.Files : smartyclass.php ---------------------------------------...

CVE-2006-7105

PHP remote file inclusion vulnerability in libs/Smarty.class.php in Smarty 2.6.9 allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter. NOTE: in the original disclosure, filename is used in a function definition, so this report is probably incorrect...

CVE-2006-7105

CVE-2006-7105 is a PHP remote file inclusion vulnerability affecting Smarty 2.6.9 (libs/Smarty.class.php). The connected records describe the flaw as allowing remote attackers to execute arbitrary PHP code via a URL in the filename parameter. The note from the NVD entry indicates the original dis...

PT-2007-1383 · Smarty · Smarty

Name of the Vulnerable Software and Affected Versions: Smarty version 2.6.9 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter in the libs/Smarty.class.php file. This is a PHP remote file inclusion issue. Note that the original...