3826 matches found
Directory traversal
Directory traversal vulnerability in getConfig.php in the Page Flip Image Gallery plugin 0.2.2 and earlier for WordPress, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the bookid parameter. NOTE: some of these details are obtained from third...
Constructr CMS 3.02.5 SQL Injection / Traversal
Constructr CMS http://constructr-cms.org/ - = 3.02.5 "Stable" - magicquotesgpc = Off registerglobals = On - Directory Traversal - Source Disclosure - Arbitrary File Creation - Etc Etc Etc - http://site/constructr/backend/template.php?editfile= Db info: ../config/config.inc.php - SQL -...
CMS NetCat <= 3.12 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================== CMS NetCat = 3.12 Multiple Remote Vulnerabilities ================================================== NetCat = 3.12 Multiple Remote Vulnerabilities The description: The set vulnerability in...
CMS NetCat 3.12 - Multiple Vulnerabilities
CMS NetCat 3.12 - Multiple Vulnerabilities NetCat &control= etc. 4. HTTP Response Sp...
Calendar Script 1.1 (Auth Bypass) SQL Injection Vulnerability
No description provided by source. ----------------------------------------------------- Calendar Script v1.1 Admin Login Bypass Vulnerability ----------------------------------------------------- by athos - stakerathotmaildotit http://www.hotscripts.com/jump.php?listingid=71365&jumptype=1 File...
PHPLD 3.3 - Blind SQL Injection
phpLD 3.3 Blind SQL Injection http://www.phplinkdirectory.com/ magicquotesgpc = Off registerglobals = On Vulnerable: GET http://site/phpld/page.php?name= True Request: validpagename' or 1=1 False Request: validpagename' or 1=0 Try this urlencode: validpagename' or ORDMIDSELECT PASSWORD FROM PLDUS...
PHPLD 3.3 - Blind SQL Injection
PHPLD 3.3 - Blind SQL Injection phpLD 3.3 Blind SQL Injection http://www.phplinkdirectory.com/ magicquotesgpc = Off registerglobals = On Vulnerable: GET http://site/phpld/page.php?name= True Request: validpagename' or 1=1 False Request: validpagename' or 1=0 Try this urlencode: validpagename' or...
GLSA-200812-20 : phpCollab: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200812-20 phpCollab: Multiple vulnerabilities Multiple vulnerabilities have been found in phpCollab: rgod reported that data sent to general/sendpassword.php via the loginForm parameter is not properly sanitized before being used ...
Injader CMS 2.1.1 (id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================= Injader CMS 2.1.1 id Remote SQL Injection Vulnerability ========================================================= Injader CMS http://www.injader.com/ - = 2.1.1 - - SQL -...
CVE-2008-5604
Directory traversal vulnerability in index.php in My Simple Forum 3.0 and 4.1, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter...
Directory traversal
Directory traversal vulnerability in index.php in My Simple Forum 3.0 and 4.1, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter...
CVE-2008-5604
The CVE-2008-5604 issue affects My Simple Forum 3.0 and 4.1, where a directory traversal flaw in index.php allows remote attackers to include and execute local files via a .. in the action parameter when magic_quotes_gpc is disabled. This is a file-path handling vulnerability that can compromise ...
PHP < 5.2.8 Multiple Vulnerabilities
According to its banner, the version of PHP installed on the remote host is earlier than 5.2.8. As such, it is potentially affected by the following vulnerabilities : - PHP fails to properly sanitize error messages of arbitrary HTML or script code, would code allow for cross-site scripting attack...
punportal-lfi.txt
!/usr/bin/perl =about PunBB PunPortal 0.1 Local File Inclusion Exploit -------------------------------------------------- by athos - stakerathotmaildotit download mod http://www.punres.org/download.php?id=1108 download cms http://punbb.org register globals = 1 magic quotes gcp = 1 File...
PunBB Mod PunPortal 0.1 - Local File Inclusion
PunBB Mod PunPortal 0.1 - Local File Inclusion !/usr/bin/perl =about PunBB PunPortal 0.1 Local File Inclusion Exploit -------------------------------------------------- by athos - stakerathotmaildotit download mod http://www.punres.org/download.php?id=1108 download cms http://punbb.org register...
PHP-Fusion 7.00.1 - 'messages.php' SQL Injection
\n" . " php $argv0 localhost /php-fusion/ user s3cret "SELECT database"\n". " php $argv0 localhost / user s3cret "SELECT loadfile0x2F6574632F706173737764"\n\n"; die; echo "Logging into system..."; //login to php-fusion using login and pass $logindata = send$host, array "path" =...
PunBB Mod PunPortal 0.1 Local File Inclusion Exploit
No description provided by source. !/usr/bin/perl =about PunBB PunPortal 0.1 Local File Inclusion Exploit -------------------------------------------------- by athos - stakerathotmaildotit download mod http://www.punres.org/download.php?id=1108 download cms http://punbb.org register globals = 1...
evisioncms-lfi.txt
starting; $exploit-isvulnerable$domain; $exploit-exploiting$domain,$mymode;...
e-Vision CMS <= 2.0.2 Multiple Local File Inclusion Exploit
No description provided by source. ?php errorreporting0; iniset"defaultsockettimeout",5; / e-Vision = 2.0.2 Multiple Local File Inclusion Exploit ------------------------------------------------------- by athos - download http://sourceforge.net...
phpx-sql.txt
action = $GET'action'; 12. $this-newsid = $GET'newsid'; 13. 14. global $userinfo; 15. global $core; 16. 17. $this-core = $core; 18. 19. $this-userinfo = $userinfo; 20. 21. 22. 23. 24. if !$this-userinfo DIE"HACK ATTEMPT"; 25. if $this-userinfonews != 1 DIE"NO ACCESS TO THIS MODULE"; 26. 27...