Drupal 7.15 Path Disclosure

============================================================ Vulnerable Software: Drupal 7.15 Downloaded from: http://ftp.drupal.org/files/projects/drupal-7.15.tar.gz Vuln Type: Path Disclosure ============================================================ Tested: php.ini MAGICQUOTESGPC OFF Safe...

WordPress Front End Upload v0. 5. 4. 4 arbitrary php file upload-vulnerability warning-the black bar safety net

Title: WordPress Front End Upload v0. 5. 4. 4 Arbitrary PHP File Upload Vulnerability Author: Chris Kellum Home page: http://mondaybynoon.com/ Software address: http://downloads.wordpress.org/plugin/front-end-upload.0.5.4.4.zip Affected version: 0.5.4.4 Defect analysis ===================== Plugi...

WordPress Plugin Front End Upload 0.5.4.4 - Arbitrary .PHP File Upload

WordPress Plugin Front End Upload 0.5.4.4 - Arbitrary .PHP File Upload Exploit Title: WordPress Front End Upload v0.5.4.4 Arbitrary PHP File Upload Vulnerability Date: 7/23/12 Exploit Author: Chris Kellum Vendor Homepage: http://mondaybynoon.com/ Software Link:...

CVE-2011-5083

Unrestricted file upload vulnerability in inc/swf/swfupload.swf in Dotclear 2.3.1 and 2.4.2 allows remote attackers to execute arbitrary code by uploading a file with an executable PHP extension, then accessing it via a direct request to the file in an unspecified directory...

Direct access to issue via url discloses structure without authentication

If an issue is accessed via the direct url an error message discloses if the issue is existent or not - even when the use isn't logged-in. In contrast, an existing issue redirects to the login form. This knowledge may open an attack vector on private Jira instances that require authentication...

Direct access to issue via url discloses structure without authentication

If an issue is accessed via the direct url an error message discloses if the issue is existent or not - even when the use isn't logged-in. In contrast, an existing issue redirects to the login form. This knowledge may open an attack vector on private Jira instances that require authentication...

Direct access to issue via url discloses structure without authentication

If an issue is accessed via the direct url an error message discloses if the issue is existent or not - even when the use isn't logged-in. In contrast, an existing issue redirects to the login form. This knowledge may open an attack vector on private Jira instances that require authentication...

ShopEX 爆路径漏洞

简要描述： shopex 很多的核心文件都需要包含其它的类， 但是都没有保护，可以直接访问 详细说明： shopex 很多的核心文件都需要包含其它的类， 但是都没有保护，可以直接访问， 所以可以报错物理路径! 漏洞证明： shopex 很多的核心文件都需要包含其它的类， 但是都没有保护，可以直接访问， 所以可以报错物理路径! 如： http://www.lpboke.com/core/api/shopapi.php http://www.lpboke.com/core/api/site/2.0/apib2b20cat.php...

PT-2011-4602 · Cakephp · Cakephp

Name of the Vulnerable Software and Affected Versions: CakePHP version 1.3.7 Description: The issue allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by dispatcher.php and certain...

ShopXp CMS upload vulnerability get Webshell-vulnerability warning-the black bar safety net

First, you must know the Administrator's directory, because upload only the background. In upLoadbm. asp file, the first did not Check a visitor's identity. So you can directly access The code is as follows: % uppath=request"a"&"/" 'file upload path filelx=request"b" 'file upload type 1-jpg...

Dodge ScanWebShell something very simple-vulnerability warning-the black bar safety net

Method of use: Direct access to the xxx. asp? bin=zs will be in the current directory to generate a bin. asp. The connection password for the zs! PS: the file can Dodge ScanWebShell,but the generated bin. asp will be killed,after use please delete the bin. asp! % pass="zs" If request"bin"= pass...

SupeSite 6.0 direct access to webshell of 0day-vulnerability warning-the black bar safety net

For me some tasteless feeling,because the vulnerability where the file is a configuration file, if the target site has been configured through this file, then we cannot exploit the vulnerability, and timely is not configured, it is also possible unsuccessful, of course, there's still a part of th...

Coupons Direct Access Bypass

======================================================================================== | Title : Coupons By Pass Admin Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com | Web Site : | Dork : Copyright 2007. Coupons and Deals Directory | Tested on: windows...

Arab Portal 2.2 Local File Inclusion

|| || | || o,7 || . o7 || q||| o\, : / / . /QQQQQQQQQQQQQQQQQQQ\ /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE... |QQQQ| |QQQQ| |QQQQ| |QQQQ\ iqaahotmail.fr /QQQQ| \QQQQ\ /QQQQ/ \QQQQ\ /QQ\QQQQ/ \QQQQ\ \QQQQQQQ/ \QQQQQ...

Arab Portal <= 2.2 (mod.php module) Local File Inclusion Vulnerability

No description provided by source. || || | || o,7 || . o7 || q||| o\, : / / . /QQQQQQQQQQQQQQQQQQQ\ /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE... |QQQQ| |QQQQ| |QQQQ| |QQQQ\ iqaahotmail.fr /QQQQ| \QQQQ\ /QQQQ/ \QQQQ...

Arab Portal 2.2 - mod.php Local File Inclusion

Arab Portal 2.2 - mod.php Local File Inclusion || || | || o,7 || . o7 || q||| o\, : / / . /QQQQQQQQQQQQQQQQQQQ\ /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE... |QQQQ| |QQQQ| |QQQQ| |QQQQ\ iqaahotmail.fr /QQQQ| \QQQQ...

Arab Portal 2.2 - 'mod.php' Local File Inclusion

|| || | || o,7 || . o7 || q||| o\, : / / . /QQQQQQQQQQQQQQQQQQQ\ /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE... |QQQQ| |QQQQ| |QQQQ| |QQQQ\ iqaahotmail.fr /QQQQ| \QQQQ\ /QQQQ/ \QQQQ\ /QQ\QQQQ/ \QQQQ\ \QQQQQQQ/ \QQQQQ...

FubarForum 1.6 File Disclosure

ECHOADV107$2009 ----------------------------------------------------------------------------------------- ECHOADV107$2009 FubarForum = 1.6 Critical File Disclosure Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date : March, ...

Gallery Kys 1.0 Password Disclosure / XSS

START 0x01 Informations: Script : Gallery Kys 1.0 Download : http://www.advancescripts.com/djump.php?ID=6285 Vulnerability : Admin Password Disclosure / Permanent XSS Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org 0x02 Bug: Admin Password Disclosure Bugged file is:...

shibby-sql.txt

Title: sHibby sHop v2.2 = Remote SQL/Update Multiple Vulnerability ================================================================ + Author : KnocKout + Special Thankz : Dr.Kacak + System 0VerfL0verZ ================================================================= Script : sHibby sHop Verz: 2.2...