EUVD-2007-4218

Malware in sbrugna...

VietPHP _functions.php dirpath Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/25226/info VietPHP is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...

VietPHP index.php language Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/25226/info VietPHP is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...

VietPHP admin/index.php language Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/25226/info VietPHP is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...

VietPHP远程文件包含漏洞

VietPHP是一款基于PHP的WEB应用程序。 VietPHP不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以应用程序进程权限执行任意命令。 问题是由于脚本对用户提交的WEB参数缺少过滤，提交远程服务器上的任意PHP文件作为包含对象，可导致以WEB权限执行任意PHP代码。 VietPHP 目前没有解决方案提供： http://www.vietphp.info/ http://www.example.com/path/admin/index.php?language=Sh3LL http://www.example.com/index.php??language=Sh3LL...

CVE-2007-4235

Multiple PHP remote file inclusion vulnerabilities in VietPHP allow remote attackers to execute arbitrary PHP code via a URL in 1 the dirpath parameter to a functions.php, or 2 the language parameter to b admin/index.php or c index.php...

CVE-2007-4235

The CVE-2007-4235 entry concerns VietPHP with multiple PHP remote file inclusion vulnerabilities. Specifically, remote code execution is possible via user-supplied URLs in (1) dirpath to _functions.php, or (2) language to admin/index.php or index.php. The underlying issue is uncontrolled/unsaniti...

CVE-2007-4235

Multiple PHP remote file inclusion vulnerabilities in VietPHP allow remote attackers to execute arbitrary PHP code via a URL in 1 the dirpath parameter to a functions.php, or 2 the language parameter to b admin/index.php or c index.php...

vietphp-rfi.txt

VietPHP Remote File Inclusion Vulnerbility Vuln. code : in: admin/index.php /index.php /functions DoRk: Powered by VietPHP Exploit: www.server.com/path/admin/index.php?language=Sh3LL www.server.com/index.php??language=Sh3LL www.server.com/functions.php?dirpath=Sh3LL...

VietPHP Remote File Inclusion Vulnerbility

VietPHP Remote File Inclusion Vulnerbility Vuln. code : in: admin/index.php /index.php /functions DoRk: Powered by VietPHP Exploit: www.server.com/path/admin/index.php?language=Sh3LL www.server.com/index.php??language=Sh3LL www.server.com/functions.php?dirpath=Sh3LL...

VietPHP - _functions.php?dirpath Remote File Inclusion

VietPHP - functions.php?dirpath Remote File Inclusion source: https://www.securityfocus.com/bid/25226/info VietPHP is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...

VietPHP - '/admin/index.php?language' Remote File Inclusion

source: https://www.securityfocus.com/bid/25226/info VietPHP is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

VietPHP - 'index.php?language' Remote File Inclusion

source: https://www.securityfocus.com/bid/25226/info VietPHP is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

VietPHP - index.php?language Remote File Inclusion

VietPHP - index.php?language Remote File Inclusion source: https://www.securityfocus.com/bid/25226/info VietPHP is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...

VietPHP - adminindex.php?language Remote File Inclusion

VietPHP - adminindex.php?language Remote File Inclusion source: https://www.securityfocus.com/bid/25226/info VietPHP is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise t...

VietPHP - '_functions.php?dirpath' Remote File Inclusion

source: https://www.securityfocus.com/bid/25226/info VietPHP is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...