CVE-2008-3385: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/headchat.inc.php in php Help Agent 1.0 and 1.1 Full allows remote attackers to include and execute arbitrary local files via a .. dot dot in the content parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a U...

CVE-2008-3365: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the languagefull parameter...

Dokeos E-Learning System 1.8.5 Local File Inclusion Vulnerability

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-029 Application: Dokeos E-Learning System Versions Affected: 1.8.5 Vendor URL: http://dokeos.com/ Bug: Local File Include Exploits: YES Reported: 01.07.2008 Vendor response: 05.07.2008 Solution: YES Date ...

[DSECRG-08-033] Local File Include Vulnerability in Pixelpost 1.7.1

Digital Security Research Group DSecRG Advisory DSECRG-08-033 Application: Pixelpost photoblog Versions Affected: 1.7.1 Vendor URL: http://www.pixelpost.org/ Bug: Local File Include Exploits: YES Reported: 22.07.2008 Vendor response: 23.07.2008 Solution: YES Date of Public Advisory: 28.07.2008...

PixelPost 1.7.1 (language_full) Local File Inclusion Vulnerability

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-033 Application: Pixelpost photoblog Versions Affected: 1.7.1 Vendor URL: http://www.pixelpost.org/ Bug: Local File Include Exploits: YES Reported: 22.07.2008 Vendor response: 23.07.2008 Solution: YES Dat...

DSECRG-08-034.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-034 Application: Minishowcase Image Gallery Versions Affected: v09b136 Vendor URL: http://minishowcase.frwrd.net Bug: Local File Include Exploits: YES Reported: 14.07.2008 Second report: 22.07.2008 Vendor response: NONE Solution: NONE Date...

DSECRG-08-033.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-033 Application: Pixelpost photoblog Versions Affected: 1.7.1 Vendor URL: http://www.pixelpost.org/ Bug: Local File Include Exploits: YES Reported: 22.07.2008 Vendor response: 23.07.2008 Solution: YES Date of Public Advisory: 28.07.2008...

PixelPost 1.7.1 - language_full Local File Inclusion

PixelPost 1.7.1 - languagefull Local File Inclusion Digital Security Research Group DSecRG Advisory DSECRG-08-033 Application: Pixelpost photoblog Versions Affected: 1.7.1 Vendor URL: http://www.pixelpost.org/ Bug: Local File Include Exploits: YES Reported: 22.07.2008 Vendor response: 23.07.2008...

PixelPost 1.7.1 (language_full) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== PixelPost 1.7.1 languagefull Local File Inclusion Vulnerability ================================================================== Digital Security Research Group DSecRG...

CVE-2008-3336: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PunBB before 1.2.19 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in 1 include/parser.php and 2 moderate.php...

XRms 1.99.2 - Remote File Inclusion / Cross-Site Scripting / Information Gathering

XMRS Multiple Vulnerabilities ZeroDay at 25-07-2008 Author: AzzCoder [email protected] Product: http://www.xrms.org/ Product Type: CRM Thanks: coresecurity.com Remote File Inclusion File: activities/workflow-activities.php Variable: $includedirectory Required registerglobals: Yes XSS Multiple...

CVE-2008-3297: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in SocialEngine SE before 2.83 allow remote attackers to execute arbitrary SQL commands via 1 an seuser cookie to include/classuser.php or 2 an seadmin cookie to include/classadmin.php...

[DSECRG-08-031] Local File Include Vulnerability in Interact 2.4.1

Digital Security Research Group DSecRG Advisory DSECRG-08-31 Application: Interact E-Learning System Versions Affected: 2.4.1 Vendor URL: http://sourceforge.net/projects/cce-interact Bug: Local File Include Exploits: YES Reported: 03.07.2008 Vendor response: 04.07.2008 Solution: YES Date of Publi...

Flip V3.0 final

DeltaHackingSecurityTEAM Remote File Include Vulnerability Flip V3.0 final Download : http://www.mirrorservice.org/sites/download.sourceforge.net/pub/sourceforge/f/fl/flipsource/Flip-3.0-final.zip AuTh0r : Cru3l.b0y H0ME : WwW.DeltaHacking.Net && WwW.w3bsecurity.IR Email :...

flip-rfi.txt

DeltaHackingSecurityTEAM Remote File Include Vulnerability Flip V3.0 final Download : http://www.mirrorservice.org/sites/download.sourceforge.net/pub/sourceforge/f/fl/flipsource/Flip-3.0-final.zip AuTh0r : Cru3l.b0y H0ME : WwW.DeltaHacking.Net && WwW.w3bsecurity.IR Email :...

Interact E-Learning System 2.4.1 (help.php) LFI Vulnerabilities

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-31 Application: Interact E-Learning System Versions Affected: 2.4.1 Vendor URL: http://sourceforge.net/projects/cce-interact Bug: Local File Include Exploits: YES Reported: 03.07.2008 Vendor response:...

Interact 2.4.1 - 'help.php' Local File Inclusion

Digital Security Research Group DSecRG Advisory DSECRG-08-31 Application: Interact E-Learning System Versions Affected: 2.4.1 Vendor URL: http://sourceforge.net/projects/cce-interact Bug: Local File Include Exploits: YES Reported: 03.07.2008 Vendor response: 04.07.2008 Solution: YES Date of Publi...

DSEGRG-08-31.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-31 Application: Interact E-Learning System Versions Affected: 2.4.1 Vendor URL: http://sourceforge.net/projects/cce-interact Bug: Local File Include Exploits: YES Reported: 03.07.2008 Vendor response: 04.07.2008 Solution: YES Date of Publi...

Interact E-Learning System 2.4.1 (help.php) LFI Vulnerabilities

Exploit for unknown platform in category web applications =============================================================== Interact E-Learning System 2.4.1 help.php LFI Vulnerabilities =============================================================== Application: Interact E-Learning System Versions...

XOOPS 2.0.18 - modulessystemadmin.php?fct Cross-Site Scripting

XOOPS 2.0.18 - modulessystemadmin.php?fct Cross-Site Scripting source: https://www.securityfocus.com/bid/30330/info XOOPS is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the...