CVE-2007-2774

CVE-2007-2774 affects SunLight CMS 5.3 and involves multiple PHP remote file inclusion vulnerabilities. The root cause is unsafe handling of a URL parameter (root) passed to _connect.php and modules/startup.php, allowing an attacker to cause arbitrary PHP code execution on the server. Reported im...

CVE-2007-2774

Multiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to 1 connect.php or 2 modules/startup.php...

SunLight CMS Root参数多个远程文件包含漏洞

SunLight CMS是一款基于PHP的WEB应用程序。 SunLight CMS不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'root'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 SunLight CMS 5.3 目前没有解决方案提供： http://sunlight.profitux.cz/ http://www.example.com/path/modules/startup.php?root=Sh3LL Script...

sunlight-rfi.txt

SunLight CMS 5.3 = Remote File Inclusion Vulnerability Dork:""cms SunLight 5.2" Dork2:http://search.seznam.cz/searchScreen?w="cms+SunLight+5.2"&mod=f Vuln Code ERROR1:connect.php /-----vlozeni pristupovych dat-----/ include$root."access.php"; RFI CODE BUG1:...

PT-2007-4088

Name of the Vulnerable Software and Affected Versions SunLight CMS version 5.3 Description The issue allows remote attackers to execute arbitrary PHP code. This can be achieved by providing a URL in the root parameter to specific PHP files, such as connect.php or modules/startup.php...

SunLight CMS 5.3 (root) Remote File Inclusion Vulnerabilities

No description provided by source. SunLight CMS 5.3 = Remote File Inclusion Vulnerability Dork:""cms SunLight 5.2" Dork2:http://search.seznam.cz/searchScreen?w="cms+SunLight+5.2"&mod=f Vuln Code ERROR1:connect.php /-----vlozeni pristupovych dat-----/ include$root."access.php"; RFI CODE BUG1:...

SunLight CMS 5.3 (root) Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= SunLight CMS 5.3 root Remote File Inclusion Vulnerabilities ============================================================= SunLight CMS 5.3 = Remote File Inclusion Vulnerability...

SunLight CMS 5.3 - root Remote File Inclusion

SunLight CMS 5.3 - root Remote File Inclusion SunLight CMS 5.3 = Remote File Inclusion Vulnerability Dork:""cms SunLight 5.2" Dork2:http://search.seznam.cz/searchScreen?w="cms+SunLight+5.2"&mod=f Vuln Code ERROR1:connect.php /-----vlozeni pristupovych dat-----/ include$root."access.php"; RFI CODE...

SunLight CMS 5.3 - 'root' Remote File Inclusion

SunLight CMS 5.3 = Remote File Inclusion Vulnerability Dork:""cms SunLight 5.2" Dork2:http://search.seznam.cz/searchScreen?w="cms+SunLight+5.2"&mod=f Vuln Code ERROR1:connect.php /-----vlozeni pristupovych dat-----/ include$root."access.php"; RFI CODE BUG1:...