EUVD-2007-5084

Malware in sbrugna...

Remote file inclusion

PHP remote file inclusion vulnerability in config.inc.php in Wordsmith 1.0 RC1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2007-5103

Directory traversal vulnerability in config.inc.php in Wordsmith 1.0 RC1, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the path parameter...

CVE-2007-5102

PHP remote file inclusion vulnerability in config.inc.php in Wordsmith 1.0 RC1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

Directory traversal

Directory traversal vulnerability in config.inc.php in Wordsmith 1.0 RC1, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the path parameter...

CVE-2007-5103

The CVE-2007-5103 entry describes a directory traversal in Wordsmith 1.0 RC1’s config.inc.php when register_globals is on. An attacker can craft a .. payload in the _path parameter to cause inclusion and execution of local files. The vulnerability arises from insufficient validation of the path, ...

CVE-2007-5102

PHP remote file inclusion vulnerability in config.inc.php in Wordsmith 1.0 RC1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter...

CVE-2007-5103

Directory traversal vulnerability in config.inc.php in Wordsmith 1.0 RC1, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the path parameter...

wordsmith-rfi.txt

--==+=================== Electronic Security Team www.Yee7.com ====================+==-- --==+ WordSmith 1.0 RC1 config.inc.php Remote File Inclusion +==-- --==+================================================================================+==-- Software: WordSmith 1.0 RC1 SF page:...

Wordsmith 1.1b - 'config.inc.php?_path' Remote File Inclusion

--==+=================== Electronic Security Team www.Yee7.com ====================+==-- --==+ WordSmith 1.0 RC1 config.inc.php Remote File Inclusion +==-- --==+================================================================================+==-- Software: WordSmith 1.0 RC1 SF page:...

Wordsmith 1.1b - config.inc.php?_path Remote File Inclusion

Wordsmith 1.1b - config.inc.php?path Remote File Inclusion --==+=================== Electronic Security Team www.Yee7.com ====================+==-- --==+ WordSmith 1.0 RC1 config.inc.php Remote File Inclusion +==--...