NetClassifieds [multiple vulnerabilities]

Application: NetClassifieds version: -Free Edition -Standard Edition -Professional Edition -Premium Edition Web Site: http://www.scriptdevelopers.net/ Versions: all Platform: linux, windows Bug: multiple injection sql , xss , full path Fix Available: Yes...

CVE-2007-3356: Undefined Security Weakness

NetClassifieds Premium Edition allows remote attackers to obtain sensitive information via certain requests that reveal the path in an error message, related to the displayerrors setting in 1 Common.php and 2 imageresizer.php, and 3 the use of FILE in error reporting by imageresizer.php; and 4 vi...

tsp-admin.txt

!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc4 echo "Usage: php ".$argv0." Host Path ID password Host: target server ip/hostname Path: path of template ID: A Valid Admin ID usally 1 works for the 'admin' nickname password: The PWD you want ...

livesup-admin.txt

!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argc2 echo "Usage: php ".$argv0." Host Path Host: target server ip/hostname Path: path of LiveSupport Example: php ".$argv0." localhost /LiveSupport/ "; die; errorreporting0;...

AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo " AlstraSoft Live Support v1.21 Admin Credential Retrieve Exploit by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love "; if $argc2 echo "Usage: php...

yaap-rfi.txt

-------------------------------------------------------------------------------- Script name.......:Yaap Affected Version.....:1.5 D.page..:http://yaap.oskbraniewo.pl/download/yaap15.tar.gz -------------------------------------------------------------------------------- Author:3l3ctric-Cracker Dr...

Remote file inclusion

PHP remote file inclusion vulnerability in includes/common.php in Yaap 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter, possibly related to the autoload function...

CVE-2007-2664

PHP remote file inclusion vulnerability in includes/common.php in Yaap 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter, possibly related to the autoload function...

YAAP <= 1.5 __autoload() Remote File Inclusion Vulnerability

No description provided by source. -------------------------------------------------------------------------------- Script name.......:Yaap Affected Version.....:1.5 D.page..:http://yaap.oskbraniewo.pl/download/yaap15.tar.gz...

YAAP 1.5 - '__autoload()' Remote File Inclusion

-------------------------------------------------------------------------------- Script name.......:Yaap Affected Version.....:1.5 D.page..:http://yaap.oskbraniewo.pl/download/yaap15.tar.gz -------------------------------------------------------------------------------- Author:3l3ctric-Cracker Dr...

CVE-2007-2521

PHP remote file inclusion vulnerability in common.php in E-GADS! before 2.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the locale parameter...

CVE-2007-2521: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in common.php in E-GADS! before 2.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the locale parameter...

SaBlog-X 1.5 storm path-vulnerability warning-the black bar safety net

Source: Amxku blog www.amxku.net common.php $options'gzipcompress' && functionexists'obgzhandler' ? obstart'obgzhandler' : obstart; Changed to: $options'gzipcompress' && functionexists'obgzhandler' ? @obstart'obgzhandler' : obstart; Discuz! Before seems to have there been such problems...

E-GADS! 2.2.6 (common.php locale) Remote File Inclusion Vulnerability

No description provided by source. E-GADS! 2.2.6 Remote File Inclusion Vulnerability Dork:: Vuln Code ERROR:common.php require "$locale/locale.php"; BUG: Example:http://site.com/path/common.php?locale=Sh3LL Script Script Download...

E-GADS! 2.2.6 (common.php locale) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== E-GADS! 2.2.6 common.php locale Remote File Inclusion Vulnerability ===================================================================== E-GADS! 2.2.6 Remote File...

E-GADS! 2.2.6 - common.php?locale Remote File Inclusion

E-GADS! 2.2.6 - common.php?locale Remote File Inclusion E-GADS! 2.2.6 Remote File Inclusion Vulnerability Dork:: Vuln Code ERROR:common.php require "$locale/locale.php"; BUG: Example:http://site.com/path/common.php?locale=Sh3LL Script Script Download...

E-GADS! 2.2.6 - 'common.php?locale' Remote File Inclusion

E-GADS! 2.2.6 Remote File Inclusion Vulnerability Dork:: Vuln Code ERROR:common.php require "$locale/locale.php"; BUG: Example:http://site.com/path/common.php?locale=Sh3LL Script Script Download https://sourceforge.net/project/showfiles.php?groupid=88942&packageid=93125&releaseid=444821 Special...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Post Revolution 6.6 and 7.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to 1 common.php or 2 themes/default/previewpostcompleto.php...

CVE-2007-2201: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Post Revolution 6.6 and 7.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to 1 common.php or 2 themes/default/previewpostcompleto.php...

Post Revolution Remote File Inclusion

Post Revolution Remote File Inclusion Affected Software .: Post Revolution 6.6 / 7.0 Release Candidate 2 Download..: http://www.fabio.com.ar/postrev/ Risk ..............: high Date .........: 25/3/2007 Found by ..........: InyeXion Contact ...........: InyeXionatgmail.com Web .............:...