417 matches found
CVE-2007-3221
CVE-2007-3221 is a PHP remote file inclusion in XOOPS XT-Conteudo module; the vulnerable file is admin/spaw/spaw_control.class.php, exploitable via a URL in the spaw_root parameter to execute arbitrary PHP code. The issue is noted as probably a duplicate of CVE-2006-4656. Related entries (CVE-200...
XOOPS Module XT-Conteudo (spaw_root) RFI Vulnerability
No description provided by source. / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title XT-Conteudo XOOPS Module Remote File Inclusion&n...
CVE-2007-3221: Undefined Security Weakness
PHP remote file inclusion vulnerability in admin/spaw/spawcontrol.class.php in the XT-Conteudo module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter. NOTE: this issue is probably a duplicate of CVE-2006-4656...
XOOPS Module XT-Conteudo (spaw_root) RFI Vulnerability
Exploit for unknown platform in category web applications ====================================================== XOOPS Module XT-Conteudo spawroot RFI Vulnerability ====================================================== / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | ||...
XOOPS Module XT-Conteudo - 'spaw_root' Remote File Inclusion
/ \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title XT-Conteudo XOOPS Module Remote File Inclusion Vulnerability Description Content module for XOOPS CMS Vuln Code In /admin/spaw/spawcontrol.class.php...
XT-Stats XT_Counter.PHP远程文件包含漏洞
XT-Stats是一款基于PHP的WEB应用程序。 XT-Stats不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'XTCounter.PHP'脚本对用户提交的'serverbasedir'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 xt-scripts xt-stats 2.4 .b3 目前没有解决方案提供,请关注以下链接： http://www.xt-scripts.com/index.php?p=0...
CVE-2007-0576
PHP remote file inclusion vulnerability in xtcounter.php in Xt-Stats 2.3.x up to 2.4.0.b3 allows remote attackers to execute arbitrary PHP code via a URL in the serverbasedir parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in xtcounter.php in Xt-Stats 2.3.x up to 2.4.0.b3 allows remote attackers to execute arbitrary PHP code via a URL in the serverbasedir parameter...
CVE-2007-0576
PHP remote file inclusion vulnerability in xtcounter.php in Xt-Stats 2.3.x up to 2.4.0.b3 allows remote attackers to execute arbitrary PHP code via a URL in the serverbasedir parameter...
CVE-2007-0576
The CVE-2007-0576 entry describes a PHP remote file inclusion vulnerability in Xt-Stats 2.3.x up to 2.4.0.b3, exploitable via a URL in the server_base_dir parameter of xt_counter.php. This allows remote attackers to execute arbitrary PHP code on vulnerable installations. The affected software is ...
CVE-2007-0576: Undefined Security Weakness
PHP remote file inclusion vulnerability in xtcounter.php in Xt-Stats 2.3.x up to 2.4.0.b3 allows remote attackers to execute arbitrary PHP code via a URL in the serverbasedir parameter...
Xt-Stats v.2.4.0.b3 (server_base_dir) Remote File Include Vulnerability
Download:http://www.xt-scripts.com/index.php?dl=32 Finded by ThE dE@Th Greetz For :AsB-May Team & HaCk.eGy xtcounter.php: require $serverbasedir.'management/sources/counterclass.php'; http://www.site.com/path/xtcounter.php?serverbasedir=evilcode milw0rm.com 2007-01-27...
Xt-Stats v.2.4.0.b3 (server_base_dir) Remote File Include Vulnerability
No description provided by source. Download:http://www.xt-scripts.com/index.php?dl=32 Finded by ThE dE@Th Greetz For :AsB-May Team & HaCk.eGy xtcounter.php: require $serverbasedir.'management/sources/counterclass.php'; http://www.site.com/path/xtcounter.php?serverbasedir=evilcode...
Xt-Stats v.2.4.0.b3 (server_base_dir) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ======================================================================= Xt-Stats v.2.4.0.b3 serverbasedir Remote File Include Vulnerability ======================================================================= Finded by ThE email protect...
Xt-Stats 2.4.0.b3 (server_base_dir) - Remote File Inclusion
Xt-Stats 2.4.0.b3 serverbasedir - Remote File Inclusion Download:http://www.xt-scripts.com/index.php?dl=32 Finded by ThE dE@Th Greetz For :AsB-May Team & HaCk.eGy xtcounter.php: require $serverbasedir.'management/sources/counterclass.php';...
CVE-2006-6747
SQL injection vulnerability in shownews.php in Xt-News 0.1 allows remote attackers to execute arbitrary SQL commands via the idnews parameter...
CVE-2006-6746
Multiple cross-site scripting XSS vulnerabilities in Xt-News 0.1 allow remote attackers to inject arbitrary web script or HTML via the idnews parameter to 1 addcomment.php or 2 shownews.php...
CVE-2006-6747
The CVE-2006-6747 entry describes a SQL injection in Xt-News 0.1’s show_news.php, exploitable via the id_news parameter. A remote attacker can cause arbitrary SQL execution (no authentication required; network access; low attack complexity) with potential partial impact to confidentiality, integr...