arfis

automated Remote File Inclusion search

RFI (0.2): Web Window Manager September 14, 2007

Filed under: RFI — arfis @ 12:46 am

Project Name: Web Window Manager
Project Link: http://sourceforge.net/projects/webwm/
Project DL: http://surfnet.dl.sourceforge.net/sourceforge/webwm/webwm-1.2.70411.1.tar.gz
RFI Info:
File: tmp/webwm-1.2.70411.1.ta/webwm-1.2.70411.1/WebPrograms/UserEdit/UserEdit.php
Line: 5
Vuln Code: require_once($_INC_PATH.”TForm.h.php”);

File: tmp/webwm-1.2.70411.1.ta/webwm-1.2.70411.1/WebPrograms/AddUser/AddUser.php
Line: 5
Vuln Code: require_once($_INC_PATH.”TForm.h.php”);

File: tmp/webwm-1.2.70411.1.ta/webwm-1.2.70411.1/WebPrograms/UserDel/UserDel.php
Line: 5
Vuln Code: require_once($_INC_PATH.”TForm.h.php”);

File: tmp/webwm-1.2.70411.1.ta/webwm-1.2.70411.1/WebPrograms/ListUsers/ListUsers.php
Line: 5
Vuln Code: require_once($_INC_PATH.”TForm.h.php”);

File: tmp/webwm-1.2.70411.1.ta/webwm-1.2.70411.1/PublicWebPrograms/Login/Login.php
Line: 38
Vuln Code: require_once($_INC_PATH.”TWebApplication.h.php”);

File: tmp/webwm-1.2.70411.1.ta/webwm-1.2.70411.1/include/MySQL_includes/TMySQLUnit.h.php
Line: 23
Vuln Code: require_once($_INC_PATH.”TMainUnit.h.php”);

File: tmp/webwm-1.2.70411.1.ta/webwm-1.2.70411.1/include/WM_includes/TWebManager.h.php
Line: 17
Vuln Code: require_once($_INC_PATH.”TJavascript.h.php”);

File: tmp/webwm-1.2.70411.1.ta/webwm-1.2.70411.1/include/WM_includes/TWindow.h.php
Line: 17
Vuln Code: require_once($_INC_PATH.”TContainer.h.php”);

File: tmp/webwm-1.2.70411.1.ta/webwm-1.2.70411.1/include/WM_includes/TSession.h.php
Line: 18
Vuln Code: require_once($_INC_PATH.”TJavascript.h.php”);

File: tmp/webwm-1.2.70411.1.ta/webwm-1.2.70411.1/include/WM_includes/TDesktop.h.php
Line: 18
Vuln Code: require_once($_INC_PATH.”TWebManager.h.php”);;

File: tmp/webwm-1.2.70411.1.ta/webwm-1.2.70411.1/include/WM_includes/TWebApplication.h.php
Line: 17
Vuln Code: require_once($_INC_PATH.”TJavascript.h.php”);

File: tmp/webwm-1.2.70411.1.ta/webwm-1.2.70411.1/include/WM_includes/TApplication.h.php
Line: 18
Vuln Code: require_once($_INC_PATH.”TWebManager.h.php”);;

File: tmp/webwm-1.2.70411.1.ta/webwm-1.2.70411.1/include/User_includes/Tuser.php
Line: 14
Vuln Code: include_once($__USER_INCLUDE.”config.php”);

File: tmp/webwm-1.2.70411.1.ta/webwm-1.2.70411.1/include/FM_includes/FMMySQL.h.php
Line: 2
Vuln Code: include_once($_INC_PATH.”../MySQL_includes/TMySQLUnit.h.php”);

File: tmp/webwm-1.2.70411.1.ta/webwm-1.2.70411.1/include/WM_includes/TTable.h.php
Line: 17
Vuln Code: include_once($_INC_PATH.”TWeb.h.php”);

File: tmp/webwm-1.2.70411.1.ta/webwm-1.2.70411.1/include/WM_includes/TForm.h.php
Line: 17
Vuln Code: include_once($_INC_PATH.”TWeb.h.php”);

File: tmp/webwm-1.2.70411.1.ta/webwm-1.2.70411.1/include/WM_includes/TTableCell.h.php
Line: 17
Vuln Code: include_once($_INC_PATH.”TWeb.h.php”);

File: tmp/webwm-1.2.70411.1.ta/webwm-1.2.70411.1/include/WM_includes/TDiv.h.php
Line: 17
Vuln Code: include_once($_INC_PATH.”TWeb.h.php”);

File: tmp/webwm-1.2.70411.1.ta/webwm-1.2.70411.1/include/WM_includes/TWeb.h.php
Line: 17
Vuln Code: include_once($_INC_PATH.”TContainer.h.php”);

File: tmp/webwm-1.2.70411.1.ta/webwm-1.2.70411.1/include/WM_includes/TWebPage.h.php
Line: 17
Vuln Code: include_once($_INC_PATH.”TWeb.h.php”);

File: tmp/webwm-1.2.70411.1.ta/webwm-1.2.70411.1/include/WM_includes/TInputTable.h.php
Line: 2
Vuln Code: include_once($_INC_PATH.”TTable.h.php”);

File: tmp/webwm-1.2.70411.1.ta/webwm-1.2.70411.1/include/WM_includes/TIframe.h.php
Line: 17
Vuln Code: include_once($_INC_PATH.”TWeb.h.php”);

(found with version 0.2 – 1591 projects processed so far)