kezzap66345

32 exploits Active since Feb 2007
CVE-2007-4279 EXPLOITDB text WRITEUP
FrontAccounting 1.12 Build 31 - RCE
PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_root parameter.
CVE-2007-1133 EXPLOITDB text WORKING POC
FCRing 1.3 - Remote File Inclusion via s_fuss Parameter
PHP remote file inclusion vulnerability in fcring.php in FCRing 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the s_fuss parameter.
CVE-2008-1696 EXPLOITDB text WORKING POC
DaZPHPNews 0.1-1 - Path Traversal via makepost.php prefixdir Parameter
Directory traversal vulnerability in makepost.php in DaZPHPNews 0.1-1, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the prefixdir parameter.
CVE-2007-2521 EXPLOITDB text WRITEUP
e-gads < 2.2.6 - Remote Code Execution via Locale Parameter
PHP remote file inclusion vulnerability in common.php in E-GADS! before 2.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the locale parameter.
EIP-2026-106320 EXPLOITDB text WORKING POC
Cybershade CMS 0.2b - Remote File Inclusion
CVE-2007-2345 EXPLOITDB text WORKING POC
CodeWand phpBrowse - Remote File Inclusion via include_path Parameter
PHP remote file inclusion vulnerability in include/include_stream.inc.php in CodeWand phpBrowse allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter.
CVE-2007-1986 EXPLOITDB text WORKING POC
barnraiser AROUNDMe 0.7.7 - Remote File Inclusion via Language Path Parameter
Multiple PHP remote file inclusion vulnerabilities in barnraiser AROUNDMe 0.7.7 allow remote attackers to execute arbitrary PHP code via a URL in the (1) language_path_core parameter to inc/core_profile.header.php, the (2) template_path_core parameter to template/barnraiser_01/maint_contact_view.tpl.php, and the (3) template_path parameter to template/barnraiser_01/default.tpl.php. NOTE: this issue might overlap CVE-2006-5533.