punportal-lfi.txt

!/usr/bin/perl =about PunBB PunPortal 0.1 Local File Inclusion Exploit -------------------------------------------------- by athos - stakerathotmaildotit download mod http://www.punres.org/download.php?id=1108 download cms http://punbb.org register globals = 1 magic quotes gcp = 1 File...

CVE-2008-4958

gdrae in gdrae 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gdrae/palabra temporary file...

CVE-2008-4940

xmlfile.py in aptoncd 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/aptoncd temporary file...

Arbitrary file deletion

xmlfile.py in aptoncd 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/aptoncd temporary file...

CVE-2008-4958

gdrae in gdrae 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gdrae/palabra temporary file...

CVE-2008-4739

Directory traversal vulnerability in index.php in PlugSpace 0.1, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the navi parameter...

CVE-2008-4739

CVE-2008-4739 affects PlugSpace 0.1 (index.php). The vulnerability is a directory traversal that, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files by injecting a .. (dot dot) in the navi parameter. This is a file path traversal issue leading ...

CVE-2008-4704

PHP remote file inclusion vulnerability in SezHooTabsAndActions.php in SezHoo 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the IP parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in SezHooTabsAndActions.php in SezHoo 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the IP parameter...

CVE-2008-4585

Belong Software Site Builder 0.1 beta allows remote attackers to bypass intended access restrictions and perform administrative actions via a direct request to admin/home.php...

SezHoo 0.1 - Remote File Inclusion

SezHoo 0.1 - Remote File Inclusion Author : DaRkLiFe Greetz : str0ke & S.W.A.T. & funkys0ul Script : SezHoo 0.1 Remote File Inclusion Vulnerability Download: http://downloads.sourceforge.net/sezhoo/sezhoo.tar.gz?modtime=1220554562&bigmirror=0 Exploit :...

sezhoo-rfi.txt

Author : DaRkLiFe Greetz : str0ke & S.W.A.T. & funkys0ul Script : SezHoo 0.1 Remote File Inclusion Vulnerability Download: http://downloads.sourceforge.net/sezhoo/sezhoo.tar.gz?modtime=1220554562&bigmirror=0 Exploit : http://site.com/sezhoo/SezHooTabsAndActions.php?IP=Sh3lLz? Vulnerable : line 21...

Directory traversal

Directory traversal vulnerability in library/pagefunctions.inc.php in phpOCS 0.1 beta3 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the act parameter to index.php...

phpOCS <= 0.1-beta3 (index.php act) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== phpOCS = 0.1-beta3 index.php act Local File Inclusion Vulnerability ====================================================================== :::::::-. ... ::::::. :::. ;;...

CVE-2008-3507

CVE-2008-3507 affects LiteNews 0.1 (aka 01) and possibly earlier 1.2 and older. The vulnerability is an SQL injection in index.php, exploitable via the id parameter in a view action, allowing remote attackers to execute arbitrary SQL commands. Public references/documentation list available exploi...

CVE-2008-3484

CVE-2008-3484 affects the eStoreAff 0.1 application. The vulnerability is a SQL injection in the showcat action (index.php) where the cid parameter can be manipulated to execute arbitrary SQL commands. This is a remote, unauthenticated issue with impact described as partial confidentiality, integ...

CVE-2008-3484

SQL injection vulnerability in eStoreAff 0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter in a showcat action to index.php...

eStoreAff 0.1 - 'cid' SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability eStoreAff V0.1 index.php menu www.estoreaff.com AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.AtsDp.CoM Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

Authentication flaw

phpLinkat 0.1 allows remote attackers to bypass authentication and access unspecified pages under admin/ by sending a login=right cookie...

CVE-2008-3406

The CVE-2008-3406 entry describes a SQL injection vulnerability in showcat.php of phpLinkat 0.1, where the catid parameter can be exploited to execute arbitrary SQL commands remotely. The connected documents corroborate the vulnerability class (SQL injection) and the affected component (phpLinkat...