WHMCS (cart.php) local file disclosure flaws and fixes-vulnerability warning-the black bar safety net

Author: R-t33n Product: WHMCS Developer: http://whmcs.com/ Affected version: 4. x. x Defect type: Remote , webapps Test platform windows 2 0 0 3 , Linux , ubuntu. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ http://www.badguest.cn/ PATH /cart. php? a=wrong...

mPDF <= 5.3 file disclosure and fix-vulnerability warning-the black bar safety net

Title: mPDF = 5.3 File Disclosure Author: ZadYree Download address: http://www.mpdf1.com/mpdf/download Affected versions: 5.3 and prior Test platform: multiple !/ usr/bin/perl-U =head1 TITLE mPDF = 5.3 File Disclosure Exploit 0day =head2 SYNOPSIS -- examples/showcode.php --...

mPDF 5.3 - File Disclosure

mPDF 5.3 - File Disclosure Exploit Title: mPDF 1; use c...

mPDF 5.3 File Disclosure

Exploit Title: mPDF = 5.3 File Disclosure Google Dork: Please no dork Date: 16th December 2011 Author: ZadYree Software Link: http://www.mpdf1.com/mpdf/download Version: 5.3 and prior Tested on: Multiple CVE : N/A !/usr/bin/perl -U =head1 TITLE mPDF = 5.3 File Disclosure Exploit 0day =head2...

mPDF <= 5.3 File Disclosure

Exploit for php platform in category web applications Exploit Title: mPDF = 5.3 File Disclosure Google Dork: Please no dork Date: 16th December 2011 Author: ZadYree Software Link: http://www.mpdf1.com/mpdf/download Version: 5.3 and prior Tested on: Multiple CVE : N/A !/usr/bin/perl -U =head1 TITL...

mPDF 5.3 - File Disclosure

Exploit Title: mPDF 1; use constant FALSE = 0; help u...

Cross site scripting

Cross-site scripting XSS vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably other versions before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: this was originally reported as a file disclosure...

Manx 1.0.1 Directory Traversal

Manx cms.xml 1.0.1 simplexmlloadfile Directory Traversal Vulnerability Vendor: Paul Jova Product web page: http://manx.jovascript.com Affected version: 1.0.1 Summary: Manx is a Content Management System that uses xml text files to store the page contents, instead of a mysql database. Desc: Input...

TYPO3 Winstaller Default Encryption Keys

This module exploits known default encryption keys found in the TYPO3 Winstaller. This flaw allows for file disclosure in the jumpUrl mechanism. This issue can be used to read any file that the web server user account has access to view. The method used to create the juhash short MD5 hash was...

TYPO3 sa-2009-001 Weak Encryption Key File Disclosure

This module exploits a flaw in TYPO3 encryption ey creation process to allow for file disclosure in the jumpUrl mechanism. This flaw can be used to read any file that the web server user account has access to view. This module requires Metasploit: https://metasploit.com/download Current source:...

TYPO3 sa-2010-020 Remote File Disclosure

This module exploits a flaw in the way the TYPO3 jumpurl feature matches hashes. Due to this flaw a Remote File Disclosure is possible by matching the juhash of 0. This flaw can be used to read any file that the web server user account has access to view. This module requires Metasploit:...

WHMCompleteSolution 3.x/4.x - Multiple Vulnerabilities

$b0x WHMCS WHMCompleteSolution 3.x / 4.x Multiple Vulnerability ! $b0x ZxH-Labs $b0x 1st-NOV-11 $b0x Www.Sec4ever.coM $b0x WH-03 On Windows IIS 6.0 ======================================================== b0x@1337b0x:/b0x/Exploits/WebAPP whoami ZxH-Labs | Www.Sec4ever.coM...

WHMCompleteSolution 3.x4.x - Multiple Vulnerabilities

WHMCompleteSolution 3.x4.x - Multiple Vulnerabilities $b0x WHMCS WHMCompleteSolution 3.x / 4.x Multiple Vulnerability ! $b0x ZxH-Labs $b0x 1st-NOV-11 $b0x Www.Sec4ever.coM $b0x WH-03 On Windows IIS 6.0 ======================================================== b0x@1337b0x:/b0x/Exploits/WebAPP whoam...

DreamBox DM800 - file Local File Disclosure

DreamBox DM800 - file Local File Disclosure source: https://www.securityfocus.com/bid/50520/info DreamBox DM800 is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability would allow an attacker to obtain potentiall...

DreamBox DM800 - 'file' Local File Disclosure

source: https://www.securityfocus.com/bid/50520/info DreamBox DM800 is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability would allow an attacker to obtain potentially sensitive information from local files on...

DreamBox DM800 1.5rc1 - File Disclosure

DreamBox DM800 1.5rc1 - File Disclosure !/usr/bin/perl DreamBox DM800 :0:0:root:/home/root:/bin/sh daemon::1:1:daemon:/usr/sbin:/bin/sh bin::2:2:bin:/bin:/bin/sh sys::3:3:sys:/dev:/bin/sh sync::4:65534:sync:/bin:/bin/sync games::5:60:games:/usr/games:/bin/sh man::6:12:man:/var/cache/man:/bin/sh...

WHMCS 3.x Local File Disclosure

Title : WHMCS clientarea.php Local File Disclosure Author : Red Virus [email protected] Product : WHMCS WHMCompleteSolution Vendor : http://whmcs.com/ Date : 11/04/2011 Version : 3.X.x Tested on : linux+apache Homepage : www.alm3refh.com ================================================================...

WHMCompleteSolution (WHMCS) 3.x - 'clientarea.php' Local File Disclosure

Title : WHMCS clientarea.php Local File Disclosure Author : Red Virus [email protected] Product : WHMCS WHMCompleteSolution Vendor : http://whmcs.com/ Date : 11/04/2011 Version : 3.X.x Tested on : linux+apache Homepage : www.alm3refh.com ================================================================...

WHMCompleteSolution (WHMCS) 3.x - clientarea.php Local File Disclosure

WHMCompleteSolution WHMCS 3.x - clientarea.php Local File Disclosure Title : WHMCS clientarea.php Local File Disclosure Author : Red Virus [email protected] Product : WHMCS WHMCompleteSolution Vendor : http://whmcs.com/ Date : 11/04/2011 Version : 3.X.x Tested on : linux+apache Homepage : www.alm3refh.com...

DreamBox DM800 1.5rc1 - File Disclosure

!/usr/bin/perl DreamBox DM800 :0:0:root:/home/root:/bin/sh daemon::1:1:daemon:/usr/sbin:/bin/sh bin::2:2:bin:/bin:/bin/sh sys::3:3:sys:/dev:/bin/sh sync::4:65534:sync:/bin:/bin/sync games::5:60:games:/usr/games:/bin/sh man::6:12:man:/var/cache/man:/bin/sh lp::7:7:lp:/var/spool/lpd:/bin/sh...