fsbchat09-rfi.txt

AuThor:Silitoad emA!l:SilitoadathotmaildotCom HoMePaGe:http://www.Arabian-FighterZ.com Powered By Silitoad From Arabian-Fighterz Info Website: http://www.zoneur.com Version: 0.9 Download: http://pub.zoneur.com/script/php/fsb/fsbchat/fsbchat-0.9.rar Problem: Include file bug: includeonce $racine...

Phorum 5.1.20 - 'admin.php?module[]' Full Path Disclosure

source: https://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site scripting issues, because the application fails to sufficiently...

IPB (Invision Power Board) Full Path Disclusure

Hello IPB Invision Power Board Full Path Disclusure Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Tested on 2.1.X and 2.2.X Maybe Infected ipskernel/PEAR/Text/Diff3.php ipskernel/PEAR/Text/Diff/Renderer/unified.php...

MySpeach <= 3.0.7 Remote/Local File Inclusion Vulnerability

/======================================= | Advisory :: MySpeach = 3.0.7 | +=======================================+--------------------------------------------------------------- | | | Download link : http://www.graphiks.net/scripts-php/script-7-1-0.html | | Official website : www.graphiks.net | ...

myspeach-inclusion.txt

/=======================================\ | Advisory :: MySpeach = 5.0.0, registerglobals = On, allowurlfopen = On | | Vuln 2 : registerglobals = On | | Risk level : High | | | +-------------------------------------------------------------------------------------------------------+ | | | Program...

MySpeach 3.0.7 - LocalRemote File Inclusion

MySpeach 3.0.7 - LocalRemote File Inclusion /=======================================\ | Advisory :: MySpeach = 5.0.0, registerglobals = On, allowurlfopen = On | | Vuln 2 : registerglobals = On | | Risk level : High | | |...

MySpeach 3.0.7 - Local/Remote File Inclusion

/=======================================\ | Advisory :: MySpeach = 5.0.0, registerglobals = On, allowurlfopen = On | | Vuln 2 : registerglobals = On | | Risk level : High | | | +-------------------------------------------------------------------------------------------------------+ | | | Program...

drake-xss.txt

Hello DrakeCMS multiple vulerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Local File Inclusion 404.php?dprivate=soqor.net? Local File and Full path classes/captcha/captcha.jpg.php?dprivate=../& Xss Cross Site...

DrakeCMS multiple vulerabilities

Hello DrakeCMS multiple vulerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Local File Inclusion 404.php?dprivate=soqor.net? Local File and Full path classes/captcha/captcha.jpg.php?dprivate=../& Xss Cross Site...

phpbb2. 0. 1 2 full path disclosure vulnerability-a vulnerability warning-the black bar safety net

phpbb is a powerful, scalable open source electronic Bulletin system. The latest version and low version are there is a path disclosure issue. Test method: The forum path is/viewtopic. php? p=6&highlight=\xiaohua Will appear the following text: Warning: Compilation failed: missing terminating for...

photostand120-xss.txt

Photostand1.2.0 Multiple Cross Site Scripting Vendor site : http://www.photostand.org/ Global risk : medium XSS ----- + Permanents Message & name fields are vulnerable to xss attacks. This kind of xss are pretty dangerous,because anyone who see the page gone get his cookie stolen and sended to th...

sitex multiple vulnerabilities

global risk:critical upload vulnerability: in user profile upload an avatar with a double extension like : file.php.jpg once it's done,you gone get an error like:Fatal error: Call to undefined function imagedestroy in /. but the last extension jpg will be removed by the script, and stored in :...

Photostand_1.2.0 Multiple Cross Site Scripting

Photostand1.2.0 Multiple Cross Site Scripting Vendor site : http://www.photostand.org/ Global risk : medium XSS ----- + Permanents Message & name fields are vulnerable to xss attacks. This kind of xss are pretty dangerous,because anyone who see the page gone get his cookie stolen and sended to th...

CVE-2006-7062

calendar.php in Kamgaing Email System kmail 2.3 and earlier allows remote attackers to obtain the full path of the server via an invalid d parameter, which leaks the path in an error message...

shopkitplus-lfi.txt

lfi: /shopkitplus/enc/stylecss.php?changetheme=../../../../../../../../../../../../etc/passwd full path: /shopkitplus/events.php?curmonth=01 /shopkitplus/enc/stylecss.php?changetheme= regards laurent gaffié...

CVE-2006-7000

Headstart Solutions DeskPRO allows remote attackers to obtain the full path via direct requests to 1 email/mail.php, 2 includes/init.php, 3 certain files in includes/cron/, and 4 jpgraph.php, 5 jpgraphbar.php, 6 jpgraphpie.php, and 7 jpgraphpie3d.php in includes/graph/, which leaks the path in...

joomla150beta-sql.txt

Hi, These bugs were published in full-disclosure about 2 weeks ago CVE : CVE-2007-0373, CVE-2007-0374 and CVE-2007-0375, CVE-2007-0387 . In Mambo 4.6.1 and Joomla 1.0.11 and 1.5 Beta , the 'id' parameter can cause sql injection when cancelling content editting . Other versions maybe affected too...

Aztek Forum 4.1 Multiple Vulnerabilities Exploit

No description provided by source. !/usr/bin/php AztekForum4.1MultipleVulnerabilitiesExploit header================================================== sploitOwner-root statusTryingtoregisteranewuser sploitLogin/Password-phpsploit8435 statusTryingtogetdatabaseinformations...

Aztek Forum 4.0 Multiple Vulnerabilities Exploit

Exploit for unknown platform in category web applications ================================================ Aztek Forum 4.0 Multiple Vulnerabilities Exploit ================================================ !/usr/bin/php Aztek Forum 4.1 Multiple Vulnerabilities Exploit header...

Full Path Disclosure in Open-Realty ( v2.3.4 )

Hello Vulnerable : Open-Realty Verision : 2.3.4 Web : http://www.open-realty.org Exploit : http://www.example.com/script/index.php?action=listingview&listingID='anything' -------------------- Discoverey By LinuxDrox www.LeZr.Com/vb Best Regards ,,,,...