MyFusion 6b Local File Inclusion

┌┌─────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └─────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable...

Tribiq CMS 5.0.12c (XSS/LFI) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ Tribiq CMS 5.0.12c XSS/LFI Multiple Remote Vulnerabilities ============================================================...

LightOpenCMS 0.1 (smarty.php cwd) Local File Inclusion Vulnerability

No description provided by source. LightOpenCMS 0.1 smarty.php cwd Local File Inclusion Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://sourceforge.net/project/showfiles.php?groupid=251474...

LightOpenCMS 0.1 - smarty.php?cwd Local File Inclusion

LightOpenCMS 0.1 - smarty.php?cwd Local File Inclusion LightOpenCMS 0.1 smarty.php cwd Local File Inclusion Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download:...

CVE-2009-2182: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSgcampsiteDir parameter to 1 adpopup.php, 2 camphtml.php, 3 initcontent.php, 4 logout.php, 5 menu.php, and 6 set-author.php in admin-files/; 7...

CVE-2009-2183: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin-files/ad.php in Campsite 3.3.0 RC1 allows remote attackers to read and possibly execute arbitrary local files via a .. dot dot in the GLOBALSgcampsiteDir parameter...

Campsite 3.3.0 RC1 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= Campsite 3.3.0 RC1 Multiple Remote File Inclusion Vulnerabilities =================================================================...

XOOPS <= 2.3.3 Remote File Disclosure Vulnerability (.htaccess)

No description provided by source. ======================================================================== XOOPS = 2.3.3 Remote Arbitrary File Retrieval ======================================================================== Affected Software : XOOPS = 2.3.3 Author : Luca "daath" De Fulgentis -...

CVE-2009-2037

Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 GLOBALSSKIN parameter to index.php and the 2 skin...

Yogurt 0.3 SQL Injection / XSS

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Name : Yogurt Site : http://sourceforge.net/projects/yogurt/...

School Data Navigator (page) Local/Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== School Data Navigator page Local/Remote File Inclusion Vulnerability ======================================================================...

School Data Navigator - page LocalRemote File Inclusion

School Data Navigator - page LocalRemote File Inclusion ---------------------------------------------------------------------------------------------------- Name : School Data Navigator Site : http://sourceforge.net/projects/school-data-nav/ Down : http://216.92.6.173/datanavigator/appandreadme.z...

UBUNTU-CVE-2009-1960

inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via the configcascademaindefault parameter to doku.php. NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp://...

DEBIAN-CVE-2009-1960

inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via the configcascademaindefault parameter to doku.php. NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp://...

CVE-2009-1946

CVE-2009-1946 is a PHP remote file inclusion vulnerability affecting AdaptBB 1.0. When register_globals is enabled, an attacker can craft a URL in the forumspath parameter of latestposts.php to cause arbitrary PHP code execution on the server. The vulnerability is documented in multiple sources (...

CVE-2009-1936: Improper Limitation of a Pathname to a Restricted Directory

functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass a protection mechanism to conduct remote file inclusion and directory traversal attacks, execute arbitrary PHP code, or read arbitrar...

Podcast Generator 1.2 - GLOBALS[] Multiple Vulnerabilities

Podcast Generator 1.2 - GLOBALS Multiple Vulnerabilities ++ | Podcast Generator RFI | | | magicquotesgpc=off -- LFI | +-------------------------+-----------------------------------------------------------+ | delete.php?GLOBALSamilogged=true&file&GLOBALSabsoluteurl= | |...

Podcast Generator 1.2 - 'GLOBALS[]' Multiple Vulnerabilities

++ | Podcast Generator RFI | | | magicquotesgpc=off -- LFI | +-------------------------+-----------------------------------------------------------+ | delete.php?GLOBALSamilogged=true&file&GLOBALSabsoluteurl= | | admin.php?p=admin&GLOBALSabsoluteurl= | |...

cpCommerce 1.2.x File Inclusion

!/usr/bin/perl cpCommerce 1.2.x GLOBALSprefix Arbitrary File Inclusion Exploit by staker mail: stakerathotmaildotit url: http://cpcommerce.cpradio.org it works with registerglobals=on if you wanna carry out a LFI - mq=off short explanation: cpCommerce contains one flaw that allows an attacker to...

cpCommerce 1.2.x GLOBALS[prefix] Arbitrary File Inclusion Exploit

Exploit for unknown platform in category web applications ================================================================= cpCommerce 1.2.x GLOBALSprefix Arbitrary File Inclusion Exploit ================================================================= !/usr/bin/perl cpCommerce 1.2.x GLOBALSpref...