1674 matches found
Synergiser <= 1.2 RC1 Local File Inclusion / Full Path Disclosure
Exploit for unknown platform in category web applications ================================================================= Synergiser | |||| /| / / --------------------------------------------------------------- Synergiser = 1.2 RC1 Local File Inclusion & Full path disclosure Download:...
Synergiser 1.2 RC1 - Local File Inclusion Full Path Disclosure
Synergiser 1.2 RC1 - Local File Inclusion Full Path Disclosure --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
syner-lfi.txt
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg Original here: http://www.inj3ct-it.org/exploit/syner.txt...
Local File Inclusion and Information Leakage vulnerabilities in PHP-Nuke
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Local File Inclusion и Information Leakage уязвимостях в PHP-Nuke. Уязвимости в скриптах autohtml.php и autohtml0.php в параметре filename. Local File Inclusion: http://site/autohtml.php?filename=../file.php...
Flatnuke 3 Remote Command Execution / Privilege Escalation
No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...
Flatnuke 3 Remote Command Execution / Privilege Escalation
Exploit for unknown platform in category web applications ========================================================== Flatnuke 3 Remote Command Execution / Privilege Escalation ========================================================== --------------------------------------------------------------...
Flatnuke3 File Manager Module - Unauthorized Access
Flatnuke3 File Manager Module - Unauthorized Access source: https://www.securityfocus.com/bid/26155/info Flatnuke3 is prone to an unauthorized-access vulnerability because it fails to adequately verify administrative credentials while logging in via the 'File Manager' module. An attacker can...
Flatnuke3 File Manager Module - Unauthorized Access
source: https://www.securityfocus.com/bid/26155/info Flatnuke3 is prone to an unauthorized-access vulnerability because it fails to adequately verify administrative credentials while logging in via the 'File Manager' module. An attacker can exploit this vulnerability to gain administrative contro...
CVE-2007-5444
CMS Made Simple 1.1.3.1 allows remote attackers to obtain the full path via a direct request for unspecified files...
CVE-2007-5444
CMS Made Simple 1.1.3.1 is vulnerable to a path-disclosure issue: remote attackers can obtain the server’s full path by directly requesting unspecified files. This is a remote, unauthenticated weakness with partial confidentiality impact. No explicit fix/version is stated in the provided document...
CVE-2007-5444
CMS Made Simple 1.1.3.1 allows remote attackers to obtain the full path via a direct request for unspecified files...
CVE-2007-5306
ELSEIF CMS Beta 0.6 allows remote attackers to obtain sensitive information full path via unspecified vectors to utilisateurs/votesresultats.php...
Else If CMS 0.6 - Multiple Vulnerabilities
Else If CMS 0.6 - Multiple Vulnerabilities ELSEIF CMS Tested on "Else If version Beta 0.6" Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] These Are Examples .. iam tiered fetching the injected files : Remote File inclusion...
Multiple vulnerabilities in Joomla 1.5 RC 1
Hi, There are several security bugs in Joomla 1.5 RC 1 : 1 An exploitable sql injection in the archive section . I sent the exploit to the joomla developer, but here I am not going to publish it : 2 A XSS bug, again in the archive section . 3 Several full path disclosure bugs . Direct access to...
PHP JackKnife [multiple vulnerabilities]
Vendor site: http://www.phpjk.com/ Product: phpjackknife Bug: sql injection , xss , full path Risk: high Note: works regarless of php.ini settings Description: PHP JackKnife PHPJK is freely downloadable PHP gallery software that you can use to instantly create you own online web gallery Injection...
Full Path Disclosure in SendCard
Hello Vulnerable : SendCard Version : 3.3.0 Web : http://www.sendcard.org Exploit : http://example.com/sendcard/sendcard.php?sclanguage='Anything' -------------------- Discovered By LinuxDrox www.LeZr.Com Best Regards ,,,...
Full Path Disclosure in Almnzm
Hello Vulnerable : Almnzm Web : http://www.almnzm.com Exploit : http://example.com/almnzm/index.php?action=activateorder&orderid='Anything' -------------------- Discovered By LinuxDrox www.LeZr.Com Best Regards ,,,,...
PsychoStats 2.3 - Server.php Full Path Disclosure
PsychoStats 2.3 - Server.php Full Path Disclosure source: https://www.securityfocus.com/bid/24039/info PsychoStats is prone to a path-disclosure issue when invalid data is submitted. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks...
Caucho Resin 3.1 - Encoded Space Request Full Path Disclosure
Caucho Resin 3.1 - Encoded Space Request Full Path Disclosure source: https://www.securityfocus.com/bid/23985/info Caucho Resin is prone to multiple information-disclosure vulnerabilities because it fails to adequately sanitize user-supplied data. Attackers can exploit these issues to access...
PHPChain vuln.
PHPChain vuln. Vuln. discovered by : r0t Date: 2 May 2007 vendor:http://www.globalmegacorp.org/PHPChain/ affected versions: 1.0 and previous orginal advisory:http://pridels.blogspot.com/2007/05/phpchain-vuln.html PHPChain contains a flaw that allows a remote Cross-Site Scripting attacks.Input...