k3vin mitnick - Security Researcher - Exploit Intelligence Platform

CVE-2009-0463 EXPLOITDB text WORKING POC

Groone GLinks 2.1 - Remote Code Execution via abspath Parameter

PHP remote file inclusion vulnerability in includes/header.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.

View Code

CVE-2009-0464 EXPLOITDB text WORKING POC

Groone GBook 2.0 - Remote Code Execution via abspath Parameter

PHP remote file inclusion vulnerability in includes/header.php in Groone GBook 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.

View Code

CVE-2008-4673 EXPLOITDB text WORKING POC

Events Calendar 1.1 - Remote Code Execution via path[docroot] or component Parameter

PHP remote file inclusion vulnerability in panel/common/theme/default/header_setup.php in WebBiscuits Software Events Calendar 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the (1) path[docroot] and (2) component parameters.

View Code