Portail Web PHP 2.5.1.1 - Multiple Inclusion Vulnerabilities

Portail Web Php = 2.5.1.1 Multiple Remote/Local File Inclusion Vulnerabilities http://surfnet.dl.sourceforge.net/sourceforge/portail-web-php/PwP2.5.1.1.rar POC : I- Remote File Inclusion /PwP2.5.1.1/template/Vert/index.php?sitepath=http://localhost/020.txt...

Portail Web Php <= 2.5.1.1 Multiple Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= Portail Web Php = 2.5.1.1 Multiple Inclusion Vulnerabilities ============================================================= Portail Web Php = 2.5.1.1 Multiple Remote/Local File...

CVE-2008-0645

Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter to 1 config/conf-activation.php, 2 menu/item.php, and 3 modules/confmodules.php in admin/system/; and 4 system/login.php. NOTE: th...

CVE-2008-0645

Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter to 1 config/conf-activation.php, 2 menu/item.php, and 3 modules/confmodules.php in admin/system/; and 4 system/login.php. NOTE: th...

CVE-2008-0645

CVE-2008-0645 affects Portail Web Php 2.5.1.1. It describes multiple PHP remote file inclusion vulnerabilities that let an attacker execute arbitrary PHP code via a URL in the site_path parameter to (1) config/conf-activation.php, (2) menu/item.php, (3) modules/conf_modules.php in admin/system/, ...

Portail Web PHP 2.5.1 - conf_modules.php Remote File Inclusion

Portail Web PHP 2.5.1 - confmodules.php Remote File Inclusion source: https://www.securityfocus.com/bid/27616/info Portail Web Php is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker t...

Portail Web PHP 2.5.1 - login.php Remote File Inclusion

Portail Web PHP 2.5.1 - login.php Remote File Inclusion source: https://www.securityfocus.com/bid/27616/info Portail Web Php is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...

Portail Web PHP 2.5.1 - 'item.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/27616/info Portail Web Php is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...

CVE-2007-0700

CVE-2007-0700 affects Guernion Sylvain Portail Web Php (PwP) where a directory traversal vulnerability in index.php allows remote attackers to read arbitrary files via a ".." sequence in the page parameter. The NVD entry notes a later report for version 2.5.1.1; CVSS v2 base score is 5.0 (MEDIUM)...

Zen Cart password_forgotten.php admin_email Parameter SQL Injection

The installed version of Zen Cart does not validate input to the 'adminemail' parameter of the 'admin/passwordforgotten.php' script before using it in a database query. Regardless of PHP's 'magicquotesgpc' setting, an attacker can leverage this issue to manipulate SQL queries, possibly gaining th...