2132 matches found
PT-2006-5074 · Mambo · Mambo
Name of the Vulnerable Software and Affected Versions: Mambo com lmtg myhomepage component affected versions not specified Description: The issue concerns multiple PHP remote file inclusion vulnerabilities in the com lmtg myhomepage component for Mambo. These vulnerabilities allow remote attacker...
WEBInsta MM <= 1.3e (absolute_path) Remote File Include Exploit
Exploit for unknown platform in category web applications =============================================================== WEBInsta MM WEBInsta Mailing List Manager function milw0rm if document.exploit.target.value=="" alert"Enter a Target"; return false; exploit.action=...
CVE-2006-3934
Affected software : Alkacon OpenCms prior to 6.2.2. Vulnerability : Absolute path traversal in downloadTrigger.jsp via the filePath parameter, allowing remote authenticated users to download arbitrary files. Root cause : improper handling/validation of absolute pathnames in filePath. Impact : pot...
CVE-2006-3934
Absolute path traversal vulnerability in downloadTrigger.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to download arbitrary files via an absolute pathname in the filePath parameter...
Joomla com_bayesiannaivefilter Component <= 1.1 Inclusion Vulnerability
No description provided by source. Pablin77 - XTech Inc Group combayesiannaivefilter Mambo Component Remote File Inclusion mosConfigabsolutepath Discovered By Pablin77 contact: Pablin77 at Argentina dot com Lebanon-Israel...STOP! No War!!! peace, that's all This is a massive cyber-protest, we are...
New Article Mambo Component <= 1.0 (com_articles.php) Remote File Include Vulnerabilities
--------------------------------------------------------------------------------- New Article Mambo Component = 1.0 comarticles.php Remote File Include Vulnerabilities --------------------------------------------------------------------------------- Author : Ahmad Maulana a.k.a Matdhule Date : Ju...
mammoodle.txt
Mam - Moodle Remote File Include ------------------------------------------------------------------------------------ Bug Found by: jank0 greetz: hackbsd crew risk: dangerous this bug allows a remote atacker to execute commands via rfi path: ?mosConfigabsolutepath= xpl:...
Echo Security Advisory 2006.40
ECHO.OR.ID ECHOADV40$2006 --------------------------------------------------------------------------------------------------- ECHOADV40$2006 iManage CMS = 4.0.12 absolutepath Remote File Inclusion ---------------------------------------------------------------------------------------------------...
Calendar Mambo Module <= 1.5.7 Remote File Include Vulnerabilities
--------------------------------------------------------------------------------- Calendar Mambo Module = 1.5.7 Remote File Include Vulnerabilities --------------------------------------------------------------------------------- Author : Matdhule Contact : [email protected] Web :...
multibanners Mambo Component <= 1.0.1 Remote Inclusion Vulnerability
Exploit for unknown platform in category web applications ==================================================================== multibanners Mambo Component = 1.0.1 Remote Inclusion Vulnerability ==================================================================== SolpotCrew Community Com...
Mambo Component multibanners 1.0.1 - Remote File Inclusion
Mambo Component multibanners 1.0.1 - Remote File Inclusion SolpotCrew Community Com Multibanners Remote File Inclusion mosConfigabsolutepath original advisory : http://solpotcrew.org/adv/BlueSpy-adv-multibanners.txt Bug Found By :Blue|Spy contact: [email protected] Website : http://kunamgede.biz,...
EUVD-2006-3765
Multiple PHP remote file inclusion vulnerabilities in component.php in iManage CMS 4.0.12 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 articles.php, 2 contact.php, 3 displaypage.php, 4 faq.php, 5 mainbody.php, 6 news.php, 7...
Directory traversal
Absolute path directory traversal vulnerability in 1 MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and 2 VisNetic MailServer before 8.5.0.5 allows remote authenticated users to include arbitrary files via a modified language parameter and a full Windows or UNC pathname i...
MiniBB 1.5 - 'news.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/19095/info MiniBB is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the context o...
calendar157.txt
--------------------------------------------------------------------------------- Calendar Module = 1.5.7 Remote File Include Vulnerabilities --------------------------------------------------------------------------------- Author : Matdhule Contact : [email protected] Application : Calendar...
MiniBB Mambo Component <= 1.5a Remote File Include Vulnerabilities
No description provided by source. --------------------------------------------------------------------------------------------- MiniBB Forum Mambo Component = 1.5a Remote File Include Vulnerabilities -----------------------------------------------------------------------------------------------...
CVE-2006-3488
Absolute path traversal vulnerability in administrador.asp in VirtuaStore 2.0 allows remote attackers to possibly read arbitrary directories or files via an absolute path with Windows drive letter in the Pasta parameter when link=util, acao=ftp, and acaba=sim...
DCP-Portal.txt
Kurdish Security Advisory irc.gigachat.net kurdhack http://www.milw0rm.com/exploits/1905 Editor DHTML Scripting bugz $urlpatheditor = "$rooturl/library/editor/"; $abspatheditor = "$root/library/editor/"; ? Proof Of Concept...
CVE-2006-2983
PHP remote file inclusion vulnerability in Enterprise Timesheet and Payroll Systems EPS 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter in cal.php. NOTE: the provenance of this information is unknown; the details are obtained solely fr...
CVE-2006-2982
Multiple PHP remote file inclusion vulnerabilities in Enterprise Timesheet and Payroll Systems EPS 1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter in 1 footer.php and 2 admin/footer.php...