Claroline 1.x - '/admin/adminusers.php?dir' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25521/info Claroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities. An attacker could exploit these issues to execute local script code in the context of the application and access sensitive data, which m...

Claroline 1.x - '/admin/advancedUserSearch.php?action' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25521/info Claroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities. An attacker could exploit these issues to execute local script code in the context of the application and access sensitive data, which m...

someryc-rfi.txt

SomeryC = v0.2.4 Remote File Include Vendor: http://someryc.mostpopularcomic.com download http://someryc.mostpopularcomic.com/sC024.zip found by: Katatafish [email protected] d0rk: "powered by someryc" vuln-code/admin/system/include.php: if $start .... include"$skindir/header.php";...

SomeryC 0.2.4 - 'include.php?skindir' Remote File Inclusion

SomeryC = v0.2.4 Remote File Include Vendor: http://someryc.mostpopularcomic.com download http://someryc.mostpopularcomic.com/sC024.zip found by: Katatafish [email protected] d0rk: "powered by someryc" vuln-code/admin/system/include.php: if $start .... include"$skindir/header.php";...

Arcadem 2.01 - index.php Remote File Inclusion

Arcadem 2.01 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/25432/info Arcadem is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and t...

Butterfly online vistors counter 1.08 RFI

App Name : Butterfly online vistors counter v.1.08 HomePage : http://www.phoenix.frihost.net/butterfly/readme.php Vuln type : Remote File Include RFI Vulnerability Discovered by : iNs Vuln Code: visitor.php includeonce $SERVER"DOCUMENTROOT" . "/butterfly/custom.php"; // include settings POC:...

My_REFERER v.1.08 Remote File Include

App Name : MyREFERER v.1.08 HomePage : http://www.phoenix.frihost.net/referer/readme.php Vuln type : Remote File Include RFI Vulnerability Discovered by : iNs Vuln Code: login.php include"$value"; POC: htttp://site.com/path/login.php?value=SHELL.txt?? iNs @ uNkn0wn.eu Gr33tz t0: uNkn0wn.eu - iD -...

mcLinksCounter 1.2 Remote File Include by iNs

App Name : mcLinksCounter 1.2 HomePage: http://www.phpforums.net Vuln type : Remote File Include RFI Vuln Discovered by : iNs BUG: on file stats.php ,login.php ,detail.php : include "$langfile"; PoC: http://www.site.com/path/stats.php?langfile=sH3lLz? iNs @ uNkn0wn.eu Gr33tz t0: uNkn0wn.eu - iD -...

Dalai Forum 1.1 - 'forumreply.php' Local File Inclusion

source: https://www.securityfocus.com/bid/25361/info Dalai Forum is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts...

systemedevote-rfi.txt

//////////////////////////////////////////// Système de vote en temps réel v1.0 Remote File İnclude Bug //////////////////////////////////////////// Author : CrackersChild //////////////////////////////////////////// Contact : [email protected] & http://karanliktaoynayanlar.com &...

Systme de vote en temps rel v1.0 Remote File include Bug

//////////////////////////////////////////// Systиme de vote en temps rйel v1.0 Remote File nclude Bug //////////////////////////////////////////// Author : CrackersChild //////////////////////////////////////////// Contact : [email protected] & http://karanliktaoynayanlar.com &...

Beautifier Version 0.1 Remote File Include Vulnerability // MefistoLabs.Com

------------------------------------------------------------------------------------------------------------------- MefistoLabs.Com PreSents... Script: Beautifier Version 0.1 Script Download1: http://www.beautifier.org/php/beautifier-php-full-current.tar.gz Script Download2:...

phpDVD v1.0.4 (dvd_config_file) Remote File Include Exploit

!/usr/bin/php -q -d shortopentag=on ? print ' //'=============================================================================================== //'Script : phpDVD v1.0.4 //'Author : iLker Kandemir ilkerkandemiratmynet.com //'S.Page : http://ugo.scarlata.it/phpdvd/phpDVD-1.0.4.tar.gz //'Dork :...

0day Linkliste Version 1.2 Remote File Include by iNs

Hi ,founded a new bug on this script ,I wanted to ask you if you could post it in securityvulns.com thanks in advance .. iNs Here what should be posted : App Name : Linkliste Version 1.2 HomePage : http://www.mapos-scripts.de/downloads.php?download=3 Vuln type : Remote File Include RFI Vuln...

Openads (PHPAdsNew) 2.0.8 - lib-remotehost.inc.php Remote File Inclusion

Openads PHPAdsNew 2.0.8 - lib-remotehost.inc.php Remote File Inclusion source: https://www.securityfocus.com/bid/25277/info Openads formerly known as phpAdsNew is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may...

FishCart <= 3.2 RC2 (fc_example.php) Remote File Inclusion Vulnerability

No description provided by source. fishcartv3 fcexample.php Remote File Include Vulnerability +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : fishcartv3 Discovered By : k1n9k0ng Scripts site : http://fishcart.org/fcinstallersnap20070803.zip...

Web News 1.1 - index.php?config[root_ordner] Remote File Inclusion

Web News 1.1 - index.php?configrootordner Remote File Inclusion source: https://www.securityfocus.com/bid/25257/info WebNews is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to...

fishcart-rfi.txt

fishcartv3 fcexample.php Remote File Include Vulnerability +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : fishcartv3 Discovered By : k1n9k0ng Scripts site : http://fishcart.org/fcinstallersnap20070803.zip http://fishcart.org/fishcartsnap2007080...

Shoutbox 1.0 - Shoutbox.php Remote File Inclusion

Shoutbox 1.0 - Shoutbox.php Remote File Inclusion source: https://www.securityfocus.com/bid/25254/info Shoutbox is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application a...

joomlaj-rfi.txt

///// ///// Yollubunlar.org ///// ///// Title:Joomla J! Reactions Component Remote File İnclude Bug Bug:include"$comPath/custom/".$mosConfiglang.".php"; else Author:Yollubunlar.Org Exploit: administrator/components/comjreactions/langset.php?comPath=Evil? Bugs:...