Silahsiz Kuvvetler

3 exploits Active since Oct 2006
CVE-2006-5865 EXPLOITDB text WORKING POC
MyAlbum < 3.02 - Remote Code Execution via Language File Inclusion
PHP remote file inclusion vulnerability in language.inc.php in MyAlbum 3.02 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the langs_dir parameter.
CVE-2006-5102 EXPLOITDB text WORKING POC
Newswriter <= 1.42 - Remote File Inclusion via NWCONF_SYSTEM[server_path] Parameter
PHP remote file inclusion vulnerability in include/editfunc.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter SW 1.42 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the NWCONF_SYSTEM[server_path] parameter.
CVE-2006-5148 EXPLOITDB text WORKING POC
Forum82 < 2.5.2b - Remote File Inclusion via Repertorylevel Parameter
Multiple PHP remote file inclusion vulnerabilities in Forum82 2.5.2b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the repertorylevel parameter including scripts in /forum/ including (1) search.php, (2) message.php, (3) member.php, (4) mail.php, (5) lostpassword.php, (6) gesfil.php, (7) forum82lib.php3, and other unspecified scripts.