Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parameter to (1) index.php
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- 36 on Exploit-DB
Summary
Multiple PHP remote file inclusion vulnerabilities in ComScripts TEAM Quick Classifieds 1.0 via the DOCUMENT_ROOT parameter to (1) index.php3, (2) locate.php3, (3) search_results.php3, (4) classifieds/index.php3, and (5) classifieds/view.php3; (6) index.php3, (7) manager.php3, (8) pass.php3, (9) remember.php3 (10) sign-up.php3, (11) update.php3, (12) userSet.php3, and (13) verify.php3 in controlcenter/; (14) alterCats.php3, (15) alterFeatured.php3, (16) alterHomepage.php3, (17) alterNews.php3, (18) alterTheme.php3, (19) color_help.php3, (20) createdb.php3, (21) createFeatured.php3, (22) createHomepage.php3, (23) createL.php3, (24) createM.php3, (25) createNews.php3, (26) createP.php3, (27) createS.php3, (28) createT.php3, (29) index.php3, (30) mailadmin.php3, and (31) setUp.php3 in controlpannel/; (32) include/sendit.php3 and (33) include/sendit2.php3; and possibly (34) include/adminHead.inc, (35) include/usersHead.inc, and (36) style/default.scheme.inc.
Timeline
- Public exploit on Exploit-DB
EDB-31479, EDB-31495, EDB-31503, EDB-31482, EDB-31483, EDB-31484, EDB-31485, EDB-31486, EDB-31487, EDB-31488, EDB-31489, EDB-31490, EDB-31491, EDB-31492, EDB-31493, EDB-31494, EDB-31496, EDB-31497, EDB-31498, EDB-31499, EDB-31500, EDB-31501, EDB-31502, EDB-31504, EDB-31505, EDB-31506, EDB-31507, EDB-31508, EDB-31509, EDB-31512, EDB-31510, EDB-31511, EDB-31513, EDB-31480, EDB-31481, EDB-31514
- CVE published
- Record last updated
Affected versions
- n/a n/a
Version range not reported
References 39
exchange.xforce.ibmcloud.com
securityfocus.com
Exploit-DB
- Exploit EDB-31479
- Exploit EDB-31495
- Exploit EDB-31503
- Exploit EDB-31482
- Exploit EDB-31483
- Exploit EDB-31484
- Exploit EDB-31485
- Exploit EDB-31486
- Exploit EDB-31487
- Exploit EDB-31488
- Exploit EDB-31489
- Exploit EDB-31490
- Exploit EDB-31491
- Exploit EDB-31492
- Exploit EDB-31493
- Exploit EDB-31494
- Exploit EDB-31496
- Exploit EDB-31497
- Exploit EDB-31498
- Exploit EDB-31499
- Exploit EDB-31500
- Exploit EDB-31501
- Exploit EDB-31502
- Exploit EDB-31504
- Exploit EDB-31505
- Exploit EDB-31506
- Exploit EDB-31507
- Exploit EDB-31508
- Exploit EDB-31509
- Exploit EDB-31512
- Exploit EDB-31510
- Exploit EDB-31511
- Exploit EDB-31513
- Exploit EDB-31480
- Exploit EDB-31481
- Exploit EDB-31514