Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

SiteXpress SQL Injection

SiteXpress SQL Injection

[Full-disclosure] Advisory 14/2006: Dotdeb PHP Email Header Injection Vulnerability

ASPintranet SQL Injection

From:	Aesthetico <admin_(at)_majorsecurity.de>
Date:	14.11.2006
Subject:	TOPSTORY BASIC Version 1.0 => Remote File Include Vulnerability

# TOPSTORY BASIC Version 1.0 => Remote File Include Vulnerability
# Script.............. :TOPSTORY
# Discovered By.... : rUnViRuS
# Class.............. : Remote
# Original Advisory : http://sec-area.com
#
# file :- index.php
# bug Code :- include($tst["headerfile"]);