5171 matches found
PHP Flat File Guestbook 1.0 - ffgb_admin.php Remote File Inclusion
PHP Flat File Guestbook 1.0 - ffgbadmin.php Remote File Inclusion source: https://www.securityfocus.com/bid/49138/info PHP Flat File Guestbook is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker...
cPanel 11.x (Fantastico) Local File Include / SM-b0x
Exploit for php platform in category web applications cPanel 11.x Fantastico Local File Include / SM-b0x ////\ //\ //\ //\ //\ //\ //\ //\ //\ :::/\ ::\:.\ \::\ \ \ \ :\ \ ::: \ \::: \ \::\ \:::/ /: / \:::/ ::/\ .\ \ //\:\ \ :: \ \:: /:/ /: / /::/ /\/\:: ::\ \::::/ :...
Chyrp 2.x - 'action' Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/48672/info Chyrp is prone to multiple cross-site scripting vulnerabilities, a local file-include vulnerability, an arbitrary file-upload vulnerability, and a directory-traversal vulnerability. An attacker may leverage these issues to execute arbitrary...
Chyrp 2.x swfupload Extension - upload_handler.php Arbitrary File Upload Arbitrary PHP Code Execution
Chyrp 2.x swfupload Extension - uploadhandler.php Arbitrary File Upload Arbitrary PHP Code Execution source: https://www.securityfocus.com/bid/48672/info Chyrp is prone to multiple cross-site scripting vulnerabilities, a local file-include vulnerability, an arbitrary file-upload vulnerability, an...
Chyrp 2.x - '/includes/lib/gz.php?File' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/48672/info Chyrp is prone to multiple cross-site scripting vulnerabilities, a local file-include vulnerability, an arbitrary file-upload vulnerability, and a directory-traversal vulnerability. An attacker may leverage these issues to execute arbitrary...
Chyrp 2.x swfupload Extension - 'upload_handler.php' Arbitrary File Upload / Arbitrary PHP Code Execution
source: https://www.securityfocus.com/bid/48672/info Chyrp is prone to multiple cross-site scripting vulnerabilities, a local file-include vulnerability, an arbitrary file-upload vulnerability, and a directory-traversal vulnerability. An attacker may leverage these issues to execute arbitrary...
Auth3ntiQ & shika01 found Local file include on numericable.be & numericable.lu
Auth3ntiQ & shika01 found local file include on numericable.be & numericable.lu Hackers named "Auth3ntiQ and shika01" found local file include on numericable.be & numericable.lu . Venerable Links : Link 1 Link 2 Bugs are critical , Hackers can steal all account with this LFI . Found this article...
Chyrp 2.x - '/admin/help.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/48672/info Chyrp is prone to multiple cross-site scripting vulnerabilities, a local file-include vulnerability, an arbitrary file-upload vulnerability, and a directory-traversal vulnerability. An attacker may leverage these issues to execute arbitrary...
Deep throat cms file include vulnerability resulting database disclosure-vulnerability warning-the black bar safety net
Due to the presence of a file containing a vulnerability, the result can bypass the backstage access restrictions and the access to some page Detail Code Description: $controller=ABSPATH.'/ content/'.$ params'model'.'/ index.php'; //die$controller; //Load call tag iffileexistsABSPATH.'/...
Chyrp 2.x - includesJavaScript.php?action Cross-Site Scripting
Chyrp 2.x - includesJavaScript.php?action Cross-Site Scripting source: https://www.securityfocus.com/bid/48672/info Chyrp is prone to multiple cross-site scripting vulnerabilities, a local file-include vulnerability, an arbitrary file-upload vulnerability, and a directory-traversal vulnerability...
Portix-CMS 'page' Parameter Local File Include Vulnerability
Portix-CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts in the context of the webserver process. This may allow...
Portix-CMS <= 1.5.0.rc5 LFI Vulnerability - Active Check
Portix-CMS is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
phpMyAdmin < 3.3.10.2, 3.4.x < 3.4.3.1 Multiple Remote Vulnerabilities
phpMyAdmin is prone to multiple remote vulnerabilities, including PHP code-execution and local file-include vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
i-doit 'lang' Parameter Local File Include Vulnerability
I-doit is prone to local file inclusion vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Dataface Local File Include Vulnerability
Exploit for php platform in category web applications //========================================================================== // Topic : Dataface // Bug type : local file include // Advisory : http://xataface.com/ //========================================================================== /...
Dataface Local File Inclusion
//========================================================================== // Topic : Dataface // Bug type : local file include // Advisory : http://xataface.com/ //========================================================================== // Author : ItSecTeam // Email : [email protected] //...
PopScript - 'index.php' Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/48113/info PopScript is prone to a remote file-include vulnerability, an SQL-injection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to...
PopScript - index.php Multiple Input Validation Vulnerabilities
PopScript - index.php Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/48113/info PopScript is prone to a remote file-include vulnerability, an SQL-injection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize...
Media in Spot CMS 'page' Parameter Local File Include Vulnerability
Media in Spot CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and to execute arbitrary local scripts in the context of the webserver process. This m...
Media in Spot CMS 'page' Parameter Local File Include Vulnerability
Media in Spot CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...