A-Blog.txt

1A-Blog Remote File Include BuG FounD by Drago84 Application Affect:2A-Blog Source Code: 3http://prdownloads.sourceforge.net/a-blog/A-BlogV2.rar?download Problem: Soluction: Include in page require "mainfile.php"; Page Vulnerable : menu.php Dir : /navigate/ Exempe Of ExPloit is:...

Polaring.txt

ToXiC Polaring Remote File Include BuG FounD by Drago84 Application Affect: Polaring Remote File Include Source Code: http://sourceforge.net/project/showfiles.php?groupid=150989&packageid=166837 &releaseid=444225 Problem: require$SESSION'dirMain'.'/view/css.php';...

WebNews.txt

ToXiC BuG FounD by Drago84Application Affect: WebNewsSource Code:http://prdownloads.sourceforge.net/web-news/WebNews-1.6.3.zip?usemirror=superb-westProblem: include$contentpage; ?Solution : Declare $contentpagePage Vulnerable : template.php Exempe Of ExPloit...

A-Blog V2 (menu.php) Remote File Include Vulnerability

No description provided by source. ToXiC A-Blog Remote File Include BuG FounD by Drago84 Application Affect:A-Blog Source Code: http://prdownloads.sourceforge.net/a-blog/A-BlogV2.rar?download Problem: ?php include "$navigationstart"; ? ?php include"$navigationmiddle"; ? Soluction: Include in page...

PBLang <= v4.66z (temppath) Remote File Inclusion Exploit

ToXiC Polaring Remote File Include BuG FounD by Drago84 Application Affect: Polaring Remote File Include Source Code: http://sourceforge.net/project/showfiles.php?groupid=150989&packageid=166837&releaseid=444225 Problem: require$SESSION'dirMain'.'/view/css.php';...

A-Blog 2.0 - menu.php Remote File Inclusion

A-Blog 2.0 - menu.php Remote File Inclusion ToXiC A-Blog Remote File Include BuG FounD by Drago84 Application Affect:A-Blog Source Code: http://prdownloads.sourceforge.net/a-blog/A-BlogV2.rar?download Problem: Soluction: Include in page require "mainfile.php"; Page Vulnerable : menu.php Dir :...

Polaring <= 0.04.03 (general.php) Remote File Include Vulnerability

No description provided by source. ToXiC Polaring Remote File Include BuG FounD by Drago84 Application Affect: Polaring Remote File Include Source Code: http://sourceforge.net/project/showfiles.php?groupid=150989&packageid=166837&releaseid=444225 Problem: require$SESSION'dirMain'.'/view/css.php';...

[SA22075] Web-News "content_page" File Inclusion Vulnerability

TITLE: Web-News "contentpage" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA22075 VERIFY ADVISORY: http://secunia.com/advisories/22075/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Web-News 1.x http://secunia.com/product/12104/ DESCRIPTION: Drago84 has...

ZoomStats <= 1.0.2 (mysql.php) Remote File Include Vulnerability

ToXiC BuG FounD by Drago84 Application Affect:ZoomStats Source Code: http://prdownloads.sourceforge.net/zoomstats/ZoomStats-v1.0.2.zip?usemirror=kent Problem: $GLOBALS'lib''db''path' array not declare Solution : $GLOBALS'lib''db''path' Page Vulnerable : mysql.php Dir Page: /libs/dbmax/ Exempe Of...

Web-News <= 1.6.3 (template.php) Remote File Include Vulnerability

No description provided by source. ToXiC BuG FounD by Drago84 Application Affect: WebNews Source Code: http://prdownloads.sourceforge.net/web-news/WebNews-1.6.3.zip?usemirror=superb-west Problem: ? include$contentpage; ? Solution : Declare $contentpage Page Vulnerable : template.php Exempe Of...

ZoomStats 1.0.2 - mysql.php Remote File Inclusion

ZoomStats 1.0.2 - mysql.php Remote File Inclusion ToXiC BuG FounD by Drago84 Application Affect:ZoomStats Source Code: http://prdownloads.sourceforge.net/zoomstats/ZoomStats-v1.0.2.zip?usemirror=kent Problem: $GLOBALS'lib''db''path' array not declare Solution : $GLOBALS'lib''db''path' Page...

[SA22000] Feedsplitter Script Insertion and Local File Inclusion

TITLE: Feedsplitter Script Insertion and Local File Inclusion SECUNIA ADVISORY ID: SA22000 VERIFY ADVISORY: http://secunia.com/advisories/22000/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Exposure of sensitive information, System access WHERE: From remote SOFTWARE: Feedsplitter...

[SA21955] aeDating "dir[inc]" File Inclusion Vulnerabilities

TITLE: aeDating "dirinc" File Inclusion Vulnerabilities SECUNIA ADVISORY ID: SA21955 VERIFY ADVISORY: http://secunia.com/advisories/21955/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: aeDating 4.x http://secunia.com/product/5709/ aeDating 3.x...

CVE-2006-4663

The source code tar archive of the Linux kernel 2.6.16, 2.6.17.11, and possibly other versions specifies weak permissions 0666 and 0777 for certain files and directories, which might allow local users to insert Trojan horse source code that would be used during the next kernel compilation. NOTE:...

CVE-2006-4663

The CVE-2006-4663 entry concerns weak permissions (0666/0777) in the Linux kernel source tarballs for 2.6.16 through 2.6.17.11, potentially allowing a local user to insert Trojan horse source code that could be used when the kernel is next compiled. Primary details from connected documents indica...

CVE-2006-4663

The source code tar archive of the Linux kernel 2.6.16, 2.6.17.11, and possibly other versions specifies weak permissions 0666 and 0777 for certain files and directories, which might allow local users to insert Trojan horse source code that would be used during the next kernel compilation. NOTE:...

CVE-2006-4663

The source code tar archive of the Linux kernel 2.6.16, 2.6.17.11, and possibly other versions specifies weak permissions 0666 and 0777 for certain files and directories, which might allow local users to insert Trojan horse source code that would be used during the next kernel compilation. NOTE:...

[SA21796] photokorn "dir_path" File Inclusion Vulnerabilities

TITLE: photokorn "dirpath" File Inclusion Vulnerabilities SECUNIA ADVISORY ID: SA21796 VERIFY ADVISORY: http://secunia.com/advisories/21796/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: photokorn 1.x http://secunia.com/product/9586/ DESCRIPTION: Some vulnerabilitie...

[SA21807] Fantastic News "CONFIG[script_path]" File Inclusion Vulnerabilities

TITLE: Fantastic News "CONFIGscriptpath" File Inclusion Vulnerabilities SECUNIA ADVISORY ID: SA21807 VERIFY ADVISORY: http://secunia.com/advisories/21807/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Fantastic News 2.x http://secunia.com/product/6254/ DESCRIPTION:...

CVE-2006-4549

CHXO Feedsplitter 2006-01-21 allows remote attackers to read the source code of feedsplitter.php via the showsource function. NOTE: this issue is not a vulnerability in standard distributions, but could be an issue if the source has been modified...