Multiple vulnerabilities in Joomla 1.5 RC 1

Hi, There are several security bugs in Joomla 1.5 RC 1 : 1 An exploitable sql injection in the archive section . I sent the exploit to the joomla developer, but here I am not going to publish it : 2 A XSS bug, again in the archive section . 3 Several full path disclosure bugs . Direct access to...

Joomla multiple vulerabilities

Hello Joomla multiple vulerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Affected Versions 1.0.X - tested on 1.0.12 and 1.5 maybe affected - not tested but probebly affected sql injection...

phpTrafficA < 1.4.2

Application: phpTrafficA 1.4.2 Web Site: http://soft.zoneo.net/phpTrafficA/ Versions: all Platform: linux, windows Bug: injection sql , xss , full path ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Credits =========== 1 Introduction ===========...

NetClassifieds (SQL/XSS/Full Path) Multiple Remote Vulnerabilities

No description provided by source. Application: NetClassifieds: -Free Edition -Standard Edition -Professional Edition -Premium Edition Web Site: http://www.scriptdevelopers.net/ Versions: all Platform: linux, windows Bug: multiple injection sql , xss , full path Fix Available: Yes...

NetClassifieds (SQL/XSS/Full Path) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== NetClassifieds SQL/XSS/Full Path Multiple Remote Vulnerabilities ================================================================== Application: NetClassifieds: -Free Editi...

NetClassifieds [multiple vulnerabilities]

Application: NetClassifieds version: -Free Edition -Standard Edition -Professional Edition -Premium Edition Web Site: http://www.scriptdevelopers.net/ Versions: all Platform: linux, windows Bug: multiple injection sql , xss , full path Fix Available: Yes...

NetClassifieds - SQL Injection Cross-Site Scripting Full Path

NetClassifieds - SQL Injection Cross-Site Scripting Full Path Application: NetClassifieds: -Free Edition -Standard Edition -Professional Edition -Premium Edition Web Site: http://www.scriptdevelopers.net/ Versions: all Platform: linux, windows Bug: multiple injection sql , xss , full path Fix...

NetClassifieds - SQL Injection / Cross-Site Scripting / Full Path

Application: NetClassifieds: -Free Edition -Standard Edition -Professional Edition -Premium Edition Web Site: http://www.scriptdevelopers.net/ Versions: all Platform: linux, windows Bug: multiple injection sql , xss , full path Fix Available: Yes...

Full Path Disclosure in SendCard

Hello Vulnerable : SendCard Version : 3.3.0 Web : http://www.sendcard.org Exploit : http://example.com/sendcard/sendcard.php?sclanguage='Anything' -------------------- Discovered By LinuxDrox www.LeZr.Com Best Regards ,,,...

PHP JackKnife [multiple vulnerabilities]

Vendor site: http://www.phpjk.com/ Product: phpjackknife Bug: sql injection , xss , full path Risk: high Note: works regarless of php.ini settings Description: PHP JackKnife PHPJK is freely downloadable PHP gallery software that you can use to instantly create you own online web gallery Injection...

Full Path Disclosure in Almnzm

Hello Vulnerable : Almnzm Web : http://www.almnzm.com Exploit : http://example.com/almnzm/index.php?action=activateorder&orderid='Anything' -------------------- Discovered By LinuxDrox www.LeZr.Com Best Regards ,,,,...

PsychoStats 2.3 - Server.php Full Path Disclosure

PsychoStats 2.3 - Server.php Full Path Disclosure source: https://www.securityfocus.com/bid/24039/info PsychoStats is prone to a path-disclosure issue when invalid data is submitted. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks...

Caucho Resin 3.1 - Encoded Space Request Full Path Disclosure

Caucho Resin 3.1 - Encoded Space Request Full Path Disclosure source: https://www.securityfocus.com/bid/23985/info Caucho Resin is prone to multiple information-disclosure vulnerabilities because it fails to adequately sanitize user-supplied data. Attackers can exploit these issues to access...

PHPChain vuln.

PHPChain vuln. Vuln. discovered by : r0t Date: 2 May 2007 vendor:http://www.globalmegacorp.org/PHPChain/ affected versions: 1.0 and previous orginal advisory:http://pridels.blogspot.com/2007/05/phpchain-vuln.html PHPChain contains a flaw that allows a remote Cross-Site Scripting attacks.Input...

Remote file inclusion

PHP remote file inclusion vulnerability in config.php in Built2Go PHP Link Portal 1.79 allows remote attackers to execute arbitrary PHP code via a URL in the fullpathtodb parameter...

CVE-2007-2250

admin.php in Phorum before 5.1.22 allows remote attackers to obtain the full path via the module parameter...

lwphpbb2-rfi.txt

------=Part5959220650484.1177339131270 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline AuThor:Silitoad emA!l:SilitoadathotmaildotCom HoMePaGe: http://www.Arabian-FighterZ.com Info LWphpBB2 Version: 0.4c Problem: Full path...

modx-rfi.txt

AuThor:Silitoad emA!l:SilitoadathotmaildotCom HoMePaGe:http://www.silitoad.org Powered By Silitoad From Arabian-Fighterz Info Website: http://modxcms.com/ Version: 0.9.5 Download: http://modxcms.com/assets/snippets/filedownload/download.php?path=YnVpbGRz&fileName=modx-0.9.5.zip Problem: Full path...

cm4p-rfi.txt

AuThor:Silitoad emA!l:SilitoadathotmaildotCom HoMePaGe: http://www.Arabian-FighterZ.com Info website: http://www.mariovaldez.net cms: cm4p Version: 0.6.1 Download: http://www.mariovaldez.net/software/cm4p/files/cm4p0.6.1.zip Problem: Include file bug: includeonce $pathpre . "cm/cmanon.inc.php";...

metabb-rfi.txt

AuThor:Silitoad emA!l:SilitoadathotmaildotCom HoMePaGe: http://www.Arabian-FighterZ.com Info cms: metabb Version: 6 Download:http://www.hotscripts.com/jump.php?listingid=61127&jumptype=1 Problem: Include file bug: includeonce$phprootpath . 'rabbitoshi/includes/functionsrabbitoshicron. Vuls 1.Full...