CPGNuke Dragonfly 9.0.6.1 - Remote Commands Execution Exploit

No description provided by source. ?php ---dragonfly9.0.6.1inclxpl.php 20.15 07/02/2006 CPGNuke Dragonfly 9.0.6.1 remote commands execution through arbitrary local inclusion - Sun-Tzu Drangonfly killing - coded by rgod site: http://rgod.altervista.org - this works regardless of magicquotesgpc...

Unclassified NewsBoard <= 1.6.1 patch 1 Arbitrary Local Inclusion Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Unclassified NewsBoard = 1.6.1 patch 1 ABBCConfigsmileset arbitrary\r\n; echo local inclusion\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo works with registerglobals ...

4Images <= 1.7.1 (Local Inclusion) Remote Code Execution Exploit

No description provided by source. ?php ----4images171inclxpl.php 6.45 26/02/2006 4Images = 1.7.1 remote commands execution through arbitrary local inclusion coded by rgod site: http://retrogod.altervista.org - this works regardless of magicquotesgpc settings Sun-Tzu: Having doomed spies, doing...

X7 Chat <= 2.0 (help_file) Remote Commands Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo X7 Chat =2.0 \helpfile\ arbitrary local inclusion\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n; echo - works regardless of magicquotesgpc settings\r\n; echo if avatar uploads a...

SendCard <= 3.4.0 Unauthorized Administrative Access Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo SendCard = 3.4.0 unauthorized administrative access / remote commands\n; echo execution exploit\n; echo by rgod [email protected]\n; echo site: http://retrogod.altervista.org\n; echo dork: \Powered by sendcard - an...

Sandbox 2.0.3 Multiple Remote Vulnerabilities

Sandbox 2.0.3 Multiple Remote Vulnerabilities Name Sandbox Vendor http://www.iguanadons.net Versions Affected 2.0.3 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2010-07-07 X. INDEX I. ABOUT THE APPLICATION II...

Open-AudIT include_lang.php language Parameter Traversal Local File Inclusion

The web server hosts Open-AudIT, an open source network auditing application written in PHP. At least one install of Open-AudIT on the remote host fails to sanitize user-supplied input to the 'language' parameter before using it in 'includelang.php' to include PHP code. Regardless of PHP's...

lanewsfactory - Multiple Vulnerabilities

lanewsfactory - Multiple Vulnerabilities LaNewsFactory Multiple Remote Vulnerabilities http://www.salvatorefresta.net/files/adv/LaNewsFactory%20Multiple%20Remote%20Vulnerabilities-19042010.txt Name LaNewsFactory Vendor Christophe Brocas Versions Affected = 1.0.0 Author Salvatore Fresta aka...

LightNEasy 3.1.x Multiple Vulnerabilite

Exploit for php platform in category web applications ======================================= LightNEasy 3.1.x Multiple Vulnerabilite ======================================= Title: LightNEasy 3.1.x Multiple Vulnerabilites Vendor: http://lightneasy.org/ Dork: "Powered by LightNEasy" AUTHOR:...

CVE-2009-2218

Multiple PHP remote file inclusion vulnerabilities in phpCollegeExchange 0.1.5c, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the home parameter to 1 ihead.php, 2 inav.php, 3 usernew2.php, or 4 house/myrents.php; or 5 allbooks.php, 6 home.php,...

Fuzzylime CMS 3.03a - Local Inclusion Arbitrary File Corruption

Fuzzylime CMS 3.03a - Local Inclusion Arbitrary File Corruption +------------------------------------------------------------------------+ | fuzzylime cms = 3.03a local inclusion / arbitrary file corruption poc | +-----------+------------------------------------------------------------+ | by stak...

Fuzzylime CMS 3.03a - Local Inclusion / Arbitrary File Corruption

+------------------------------------------------------------------------+ | fuzzylime cms = 3.03a local inclusion / arbitrary file corruption poc | +-----------+------------------------------------------------------------+ | by staker | +-----------+---------------------+ | mail:...

fuzzylime cms <= 3.03a Local Inclusion / Arbitrary File Corruption PoC

Exploit for unknown platform in category web applications ====================================================================== fuzzylime cms = 3.03a Local Inclusion / Arbitrary File Corruption PoC ======================================================================...

4Images 1.7.6 Local Inclusion Vulnerability

Bug file : global.php if isset$HTTPGETVARS'l' || isset$HTTPPOSTVARS'l' $requestedl = isset$HTTPGETVARS'l' ? trim$HTTPGETVARS'l' : trim$HTTPPOSTVARS'l'; if $requestedl != $config'languagedir' && fileexistsROOTPATH.'lang/'.$requestedl.'/main.php' $l = $requestedl; $config'languagedir' = $l;...

chicomas-rfilfi.txt

Author: Hadi Kiamarsi Exploit By : Hadi Kiamarsi Email : [email protected] CMS: chicomas.2.0.4 Download CMS : http://garr.dl.sourceforge.net/sourceforge/chicomas/chicomas.2.0.4.zip web site : http://ircrash.com File Inclusion Local & Remote Bugs : Local File Inclusion:...

PHPCMS 2007 show_pic.inc.php本地包含漏洞

PHPCMS 网站管理系统是一个基于PHP+MYSQL的全站生成html的建站系统，经过完善设计并适用于各种服务器环境如UNIX、LINUX、WINDOWS等的高效、全新、快速、优秀的网站解决方案 showpic.inc.php 是否配置了src变量，如果有的话就把路径值赋给file。 这里src的类型没有判断。跳到根目录提交配置文件就可以读取数据库的连接密码了。 PHPCMS2007 官方暂时没有解决方案 http://www.phpcms.cn/ POST /picture/showpic.php?src=/../../../config.inc.php...

Entertainment CMS (Local Inclusion) Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl Entertainment CMS Remote Command Execution Exploit Download: http://rapidshare.com/files/39640099/enter-cms.rar Exploit: http://site.com/path/custom.php?pagename=Local File Inclusion; Example:...

midiripoff.txt

lintah|adv|15@2006=========php b/d / / / ooo000-------------------------------- -------------000ooo/ / / \ \ \ Indonesian Cyber-Terrorist Grey Hats / / \ / / \ iFX a.k.a inversFX / / | ifx@... | | / \ \ / \ \ | | | ! ! | :. :/ | | | | | | locate : Indonesia, Jakarta | | |...

Midicart vulerable

lintah|adv|15@2006=========MidiCart===php b/d / / / ooo000-------------------------------- -------------000ooo/ / / Indonesian Cyber-Terrorist Grey Hats / / / / iFX a.k.a inversFX / / | ifx@... | | / / | | | ! ! | :. :/ | | | | | | locate : Indonesia, Jakarta | | | -------------------------------...

PHP Upload Center 2.0 (activate.php) File Include Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= PHP Upload Center 2.0 activate.php File Include Vulnerabilities ================================================================= Coding 4 Fun Name = PHP Upload Center v2.0 ...