3 results (0.005 seconds)

CVSS: 9.1EPSS: 1%CPEs: 90EXPL: 1

CVE-2008-3555 – Wsn (Multiple Products) - Local File Inclusion / Code Execution

https://notcve.org/view.php?id=CVE-2008-3555

08 Aug 2008 — Directory traversal vulnerability in index.php in (1) WSN Forum 4.1.43 and earlier, (2) Gallery 4.1.30 and earlier, (3) Knowledge Base (WSNKB) 4.1.36 and earlier, (4) Links 4.1.44 and earlier, and possibly (5) Classifieds before 4.1.30 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the TID parameter, as demonstrated by uploading a .jpg file containing PHP sequences. Una vulnerabilidad de salto de directorio en el archivo index.php en (1) WSN Forum versión 4.1.43 y... • https://www.exploit-db.com/exploits/6208 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 10.0EPSS: 3%CPEs: 1EXPL: 0

CVE-2006-7153

https://notcve.org/view.php?id=CVE-2006-7153

07 Mar 2007 — PHP remote file inclusion vulnerability in index.php in MiniBB Forum 2 allows remote attackers to execute arbitrary code via a URL in the pathToFiles parameter. Vulnerabilidad de inclusión remota de archivo en PHP en el index.php del MiniBB Forum 2 permite a atacantes remotos ejecutar código de su elección mediante una URL en el parámetro pathToFiles. • http://securityreason.com/securityalert/2371 •

CVSS: 9.8EPSS: 7%CPEs: 1EXPL: 1

CVE-2006-3690 – Mambo Component MiniBB 1.5a - Remote File Inclusion

https://notcve.org/view.php?id=CVE-2006-3690

18 Jul 2006 — Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter to (1) components/com_minibb.php or (2) components/minibb/index.php. Vulnerabilidades de inclusión remota de archivo en PHP en MiniBB Forum 1.5a y anteriores permite a atacantes remotoso ejecutar código PHP de su elección a través de una URL en el parámetro absolute_path en (1) components/com_minibb.php o (2) components/minibb/index... • https://www.exploit-db.com/exploits/2030 •