local file inclusion vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv2

PHP remote file inclusion vulnerability in lib/lcUser.php in LoCal Calendar System 1.1 remote attackers to execute arbitrary PHP code via a URL in the LIBDIR parameter....

1 EDB exploit available

7.5

CVSSv2

** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in local Calendar System 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) TEMPLATE_DIR parameter to (a) showinvoices.php, (b) showmonth.php, (c) showevents.php, (d)...

7.5

CVSSv2

PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences....

1 EDB exploit available

7.5

CVSSv2

Directory traversal vulnerability in index.php in Awesome PHP Mega File Manager 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by...

1 EDB exploit available

4

CVSSv2

NGA ResourceLink 20.0.2.1 allows local file inclusion....

6.5

CVSSv2

Local file inclusion in WebCalendar before 1.2.5....

1 EDB exploit available

5

CVSSv2

Local File Inclusion Vulnerability in mypixs v0.3 wordpress plugin...

7.5

CVSSv2

Tiki Wiki CMS Groupware 5.2 has Local File Inclusion...

5

CVSSv2

GLPI 0.83.7 has Local File Inclusion in common.tabs.php....

1 EDB exploit available

4

CVSSv2

The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters, aka Bug ID CSCva30376....

1 EDB exploit available1 Metasploit module available

1 2 3 4 5 NEXT »