Immunity Canvas: PORTALLWEBPHP_INCLUDE

Name| portallwebphpinclude ---|--- CVE| CVE-2008-0645 Exploit Pack| CANVAS Description| Portail Web Php remote file include Notes| CVE Name: CVE-2008-0645 VENDOR: Portail Web Repeatability: Infinite References: http://www.securityfocus.com/bid/27616 CVE Url:...

DSECRG-08-012.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-012 Application: Azucar CMS Versions Affected: 1.3 Vendor URL: http://azucarcms.sourceforge.net/enhome.htm Bug: Multiple Local File Include Exploits: YES Reported: 30.01.2008 Vendor Response: NONE Date of Public Advisory: 05.02.2008 Author...

[DSECRG-08-012] Multiple LFI in Azucar CMS 1.3

Digital Security Research Group DSecRG Advisory DSECRG-08-012 Application: Azucar CMS Versions Affected: 1.3 Vendor URL: http://azucarcms.sourceforge.net/enhome.htm Bug: Multiple Local File Include Exploits: YES Reported: 30.01.2008 Vendor Response: NONE Date of Public Advisory: 05.02.2008 Author...

Immunity Canvas: MINDMELD_INCLUDE

Name| mindmeldinclude ---|--- CVE| CVE-2008-0572 Exploit Pack| CANVAS Description| Mindmeld remote file include Notes| CVE Name: CVE-2008-0572 VENDOR: Mindmeld Repeatability: Infinite References: http://www.securityfocus.com/bid/27538 CVE Url: https://vulners.com/cve/CVE-2008-0572 CVSS: 6.8...

XOOPS 2.0.18 Local File Inclusion / URL Redirecting Vulnerabilities

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-009 Application: XOOPS Versions Affected: XOOPS 2.0.18 Vendor URL: http://www.xoops.org/ Bugs: Local File Include,URL Redirecting phishing Exploits: YES Reported: 28.01.2008 Vendor response: 28.01.2008 Da...

[DSECRG-08-009] xoops 2.0.18 Local File Include

Digital Security Research Group DSecRG Advisory DSECRG-08-009 Application: XOOPS Versions Affected: XOOPS 2.0.18 Vendor URL: http://www.xoops.org/ Bugs: Local File Include,URL Redirecting phishing Exploits: YES Reported: 28.01.2008 Vendor response: 28.01.2008 Date of Public Advisory: 04.02.2008...

[OPEN[DSECRG-08-010] VHD Web Pack 2.0 Local File Include

Digital Security Research Group DSecRG Advisory DSECRG-08-010 Application: VHD Web Pack 2.0 Versions Affected: VHD Web Pack 2.0 Vendor URL: http://www.divideconcept.net/index.php?page=vhdwebpack/index.php Bugs: Local File Include Exploits: YES Reported: 28.01.2008 Vendor response: NONE Date of...

CVE-2008-0572: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Mindmeld 1.2.0.10 allow remote attackers to execute arbitrary PHP code via a URL in the MMGLOBALShome parameter to 1 acweb/adminindex.php; and 2 ask.inc.php, 3 learn.inc.php, 4 manage.inc.php, 5 mind.inc.php, and 6 sensory.inc.php in include/...

DSECRG-08-009.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-009 Application: XOOPS Versions Affected: XOOPS 2.0.18 Vendor URL: http://www.xoops.org/ Bugs: Local File Include,URL Redirecting phishing Exploits: YES Reported: 28.01.2008 Vendor response: 28.01.2008 Date of Public Advisory: 04.02.2008...

DSECRG-08-010.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-010 Application: VHD Web Pack 2.0 Versions Affected: VHD Web Pack 2.0 Vendor URL: http://www.divideconcept.net/index.php?page=vhdwebpack/index.php Bugs: Local File Include Exploits: YES Reported: 28.01.2008 Vendor response: NONE Date of...

VHD Web Pack 2.0 - 'index.php' Local File Inclusion

Digital Security Research Group DSecRG Advisory DSECRG-08-010 Application: VHD Web Pack 2.0 Versions Affected: VHD Web Pack 2.0 Vendor URL: http://www.divideconcept.net/index.php?page=vhdwebpack/index.php Bugs: Local File Include Exploits: YES Reported: 28.01.2008 Vendor response: NONE Date of...

VHD Web Pack 2.0 - index.php Local File Inclusion

VHD Web Pack 2.0 - index.php Local File Inclusion Digital Security Research Group DSecRG Advisory DSECRG-08-010 Application: VHD Web Pack 2.0 Versions Affected: VHD Web Pack 2.0 Vendor URL: http://www.divideconcept.net/index.php?page=vhdwebpack/index.php Bugs: Local File Include Exploits: YES...

XOOPS 2.0.18 Local File Inclusion / URL Redirecting Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== XOOPS 2.0.18 Local File Inclusion / URL Redirecting Vulnerabilities =================================================================== Digital Security Research Group...

XOOPS 2.0.18 - Local File Inclusion / URL Redirecting

Digital Security Research Group DSecRG Advisory DSECRG-08-009 Application: XOOPS Versions Affected: XOOPS 2.0.18 Vendor URL: http://www.xoops.org/ Bugs: Local File Include,URL Redirecting phishing Exploits: YES Reported: 28.01.2008 Vendor response: 28.01.2008 Date of Public Advisory: 04.02.2008...

Mindmeld 1.2.0.10 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. Summary Mindmeld is an, "enterprise-capable knowledge-sharing system" written in PHP. There are multiple remote file inclusion vulnerabilities in Mindmeld version 1.2.0.10 latest version. Details 1. Vulnerable File and Line: Mindmeld-1.2.0.10/acweb/adminindex.ph...

Nilsons Blogger 0.11 - comments.php Local File Inclusion

Nilsons Blogger 0.11 - comments.php Local File Inclusion source: https://www.securityfocus.com/bid/27559/info Nilson's Blogger is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using...

Joomla Component ChronoForms 2.3.5 RFI Vulnerabilities

No description provided by source. +By CrackersChild+ Script.......: CHRONOFORMS version V2.3.5 Down.........: http://www.joomlaos.de/option,comremository/Itemid,41/func,startdown/id,2810.html Author.......: CrackersChild | [email protected] & [email protected] Class........: Remote...

CVE-2008-0513: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in parser/include/class.cachephpcms.php in phpCMS 1.2.2 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter to parser/parser.php, as demonstrated by a filename ending with %00.gif, a different vector than CVE-2005-1840...

CVE-2008-0506: Improper Input Validation

include/imageObjectIM.class.php in Coppermine Photo Gallery CPG before 1.4.15, when the ImageMagick picture processing method is configured, allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 quality, 2 angle, or 3 clipval parameter to picEditor.php...

joomlachrono-rfi.txt

+By CrackersChild+ Script.......: CHRONOFORMS version V2.3.5 Down.........: http://www.joomlaos.de/option,comremository/Itemid,41/func,startdown/id,2810.html Author.......: CrackersChild | [email protected] & [email protected] Class........: Remote File İnclude Vulnerability...