CVE-2007-1288

Multiple PHP remote file inclusion vulnerabilities in Webmobo WB News 1.4.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 comment.php, 2 themes.php, 3 directory.php, and 4 sendmsg.php in admin/...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Webmobo WB News 1.4.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 comment.php, 2 themes.php, 3 directory.php, and 4 sendmsg.php in admin/...

CVE-2007-1288

CVE-2007-1288 describes multiple PHP remote file inclusion vulnerabilities in Webmobo WB News 1.4.1 and earlier. An attacker can execute arbitrary PHP code by supplying a URL to the config[installdir] parameter in admin/ pages (comment.php, themes.php, directory.php, sendmsg.php). Root cause: unt...

CVE-2007-1288

Multiple PHP remote file inclusion vulnerabilities in Webmobo WB News 1.4.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the configinstalldir parameter to 1 comment.php, 2 themes.php, 3 directory.php, and 4 sendmsg.php in admin/...

XSS in WBNews < = v1.1.0

it is possible to be executed I cosay arbitrary within the system wbnews in the field "Name" for example scriptalert"Hello DragoN";/script WBNews http://www.webmobo.com/ DragoN [email protected]...