iPhotoAlbum 1.1 (header.php) Remote File Include Vulnerability

No description provided by source. iPhotoAlbum v1.1header.phpRemote File Include Vulnerability D.Script: http://sourceforge.net/projects/iphotoalbum/ Discovered by: GloDM = Mahmoodali Homepage: http://www.Tryag.cc V.Code Exploit:Path/lib/static/header.php?setmenu=SheLL Greetz To: Tryag-Team &...

iPhotoAlbum 1.1 (header.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================== iPhotoAlbum 1.1 header.php Remote File Include Vulnerability ============================================================== iPhotoAlbum v1.1header.phpRemote File Include...

CVE-2007-1018: Undefined Security Weakness

PHP remote file inclusion vulnerability in tpl/header.php in VirtualSystem VS-News-System 1.2.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the newsordner parameter. NOTE: the provenance of this information is unknown; the detai...

Drake CMS v0.3.2 < = RFi Vulnerabilities

Drake CMS v0.3.2 = RFi Vulnerabilities Download : http://sourceforge.net/project/showfiles.php?groupid=166901&packageid=192077&releaseid=420104 Script Name : Drake CMS v0.3.2 Coded By : KaRTaL Contact : k4rtalatgmaildotcom V.Code in : pathadminincludesheader.php include$aclassesdir.'menu.php';...

CVE-2006-5263: Undefined Security Weakness

Directory traversal vulnerability in templates/header.php3 in phpMyAgenda 3.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter, as demonstrated by a parameter value naming an Apache HTTP Server log file that apparently...

CVE-2006-5149: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in OpenBiblio before 0.5.2 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the page parameter to shared/help.php or 2 the tab parameter to shared/header.php...

CVE-2006-4849

CVE-2006-4849 is a PHP remote file inclusion vulnerability affecting MobilePublisherPHP 1.5 RC2 and earlier. The root cause is improper handling in header.php that allows an attacker to specify an arbitrary URL in the abspath parameter to execute arbitrary PHP code on the server. Documents indica...

CVE-2006-4877: Undefined Security Weakness

Variable overwrite vulnerability in David Bennett PHP-Post PHPp 1.0 and earlier allows remote attackers to overwrite arbitrary program variables via multiple vectors that use the extract function, as demonstrated by the tableprefix parameter in 1 index.php, 2 profile.php, and 3 header.php...

CVE-2006-4849: Undefined Security Weakness

PHP remote file inclusion vulnerability in header.php in MobilePublisherPHP 1.5 RC2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

CVE-2006-4885: Undefined Security Weakness

PHP remote file inclusion vulnerability in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter in 1 footer.php and 2 header.php. NOTE: the provenance of this information is unknown; the details are obtained from third party...

CVE-2006-4743: Undefined Security Weakness

WordPress 2.0.2 through 2.0.5 allows remote attackers to obtain sensitive information via a direct request for 1 404.php, 2 akismet.php, 3 archive.php, 4 archives.php, 5 attachment.php, 6 blogger.php, 7 comments.php, 8 comments-popup.php, 9 dotclear.php, 10 footer.php, 11 functions.php, 12...

CVE-2006-4637: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in ACGV News 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the PathNews parameter in 1 header.php or 2 news.php. NOTE: portions of these details are obtained from third party information...

ACGV News 0.9.1 (PathNews) Remote File Include Vulnerability

No description provided by source. ERNE ---- ERNEALiZM ---- BU ASK BiTMEZ---- ACGV News v0.9.1 - Remote File Include Vulnerabilities site : http://www.comscripts.com/jump.php?action=script&id=1420 Script : ACGV News v0.9.1 Credits : ERNE Contact : [email protected] and irc.gigachat.net kurdhack...

CVE-2006-4053

PHP remote file inclusion vulnerability in templates/header.php in ME Download System 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the Vb8878b936c2bd8ae0cab parameter...

CVE-2006-4053: Undefined Security Weakness

PHP remote file inclusion vulnerability in templates/header.php in ME Download System 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the Vb8878b936c2bd8ae0cab parameter...

CVE-2006-4052: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Simple Shop 2.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 admin/index.php, 2 admin/adminindex.php, 3 admin/adminglobal.php, 4 admin/login.php, 5 admin/menu.ph...

ME Download System 1.3 - 'header.php' Remote File Inclusion

+-------------------------------------------------------------------- + + ME Download System 1.3 Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: ME Download System 1.3 + Venedor ...........: http://www.ehmig.net/ + Class...

ME Download System 1.3 - header.php Remote File Inclusion

ME Download System 1.3 - header.php Remote File Inclusion +-------------------------------------------------------------------- + + ME Download System 1.3 Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: ME Download System 1.3 ...

ME Download System 1.3 Remote File Inclusion

+-------------------------------------------------------------------- + + ME Download System 1.3 Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: ME Download System 1.3 + Venedor ...........: http://www.ehmig.net/ + Class...

CVE-2006-3911: Undefined Security Weakness

PHP remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the csspath parameter in 1 help.php and 2 setup/header.php...