VerliAdmin 0.3 - 'language.php' Local File Inclusion

!/usr/bin/perl VerliAdmin = 0.3 Remote Command Execution Exploit linK : http://bohyn.czechweb.cz/ d0rk: allinurl:"verliadmin" cod3d and f0unded by Kw3RLn from Romanian Security Team a.K.A http://RST-CREW.NET Contact: ciriboflacsATYaHOo.com or [email protected] Vurnerable Code in language.php:...

CVE-2006-6613: Undefined Security Weakness

Directory traversal vulnerability in language.php in phpAlbum 0.4.1 Beta 6 and earlier, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to include and execute arbitrary local files or obtain sensitive information via a .. dot dot in the palangincludefile...

P-News <= 1.16 Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================ P-News = 1.16 Remote File Include Vulnerability ================================================ ============================================ P-News 1.16, 1.17 Remote File Inclusion...

cwfm091.txt

+-------------------------------------------------------------------- + + Cwfm-0.9.1 Language Remote File Inclusion + + Original advisory: + + http://www.bb-pcsecurity.de/Websecurity/301/org/Cwfm-0.9.1LanguageRemoteFileInclusion.htm +...

Joomla com_bayesiannaivefilter Component <= 1.1 Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Joomla combayesiannaivefilter Component = 1.1 Inclusion Vulnerability ======================================================================= Pablin77 - XTech Inc Grou...

CVE-2006-3056

SQL injection vulnerability in language.php in VBZooM 1.01 allows remote attackers to execute arbitrary SQL commands via the Action parameter...

CVE-2006-3056: Undefined Security Weakness

SQL injection vulnerability in language.php in VBZooM 1.01 allows remote attackers to execute arbitrary SQL commands via the Action parameter...

VBZooM &lt;&lt;--V1.01 &quot;language.php&quot; SQL injection

============================================= Discovered By: CrAzY CrAcKeR Site:www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-Lover Hacker-Sw33t h4ck3r Breeeeh-BoNym-Rootshill-LiNuXrOOt-SauDiVirUs ============================================= Example:- /language.php?Action=SQL...

DoceboLMS &lt;= 2.0.5 (help.php) Remote File Include Vulnerability

No description provided by source. Vulnerable Script: Docebo LMS 2.05 Discovered: beford xbefordx gmail com Noobs: %22Based+on+DoceboLMS+2.0%22 Vulnerable Files doceboLMS205/modules/credits/business.php = include$GET'lang'.'/language.php'; doceboLMS205/modules/credits/credits.php =...

CVE-2006-1839: Undefined Security Weakness

PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when registerglobals is enabled, allows remote attackers to execute arbitrary code via an FTP URL in the datadir parameter, which satisfies the fileexists function call...

phpAlbum language.php data_dir Parameter Remote File Inclusion

The remote host is running phpAlbum, an open source web photo gallery written in PHP. The version of phpAlbum installed on the remote host fails to sanitize user-supplied input to the 'datadir' parameter of the 'language.php' script before using it in a PHP 'include' function. Provided PHP's...

CVE-2006-0757

Multiple eval injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary PHP code via 1 the contactgroupid parameter in addressbook.update.php, 2 the messageid parameter in addressbook.add.php, 3 the folderid parameter in folders.update.php, and possibly...

CVE-2005-3024

Multiple SQL injection vulnerabilities in vBulletin 3.0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 announcement parameter to announcement.php, the 2 threadforumid or 3 criteria parameters to thread.php, 4 userid parameter to user.php, the 5...

CVE-2005-3020

Multiple cross-site scripting XSS vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 group parameter to css.php, 2 redirect parameter to index.php, 3 email parameter to user.php, 4 goto parameter to language.php, 5 orderby parameter t...

CVE-2005-3020: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in vBulletin before 3.0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 group parameter to css.php, 2 redirect parameter to index.php, 3 email parameter to user.php, 4 goto parameter to language.php, 5 orderby parameter t...