CVE-2007-4536

TorrentTrader 1.07 and earlier sets insecure permissions for files in the root directory, which allows attackers to execute arbitrary PHP code by modifying 1 disclaimer.txt, 2 sponsors.txt, and 3 banners.txt, which are used in an include call. NOTE: there might be local attack vectors that extend...

CVE-2007-4536

TorrentTrader 1.07 and earlier sets insecure permissions for files in the root directory, which allows attackers to execute arbitrary PHP code by modifying 1 disclaimer.txt, 2 sponsors.txt, and 3 banners.txt, which are used in an include call. NOTE: there might be local attack vectors that extend...

Sql injection

SQL injection vulnerability in index.php in pagetool 1.07 allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a pagetoolnews action...

CVE-2007-3402

SQL injection vulnerability in index.php in pagetool 1.07 allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a pagetoolnews action...

CVE-2007-3402

SQL injection vulnerability in index.php in pagetool 1.07 allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a pagetoolnews action...

pagetool-sql.txt

pagetool-1.07 Remote SQL Injection download:http://kent.dl.sourceforge.net/sourceforge/pagetool/pagetool-1.07.tar.gz Found by: Katatafish [email protected] Dork: "powered by Pagetool" Thanks: str0ke PoC...

Pagetool 1.07 (news_id) Remote SQL Injection Vulnerability

No description provided by source. pagetool-1.07 Remote SQL Injection download:http://kent.dl.sourceforge.net/sourceforge/pagetool/pagetool-1.07.tar.gz Found by: Katatafish [email protected] Dork: "powered by Pagetool" Thanks: str0ke PoC...

Remote file inclusion

PHP remote file inclusion vulnerability in modify.php in the XFsection 1.07 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the dirmodule parameter...

CVE-2007-3222

Summary (CVE-2007-3222) : A PHP remote file inclusion vulnerability exists in the XFSection 1.07 module for XOOPS, specifically in modify.php where the dir_module parameter is unsafely used to include PHP code. This allows an attacker to cause arbitrary PHP code execution by supplying a crafted U...

xoops-xfsection.txt

XOOPS Module XFsection Remote File Inclusion version: 1.07 source : http://prdownloads.sourceforge.net/xoops/xoops2-modxfsection-107.zip Discovered by SpLo1T from hTTp://hacking.3Xforum.Ro Bug : http://www.site.com/modules/xfsection/modify.php?dirmodule=evilcode.txt? Shoutz t0 :...

XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability

No description provided by source. XOOPS Module XFsection Remote File Inclusion version: 1.07 source : http://prdownloads.sourceforge.net/xoops/xoops2-modxfsection-107.zip Discovered by SpLo1T from hTTp://hacking.3Xforum.Ro Bug :...

XOOPS Module XFsection - modify.php Remote File Inclusion

XOOPS Module XFsection - modify.php Remote File Inclusion XOOPS Module XFsection Remote File Inclusion version: 1.07 source : http://prdownloads.sourceforge.net/xoops/xoops2-modxfsection-107.zip Discovered by SpLo1T from hTTp://hacking.3Xforum.Ro Bug :...

XOOPS Module XFsection - 'modify.php' Remote File Inclusion

XOOPS Module XFsection Remote File Inclusion version: 1.07 source : http://prdownloads.sourceforge.net/xoops/xoops2-modxfsection-107.zip Discovered by SpLo1T from hTTp://hacking.3Xforum.Ro Bug : http://www.site.com/modules/xfsection/modify.php?dirmodule=evilcode.txt? Shoutz t0 :...

XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================= XOOPS Module XFsection modify.php Remote File Inclusion Vulnerability ======================================================================= XOOPS Module XFsection...

CVE-2007-2541

CVE-2007-2541 describes a PHP remote file inclusion in Versado CMS 1.07. The vulnerability exists in includes/ajax_listado.php where an attacker can supply a URL via the urlModulo parameter to cause remote PHP code execution. Affected component: Versado CMS 1.07, within the includes/ajax_listado....

Versado CMS 1.07 (ajax_listado.php urlModulo) RFI Vulnerability

No description provided by source. Versado CMS = Remote File Inclusion Vulnerability Dork:: Vuln Code ERROR:includes/ajaxlistado.php if!empty$GET'urlModulo' requireonce$GET'urlModulo'; else if!empty$POST'urlModulo' requireonce$POST'urlModulo'; BUG:...

CVE-2007-1974

SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section aka WF-Sections 1.0.1, as used in Xoops modules such as 1 Zmagazine 1.0, 2 Happy Linux XFsection 1.07 and earlier, and possibly other modules, allows remote attackers to execute arbitrary SQL commands via...

Remote file inclusion

PHP remote file inclusion vulnerability in modflatmenu.php in the Flatmenu 1.07 and earlier Mambo module allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

Mambo Module Flatmenu 1.07 - Remote File Inclusion

!/usr/bin/perl + + - - - The Best Arab Security And Hacking Team - - + + + - Mambo 4.5.1 Modules Flatmenu "Team Hell Crew :: Mambo 4.5.1 Modules Flatmenu geometry '500x300' ; $mw-resizable0,0; $mw-Label-text = 'Mambo 4.5.1 Modules Flatmenu 'Verdana 7 bold',-foreground='blue'-pack; $mw-Label-text ...

CVE-2006-6765

The CVE-2006-6765 entry describes multiple PHP file inclusion vulnerabilities in Pagetool 1.07, specifically in src/admin/pt_upload.php. The underlying issues allow remote attackers to execute arbitrary PHP code by supplying (1) a local filename or FTP/share URI via config_file, or (2) a URL via ...