884 matches found
torrentflux 2.2 - Arbitrary File Create ExecuteDelete
torrentflux 2.2 - Arbitrary File Create ExecuteDelete r0ut3r Presents... Another r0ut3r discovery! TorrentFlux 2.2 Arbitrary File Creation/Overwrite/Deletion & Command Execution Vulnerablities Software: TorrentFlux 2.2 Vendor: http://www.torrentflux.com/ Released: 2006/11/15...
CVE-2006-5588: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in CMS Faethon 2.0 Ultimate and earlier, when registerglobals and magicquotesgpc are enabled, allow remote attackers to execute arbitrary PHP code via a URL in the mainpath parameter to 1 includes/rss-reader.php or 2 admin/config.php, different...
Php League <= 0.81 (config.php) Remote File Include Exploit
No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titlePhpLeague 0.81 Remote File Include Exploit/title script language="JavaScript" //'=============================================================================================...
PHP League 0.81 - config.php Remote File Inclusion
PHP League 0.81 - config.php Remote File Inclusion PhpLeague 0.81 Remote File Include Exploit //'=============================================================================================== //'Script Name: Php League PhpLeague 0.81 Remote File Include Exploit Target:http://target/scriptpath...
CMS Faethon <= 2.0 (mainpath) Remote File Include Exploit
No description provided by source. !/usr/bin/perl CMS Faethon 2.0 Ultimate Class: Remote/Local File Include Vulnerability Date: 2006/10/24 Remote: Yes Type: Highly critical Vendor: www.cmsfaethon.org...
CMS Faethon 2.0 - 'mainpath' Remote File Inclusion
!/usr/bin/perl CMS Faethon 2.0 Ultimate Class: Remote/Local File Include Vulnerability Date: 2006/10/24 Remote: Yes Type: Highly critical Vendor: www.cmsfaethon.org Download: http://cmsfaethon.org/downloads/...
CVE-2006-5446
SQL injection vulnerability in lobby/config.php in Casinosoft Casino Script aka Masvet 3.2 allows remote attackers to execute arbitrary SQL commands via the cfam parameter...
Fully Modded phpBB <= 2021.4.40 Multiple File Include Vulnerabilities
Exploit for unknown platform in category web applications ===================================================================== Fully Modded phpBB = 2021.4.40 Multiple File Include Vulnerabilities ===================================================================== Fully Modded phpBB 2 Remote Fi...
CVE-2006-5446: Undefined Security Weakness
SQL injection vulnerability in lobby/config.php in Casinosoft Casino Script aka Masvet 3.2 allows remote attackers to execute arbitrary SQL commands via the cfam parameter...
phptopwebs-rfi.txt
===================================================================== PHP Top webs config.php Remote File Inclue Vulnerability ===================================================================== Author : Le CoPrA ===================================================================== Download...
AlberT-EasySite <= 1.0.a5 Remote File Inclusion
AlberT-EasySite = 1.0.a5 Remote File Inclusion Download Source : http://www.superalbert.it/download/AlberT-EasySite/AES1.0a5.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; logout.php bugs ; requireonce $PSAPATH.'/include/config.php'; exmple and methode...
CVE-2006-5257: Undefined Security Weakness
PHP remote file inclusion vulnerability in modules/forum/include/config.php in Ciamos Content Management System CMS 0.9.6b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the modulecachepath parameter...
ciamosCMS096b-rfi.txt
!/usr/bin/perl use LWP::UserAgent; ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+ +:+:+ +:+ ++...
Ciamos CMS 0.9.6b - config.php Remote File Inclusion
Ciamos CMS 0.9.6b - config.php Remote File Inclusion !/usr/bin/perl use LWP::UserAgent; ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :...
PixelMotionV2.1.1.txt
!/usr/bin/perl Affected.scr..: Blog Pixel Motion V2.1.1 Poc.ID........: 12060927 Type..........: PHP Code Execution stripslashes, SQL Injection urldecode Risk.level....: High Vendor.Status.: Unpatched Src.download..: www.pixelmotion.org/zip/blog2.1.zip Poc.link......:...
PNewsv1.1.0.txt
PNews v1.1.0 nbs Remote File Inclusion Affected Software..:PNews v1.1.0 download...:http://sourceforge.net/project/showfiles.php?groupid=35550 Class .............: Remote File Inclusion Risk ..............: high Found by ..........: CvIr.System Contact ...........: CvIr.Systematgmail.com Affected...
CVE-2006-5085
Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the nomblog parameter, which is injected into include/variables.php...
CVE-2006-5085
Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the nomblog parameter, which is injected into include/variables.php...
CVE-2006-5085
CVE-2006-5085 affects Blog Pixel Motion 2.1.1. The vulnerability is a static code injection in config.php where the nom_blog parameter is injected into include/variables.php, enabling remote attackers to execute arbitrary PHP code. The available connected documents confirm the affected software v...
CVE-2006-5085: Undefined Security Weakness
Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the nomblog parameter, which is injected into include/variables.php...