CVE-2014-9185

Static code injection vulnerability in install.php in Morfy CMS 1.05 allows remote authenticated users to inject arbitrary PHP code into config.php via the siteurl parameter...

CVE-2014-9185

Static code injection vulnerability in install.php in Morfy CMS 1.05 allows remote authenticated users to inject arbitrary PHP code into config.php via the siteurl parameter...

CVE-2014-9185: Improper Control of Generation of Code

Static code injection vulnerability in install.php in Morfy CMS 1.05 allows remote authenticated users to inject arbitrary PHP code into config.php via the siteurl parameter...

HybridAuth <= 2.2.2 'install.php' RCE Vulnerability

HybridAuth is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HybridAuth install.php PHP Code Execution

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'HybridAuth install.php PHP Code Execution', 'Description' = %q This module exploits a PHP code execution vulnerability in HybridAuth...

HybridAuth install.php PHP Code Execution

This module exploits a PHP code execution vulnerability in HybridAuth versions 2.0.9 to 2.2.2. The install file 'install.php' is not removed after installation allowing unauthenticated users to write PHP code to the application configuration file 'config.php'. Note: This exploit will overwrite th...

Open Web Analytics 1.5.7 Cross Site Scripting / Remote File Inclusion

Exploit Title : Open Web Analytics - v: 1.5.7 multiple vulnerability Author : Govind Singh aka NullPort Vendor : http://www.openwebanalytics.com/ Download Link : http://downloads.openwebanalytics.com/ Google Dork : "powered by Open Web Analytics" Date : 14/07/2014 Discovered at : IHT Lab 1ND14N...

ttCMS 2.2 / ttForum 1.1 install.php installdir Parameter Remote File Inclusion

No description provided by source...

McNews 1.x Install.PHP Arbitrary File Include Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class McNewsRemoteFileIncludePOCBase: vulID = '78899' version = '1' vulDate = '2005-03-17' author = ' '...

Moodle <= 1.8.3 'install.php' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27259/info Moodle is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

CS Cart 1.3.3 - (install.php) Cross Site Scripting Vulnerability

No description provided by source. Exploit Title: CS CART 1.3.3 INSTALL.PHP XSS Date: 2010-09-08 Author: LogicGate Software Link: http://cs-cart.smartcode.com/ Version: 1.3.3 Tested on: N/A CVE : N/A If install.php was not removed after installation simply make an html file with the following cod...

PHP-Agenda <= 2.2.5 - Remote File Overwriting Vulnerabilities

No description provided by source. Salvatore drosophila Fresta + Application: PHP-agenda + Version: = 2.2.5 + Website: http://php-agenda.sourceforge.net + Bugs: A Remote File Overwriting + Exploitation: Remote + Date: 10 Apr 2009 + Discovered by: Salvatore drosophila Fresta + Author: Salvatore...

Piwigo 2.4.6 (install.php) Remote Arbitrary File Read/Delete Vulnerability

No description provided by source. Piwigo 2.4.6 install.php Remote Arbitrary File Read/Delete Vulnerability Vendor: Piwigo project Product web page: http://www.piwigo.org Affected version: 2.4.6 Summary: Piwigo is a photo gallery software for the web that comes with powerful features to publish a...

bonfire 0.7 /install.php 信息泄露漏洞

No description provided by source...

PhpSiteManager 1.1.1 Cross Site Scripting

Exploit Title: PhpSiteManager 1.1.1 Cross site scripting Date: 2014 18 March Author: Dr.3v1l Vendor Homepage: http://sourceforge.net/projects/bakari Download : http://filewatcher.com/m/phpSMv1.1.2.tgz.338496-0.html Version : 1.1.1 Tested on: Windows Category: webapps Google Dork: intext:"Powered ...

WebTester 5.x - Multiple Vulnerabilities

========================================================================================== WebTester 5.x Multiple Vulnerabilities ==========================================================================================...

WebTester 5.x Multiple Vulnerabilities

WebTester 5.x Multiple Vulnerabilities suffer from SQL Injection Vulnerability, Arbitrary File Upload Vulnerability, PHPInfo Disclosure and Leftover install.php File. ========================================================================================== WebTester 5.x Multiple Vulnerabilities...

WebTester 5.x - Multiple Vulnerabilities

WebTester 5.x - Multiple Vulnerabilities ========================================================================================== WebTester 5.x Multiple Vulnerabilities ==========================================================================================...

WebTester 5.x SQL Injection / File Upload / Disclosure

========================================================================================== WebTester 5.x Multiple Vulnerabilities ==========================================================================================...

fluxbb存在PHP本地文件包含漏洞

简要描述： 很明显的本地包含 详细说明： 文件：install.php // If we've been passed a default language, use it $installlang = isset$REQUEST'installlang' ? puntrim$REQUEST'installlang' : 'English'; // If such a language pack doesn't exist, or isn't up-to-date enough to translate this page, default to English if...