EUVD-2007-1453

Malware in sbrugna...

WebCreator远程文件包含漏洞

WebCreator是一款基于PHP的WEB应用程序。 WebCreator不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'moddir'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 WebCreator WebCreator 0.2.5 WebCreator WebCreator 0.2.6-rc3 目前没有解决方案提供： http://webcreator.innoxia.cz/...

[ECHO_ADV_74$2007] WebCreator <= 0.2.6-rc3 (moddir) Remote File Inclusion Vulnerability

ECHOADV74$2007 ------------------------------------------------------------------------------------- ECHOADV74$2007 WebCreator = 0.2.6-rc3 moddir Remote File Inclusion Vulnerability -------------------------------------- ---------------------------------------------- Author : Dedi Dwianto a.k.a...

WebCreator <= 0.2.6-rc3 (moddir) Remote File Inclusion Vulnerability

No description provided by source. \ /\ / | \ | / // / | | \ \ Y / | / / \ /\| /\ / / / / / .OR.ID ECHOADV74$2007 ------------------------------------------------------------------------------------- ECHOADV74$2007 WebCreator = 0.2.6-rc3 moddir Remote File Inclusion Vulnerability...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in WebCreator 0.2.6-rc3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the moddir parameter to 1 content/load.inc.php, 2 config/load.inc.php, 3 http/load.inc.php, and unspecified other files...

CVE-2007-1459

Multiple PHP remote file inclusion vulnerabilities in WebCreator 0.2.6-rc3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the moddir parameter to 1 content/load.inc.php, 2 config/load.inc.php, 3 http/load.inc.php, and unspecified other files...

CVE-2007-1459

Multiple PHP remote file inclusion vulnerabilities in WebCreator 0.2.6-rc3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the moddir parameter to 1 content/load.inc.php, 2 config/load.inc.php, 3 http/load.inc.php, and unspecified other files...

CVE-2007-1459

CVE-2007-1459 affects WebCreator 0.2.6-rc3 and earlier, enabling PHP remote file inclusion via the moddir parameter to content/load.inc.php, config/load.inc.php, http/load.inc.php, and other files. The underlying issue allows remote attackers to execute arbitrary PHP code on affected installation...

CVE-2007-1459: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in WebCreator 0.2.6-rc3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the moddir parameter to 1 content/load.inc.php, 2 config/load.inc.php, 3 http/load.inc.php, and unspecified other files...

Echo Security Advisory 2007.74

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV74$2007 ------------------------------------------------------------------------------------- ECHOADV74$2007 WebCreator ---------------------------------------------------------- Input passed to the "$moddir"...

WebCreator 0.2.6-rc3 - moddir Remote File Inclusion

WebCreator 0.2.6-rc3 - moddir Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV74$2007 ------------------------------------------------------------------------------------- ECHOADV74$2007 WebCreator...

WebCreator <= 0.2.6-rc3 (moddir) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ==================================================================== WebCreator = 0.2.6-rc3 moddir Remote File Inclusion Vulnerability ==================================================================== \ /\ \ / | \ \ | / \ // / | \ | \...

WebCreator &lt;= 0.2.6-rc3 (moddir) Remote File Inclusion Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV74$2007 ------------------------------------------------------------------------------------- ECHOADV74$2007 WebCreator = 0.2.6-rc3 moddir Remote File Inclusion Vulnerability...

WebCreator 0.2.6-rc3 - 'moddir' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV74$2007 ------------------------------------------------------------------------------------- ECHOADV74$2007 WebCreator ---------------------------------------------------------- Input passed to the "$moddir"...