Sugar Suite Open Source <= 4.2 (OptimisticLock) Remote Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "Sugar Suite Open Source = 4.2 "OptimisticLock!" arbitrary remote inclusion exploit\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; echo "this is called the "five claws...

Russcom.net Loginphp multiple vulnerabilties

Russcom.net Loginphp multiple vulnerabilties Discovered by: Nomenumbra Date: 5/2/2006 impact:moderate privilege escalation,possible defacement Russcom.net's loginphp script is a small usermanagement script: Users can sign up for a username which they can use to login to the password protected mai...

phpListPro Multiple Script returnpath Parameter Remote File Inclusions

The remote host is running phpListPro, a website voting/ranking tool written in PHP. The installed version of phpListPro fails to sanitize user input to the 'returnpath' parameter of the 'config.php', 'editsite.php', 'addsite.php', and 'in.php' scripts before using it to include PHP code from oth...

[MajorSecurity] TotalCalendar 2.30 - Remote File Include Vulnerability

MajorSecurity TotalCalendar 2.30 - Remote File Include Vulnerability -------------------------------------------------------- Software: TotalCalendar Version: 2.30 Type: Remote File Include Vulnerability Date: April, 23th 2006 Vendor: SweetPHP Page: http://sweetphp.com Risc: High Credits:...

4images <= 1.7 XSS

==================== Discovered by: Qex Date: 14 April 2006 ==================== Steps:- 1- Register with this nickname:- 'scriptalertdocument.cookie/script 2- Go to http://www.SITE.com/PATH/member.php?action=showprofile&userid=ID...

sphider_13_xpl_pl.txt

!/usr/bin/perl use IO::Socket; print "\r\nSphider works with registerglobals = On & allowurlfopen = On\r\n"; print "by rgod rgodautisticiorg\r\n"; print "site: http://retrogod.altervista.org\r\n"; print "\r\ndork: "powered by sphider"\r\n"; sub main::urlEncode my $string = @; $string = s/\W/"%"...

Sphider 1.3 - configset.php Remote File Inclusion

Sphider 1.3 - configset.php Remote File Inclusion !/usr/bin/perl use IO::Socket; print "\r\nSphider works with registerglobals = On & allowurlfopen = On\r\n"; print "by rgod rgodautisticiorg\r\n"; print "site: http://retrogod.altervista.org\r\n"; print "\r\ndork: "powered by sphider"\r\n"; sub...

Tritanium Bulletin Board 1.2.3 - XSS

Tritanium Bulletin Board 1.2.3 - XSS Vulnerabilities -------------------------------------------------------- Software: Tritanium Bulletin Board 1.2.3 Version: 1.2.3 Type: Cross Site Scripting Vulnerability Date: Die Apr 11 21:57:50 CEST 2006 Vendor: tritanium Page:...

Dokeos < 1.6.4 / 2.0.3 Multiple Scripts Remote File Inclusion

The remote host is running Dokeos, an open source, e-learning and course management web application written in PHP. The version of Dokeos installed on the remote host fails to sanitize user-supplied input to several parameters before using it in several scripts to include PHP code from other file...

PT-2006-2682 · Squery · Osquery

Name of the Vulnerable Software and Affected Versions: SQuery versions 4.5 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter to scripts in the lib directory, including multiple PHP files such as ase.php, devi.php, doom3.php...

PHPList <= 2.10.2 GLOBALS[] Remote Code Execution Exploit

Exploit for unknown platform in category web applications ========================================================= PHPList this works against registerglobals=On \r\n"; echo "a dork: inurl:"lists/?p=subscribe" | inurl:"lists/index.php?p=subscribe"\r\n"; echo " -ubbi phplist\r\n\r\n"; if $argc4...

phpMyChat 0.15.0dev (SYS enter) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ============================================================= phpMyChat 0.15.0dev SYS enter Remote Code Execution Exploit ============================================================= !/usr/bin/php -q -d shortopentag=on works with...

phpMyChat 0.15.0dev - SYS enter Remote Code Execution

phpMyChat 0.15.0dev - SYS enter Remote Code Execution !/usr/bin/php -q -d shortopentag=on works with magicquotesgpc=Off\r\n\r\n"; echo "dork: intext:"2000-2001 The phpHeaven Team" -sourceforge\r\n\r\n"; if $argc4 echo "Usage: php ".$argv0." host path cmd OPTIONS\r\n"; echo "host: target server...

phpmychat_015dev_xpl

!/usr/bin/php -q -d shortopentag=on works with magicquotesgpc=Off\r\n\r\n"; echo "dork: intext:"2000-2001 The phpHeaven Team" -sourceforge\r\n\r\n"; if $argc4 echo "Usage: php ".$argv0." host path cmd OPTIONS\r\n"; echo "host: target server ip/hostname\r\n"; echo "path: path to PHPMyChat\r\n";...

phpDocumentor <= 1.3.0 RC4 Local And Remote File Inclusion Vulnerability

The remote web server contains a PHP script that is prone to file inclusion flaws. Description : phpDocumentor is a automatic documentation generator for PHP. The remote host appears to be running the web-interface of phpDocumentor. This version does not properly sanitize user input in the...

Plume CMS <= 1.0.2 Remote File Inclusion Vulnerability

Plume CMS is prone to local and remote file inclusion vulnerabilities. SPDX-FileCopyrightText: 2006 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2006-1339

Directory traversal vulnerability in inc/functions.inc.php in CuteNews 1.4.1 and possibly other versions, when registerglobals is enabled, allows remote attackers to include arbitrary files via a .. dot dot sequence and trailing NULL %00 byte in the archive parameter in an HTTP POST or COOKIE...

CVE-2006-1112

Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a long login value in a register form, which displays the installation path in a MySQL error message...

Gallery <= 2.0.3 stepOrder[] Remote Commands Execution Exploit

Exploit for unknown platform in category web applications ============================================================== Gallery autisticiorg \r\n"; echo "site: http://retrogod.altervista.org \r\n\r\n"; echo "- works with registerglobals = On and magicquotesgpc = Off \r\n"; if $argc5 echo "Usage:...

OWL Intranet Engine 0.82 (xrms_file_root) Code Execution Exploit

No description provided by source. !/usr/bin/perl use IO::Socket; print "WwwWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW\r\n"; print "WWwoLWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW\r\n"; print...