PHProg 1.0 - index.php?album Cross-Site Scripting

PHProg 1.0 - index.php?album Cross-Site Scripting source: https://www.securityfocus.com/bid/19957/info PHProg is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site scripting and local...

PHProg 1.0 - index.php?lang Traversal Arbitrary File Access

PHProg 1.0 - index.php?lang Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/19957/info PHProg is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site scripting and loca...

PHP-Proxima 6.0 - BB_Smilies.php Local File Inclusion

PHP-Proxima 6.0 - BBSmilies.php Local File Inclusion source: https://www.securityfocus.com/bid/19840/info PHP-Proxima is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary local...

local file include in PHP-Nuke (autohtml.php)

local file include in PHP-Nuke autohtml.php Rish : High Class : Local Script : autohtml.php Thanks : www.lezr.com/vb & All kuwait hackers Link : http://www.lezr.com/vb/showthread.php?p=104324 Drkiz : allinurl:"autohtml.php" autohtml.php?op=modload&name=The-file-you-want-to-include Exampel :...

PHP-Nuke 2.0 AutoHTML Module - Local File Inclusion

PHP-Nuke 2.0 AutoHTML Module - Local File Inclusion source: https://www.securityfocus.com/bid/19525/info PHP-Nuke AutoHTML Module is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit may allow an attacker to execute arbitra...

phpMyAdmin import_blacklist Variable Overwriting

The version of phpMyAdmin installed on the remote host fails to properly protect the global 'importblacklist' variable, which is used in the 'libraries/grabglobals.lib.php' script to protect global variables in its registerglobals emulation layer. An unauthenticated attacker can exploit this flaw...

VisNetic Mail Server 8.3.5 - Multiple File Inclusions

VisNetic Mail Server 8.3.5 - Multiple File Inclusions source: https://www.securityfocus.com/bid/19002/info VisNetic Mail Server is prone to multiple local file-include vulnerabilities and a remote file includes vulnerability. These issues are due to a failure in the application to properly saniti...

Forum 5 - pm.php Local File Inclusion

Forum 5 - pm.php Local File Inclusion source: https://www.securityfocus.com/bid/18967/info Forum 5 is prone to a local file-include vulnerability. The application fails to sanitize user input when executing the script. In particular the script fails to check for the presence of a...

PHPMyDesktopArcade 1.0 - index.php Local File Inclusion

PHPMyDesktopArcade 1.0 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/18185/info phpMyDesktop|arcade is prone to a local file-include vulnerability. This may allow unauthorized users to view files and to execute local scripts. An attacker may also be able to execute...

tseekdir.cgi<--Local File Include

---------------------------------- foud by: BoNy-m Site: http://www.alshmokh.com E-mail: [email protected] ---------------------------------- Search: allinurl:tseekdir.cgi example: /tseekdir.cgi?location=/etc/passwd00 /tseekdir.cgi?id=1055&location=/etc/passwd00...

Blursoft Blur6ex 0.3.462 - index.php Local File Inclusion

Blursoft Blur6ex 0.3.462 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/17554/info Blur6ex is prone to a local file-include vulnerability that may allow an unauthorized user to view files and to execute local scripts...

Coppermine 1.4.4 - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/17570/info Coppermine is prone to a local file-include vulnerability. This may allow unauthorized users to view files and to execute local scripts. Version 1.4.4 is vulnerable to this issue; other versions may also be affected...

PAJAX < 0.5.2 Multiple Vulnerabilities

The remote host is running PAJAX, a PHP library for remote asynchronous objects in JavaScript. The version of PAJAX installed on the remote host fails to validate input to the 'pajax/pajaxcalldispatcher.php' script before using it in a PHP 'eval' function. An unauthenticated attacker can exploit...

Shopweezle 2.0 multiple vuln.

Shopweezle 2.0 multiple vuln. Vuln. discovered by : r0t Date: 9 april 2006 vendor:http://shopweezle.de/ affected versions: ShopWeezle PERSONAL ShopWeezle PROFESSIONAL ShopWeezle PROFESSIONAL+ orginal advisory: http://pridels.blogspot.com/2006/04/shopweezle-20-multiple-vuln.html Vuln. description:...

Help Center Live module.php local file include flaw

The remote web server contains a PHP script that is affected by a local file file include vulnerability. Description : The remote host is running Help Center Live, a help desk tool written in PHP. The remote version of Help Center Live fails to sanitize input to the SPDX-FileCopyrightText: 2005...

CuteNews &lt;= 1.4.1 (function.php) Local File Include Exploit

No description provided by source. ?php // Happy NEW Iranian year . // Happy Norouz PERSIAN celebration // CuteNews 1.4.1 CutePHP.com Hash password Finder // by Hamid Ebadi // http://hamid.ir // Bug Discovered and Exploited by Hamid Ebadi .: Hamid Network Security Team :. // run it from your...

Loudblog 0.41 SQL Injection, Local file read/include

"Loudblog is a sleek and easy-to-use Content Management System CMS for publishing media content on the web." SQL Injection in podcast.php magicquotes=off: http://target/loudblog/podcast.php?id=1' and '1'='0' union select...

LoudBlog 0.41 - 'index.php?template' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/17023/info Loudblog is prone to multiple input-validation vulnerabilities: - An SQL-injection vulnerability. - Two local file-include vulnerabilities. - An information-disclosure vulnerability. These issues allow remote attackers to execute arbitrary PHP...

LoudBlog 0.41 - 'backend_settings.php' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/17023/info Loudblog is prone to multiple input-validation vulnerabilities: - An SQL-injection vulnerability. - Two local file-include vulnerabilities. - An information-disclosure vulnerability. These issues allow remote attackers to execute arbitrary PHP...

SPiD 1.3.1 - Scan_Lang_Insert.php Local File Inclusion

SPiD 1.3.1 - ScanLangInsert.php Local File Inclusion source: https://www.securityfocus.com/bid/16822/info SPiD is prone to a local file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of this issue may...