EUVD-2007-1418

Malware in sbrugna...

softnews-rfi.txt

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : SoftNews Media Group Dork : "Copyright © 2004,2006 SoftNews Media Group" Greetz : Only To Security Focus ------------------------------------ B.Files : init.php editnews.php ----------------------------------...

CVE-2007-1424

Multiple PHP remote file inclusion vulnerabilities in Softnews Media Group DataLife Engine allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to 1 init.php and 2 Ajax/editnews.php. NOTE: some of these details are obtained from third party information...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Softnews Media Group DataLife Engine allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to 1 init.php and 2 Ajax/editnews.php. NOTE: some of these details are obtained from third party information...

CVE-2007-1424

Multiple PHP remote file inclusion vulnerabilities in Softnews Media Group DataLife Engine allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to 1 init.php and 2 Ajax/editnews.php. NOTE: some of these details are obtained from third party information...

CVE-2007-1424

CVE-2007-1424 concerns Softnews Media Group DataLife Engine. It describes multiple PHP remote file inclusion vulnerabilities that allow an attacker to execute arbitrary PHP code via a URL supplied to the root_dir parameter in init.php and Ajax/editnews.php. The observed impact is arbitrary code e...

SoftNews 4.1/5.5 - '/engine/init.php?root_dir' Remote File Inclusion

source: https://www.securityfocus.com/bid/22913/info DataLife Engine is prone to multiple remote file-include vulnerabilities. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may...

Remote File Include In Script SoftNews Media Group

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : SoftNews Media Group Dork : "Copyright © 2004,2006 SoftNews Media Group" Greetz : Only To Security Focus ------------------------------------ B.Files : init.php editnews.php ----------------------------------...

advisory DATALIFE engine

------------------------------------------------ / / DataLife Engine v.3.7 SoftNews Media Group advisory Программный продукт : DataLife Engine v.3.7 SoftNews Media Group Текущее состояние : UNPATCHED Найдена : LTK Дата написания : 29nd March, 2006 Тестировалось : ; Детали : Раскрытие установочног...