Exploit Release : XAMPP 1.7.3 multiple Vulnerabilities

Exploit Title: XAMPP = 1.7.3 multiple vulnerabilites Author: TheLeader Software Link: https://www.apachefriends.org/en/xampp-windows.html Affected Version: 1.7.3 and prior Tested on Windows XP Hebrew, Service Pack 3 I. File disclosure : XAMPP is vulnerable to a remote file disclosure attack. The...

XAMPP <= 1.7.3 multiple vulnerabilites

Exploit for php platform in category web applications ====================================== XAMPP '; if $REQUEST'showcode' != 1 echo ''.$TEXT'global-showcode'.''; else $file = filegetcontentsbasename$SERVER'PHPSELF'; echo "".$TEXT'global-sourcecode'.""; echo "tex...

XAMPP 1.7.3 Cross Site Scripting / File Disclosure

/ / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / ,'; if $REQUEST'showcode' != 1 echo ''.$TEXT'global-showcode'.''; else $file = filegetcontentsbasename$SERVER'PHPSELF'; echo "".$TEXT'global-sourcecode'.""; echo ""; echo htmlspecialchars$file; echo ""; ? showcode.php relies...

Sawmill 8.x < 8.1.7.3 Arbitrary File Disclosure

The version of Sawmill running on the remote host fails to properly restrict access to critical functions to an unauthorized user. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to read arbitrary files from the remote system. Note that the version of Sawmil...

XAMPP 1.7.3 - Multiple Vulnerabilities

XAMPP 1.7.3 - Multiple Vulnerabilities / / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / ,'; if $REQUEST'showcode' != 1 echo ''.$TEXT'global-showcode'.''; else $file = filegetcontentsbasename$SERVER'PHPSELF'; echo "".$TEXT'global-sourcecode'.""; echo ""; echo...

XAMPP 1.7.3 - Multiple Vulnerabilities

/ / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / ,'; if $REQUEST'showcode' != 1 echo ''.$TEXT'global-showcode'.''; else $file = filegetcontentsbasename$SERVER'PHPSELF'; echo "".$TEXT'global-sourcecode'.""; echo ""; echo htmlspecialchars$file; echo ""; ? showcode.php relies...

XAMPP &lt;= 1.7.3 multiple vulnerabilites

No description provided by source. / / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / , / / // / / / / / //// //|///||/,/ / /// Live by the byte |// Members: Pr0T3cT10n -=M.o.B.=- TheLeader Sro Debug Contact: [email protected] -----------------------------------...

zen cart 1.38 a multi-exploit-vulnerability warning-the black bar safety net

Vulnerability 1, The form id="frmUpload" enctype="multipart/form-data" action="" method="post" Upload a new file:br input type="file" name="NewFile" size="5 0"br input id="btnUpload" type="submit" value="Upload" /form We test under power. Directly to upload a PHP WEBSHELL to the IMAGES...

Ubuntu Drupal Theme - Brown images/layout/gradient.php File Disclosure

The version of the Ubuntu Drupal Theme - Brown installed on the Drupal install on the remote host does not properly sanitize user-supplied input to the 'start' and 'end' parameters of the 'images/layout/gradient.php' script before using it to return the contents of a file. A remote, unauthenticat...

Exponent CMS 0.97 - Multiple Vulnerabilities

Exponent CMS 0.97 - Multiple Vulnerabilities Exponent CMS v0.97 Multiple Vulnerabilities Vendor: OIC Group Inc. Product web page: http://www.exponentcms.org Affected version: 0.97 Summary: Open Source Content Management System PHP+MySQL. Desc: Exponent CMS suffers from multiple vulnerabilities: 1...

Exponent CMS 0.97 - Multiple Vulnerabilities

Exponent CMS v0.97 Multiple Vulnerabilities Vendor: OIC Group Inc. Product web page: http://www.exponentcms.org Affected version: 0.97 Summary: Open Source Content Management System PHP+MySQL. Desc: Exponent CMS suffers from multiple vulnerabilities: 1. Local File Inclusion / File Disclosure...

CRE Loaded version osCommerce Remote File Upload File Disclosure

Exploit for php platform in category web applications ================================================================== CRE Loaded version osCommerce Remote File Upload / File Disclosure ==================================================================...

Allpc 2.5 osCommerce Remote File Upload File Disclosure

Exploit for php platform in category web applications ======================================================= Allpc 2.5 osCommerce Remote File Upload File Disclosure ======================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 ...

Multiple vulnerabilities in TYPO3 Core

It has been discovered that TYPO3 Core is vulnerable to Remote File Disclosure, Cross-Site Scripting XSS, Privilege Escalation and Denial of Service. Component Type: TYPO3 Core Affected Versions: 4.2.14 and below, 4.3.6 and below, 4.4.3 and below Vulnerability Types: Remote File Disclosure,...

[STANKOINFORMZASCHITA-10-01] Netbiter® webSCADA multiple vulnerabilities

STANKOINFORMZASCHITA-10-01 Netbiter® webSCADA – multiple vulnerabilities Authors: Eugene Salov [email protected], Andrej Komarov [email protected] Product: Netbiter® webSCADA CVSS v2 Base Score: 9.0 AV:N/AC:L/Au:R/C:C/I:C/A:C Impact Subscore: 10.0 Exploitability Subscore: 8.0 Availability of...

Evaria ECMS 'Poll.php' Local File Disclosure Vulnerability

Evaria ECMS is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability would allow an attacker to obtain potentially sensitive information from local files on computers running the vulnerable application. This may a...

Bka Haber 1.0 File Disclosure

!/usr/bin/env python -- coding:cp1254 -- ''' 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site :...

Evaria ECMS <= 1.1 Directory Traversal Vulnerability

Evaria ECMS is prone to a local file disclosure vulnerability because it fails to adequately validate user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Bka Haber v1.0 (Tr) File Disclosure Exploit

Exploit for python platform in category web applications =========================================== Bka Haber v1.0 Tr File Disclosure Exploit =========================================== !/usr/bin/env python -- coding:cp1254 -- '''...

Bka Haber 1.0 (Tr) - File Disclosure

Bka Haber 1.0 Tr - File Disclosure !/usr/bin/env python -- coding:cp1254 -- ''' Title : Bka Haber v1.0 Tr File Disclosure Exploit .py Desc. : its not Database Down. Script : http://www.scriptci.com/modules.php?name=Downloads&dop=getit&lid=475 Proof :...