CVE-2011-2643

Directory traversal vulnerability in sql.php in phpMyAdmin 3.4.x before 3.4.3.2, when configuration storage is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in a MIME-type transformation parameter...

ZoneMinder 1.24.3 - Remote File Inclusion

ZoneMinder 1.24.3 - Remote File Inclusion Exploit Title: Zoneminder 1.24.3 Remote File Inclusion Vulnerability Date: 2011-07-22 Author: Iye iyedotcba-at-gmaildotcom Software Link: http://www.zoneminder.com/ Version: 1.24.3 Tested. 1.24.4 probably too, not tested Tested on: Ubuntu 10.04 You must b...

ZoneMinder 1.24.3 - Remote File Inclusion

Exploit Title: Zoneminder 1.24.3 Remote File Inclusion Vulnerability Date: 2011-07-22 Author: Iye iyedotcba-at-gmaildotcom Software Link: http://www.zoneminder.com/ Version: 1.24.3 Tested. 1.24.4 probably too, not tested Tested on: Ubuntu 10.04 You must be authenticated as a user in the Web App t...

Zoneminder 1.24.3 Remote File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: Zoneminder 1.24.3 Remote File Inclusion Vulnerability Author: Iye iyedotcba-at-gmaildotcom Software Link: http://www.zoneminder.com/ Version: 1.24.3 Tested. 1.24.4 probably too, not tested Tested on: Ubuntu 10.04 You must be...

Report: Web Applications Attacked Every Two Minutes

Web applications are attacked every two minutes and at some times can experience upwards to 25,000 attacks an hour according to a report published by security firm Imperva today. As part of its continuing Hacker Intelligence initiative, Imperva’s Application Defense Center ADC released their Web...

EUVD-2011-2719

Directory traversal vulnerability in Chyrp 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a ..%2F encoded dot dot slash in the action parameter to the default URI...

CVE-2011-2508

Directory traversal vulnerability in libraries/displaytbl.lib.php in phpMyAdmin 3.x before 3.3.10.2 and 3.4.x before 3.4.3.1, when a certain MIME transformation feature is enabled, allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in a...

CVE-2010-4810

Multiple PHP remote file inclusion vulnerabilities in AR Web Content Manager AWCM 2.1 final allow remote attackers to execute arbitrary PHP code via a URL in the themefile parameter to 1 includes/windowtop.php and 2 header.php, and the 3 langfile parameter to control/common.php...

CVE-2010-4810

CVE-2010-4810 affects AR Web Content Manager (AWCM) with multiple remote file include vulnerabilities. Public details show that AWCM versions around 2.1 final (and up to 2.2 per OpenVAS) are vulnerable to RFI via theme_file parameters to includes/window_top.php and header.php, and lang_file param...

BbZL.php - Remote File Inclusion

BbZL.php - Remote File Inclusion | | | ||\ || || || | \ // | | | || \ || || || | |\ //| | | \ | | |/ / | | || \ || || || | | \ // | | | \ | | / / | | || \ || || || | | \ // | | | | | | | /'\ / / | | || \ || || || | | \ // | | | | | \ \ / / / | | || \ || |||| | | \// | | | | | | | \ \...

bbzl PHP 0.92 Remote File Inclusion

| | | ||\ || || || | \ // | | | || \ || || || | |\ //| | | \ | | |/ / | | || \ || || || | | \ // | | | \ | | / / | | || \ || || || | | \ // | | | | | | | /'\ / / | | || \ || || || | | \ // | | | | | \ \ / / / | | || \ || |||| | | \// | | | | | | | \ \ / / | | || \|| || || / || |/...

BbZL.php - Remote File Inclusion

| | | ||\ || || || | \ // | | | || \ || || || | |\ //| | | \ | | |/ / | | || \ || || || | | \ // | | | \ | | / / | | || \ || || || | | \ // | | | | | | | /'\ / / | | || \ || || || | | \ // | | | | | \ \ / / / | | || \ || |||| | | \// | | | | | | | \ \ / / | | || \|| || || / || |/...

Nodesforum 1.059 remote file inclusion defect and repair-vulnerability warning-the black bar safety net

Exploit Title: nodesforum 1.059 Remote File Inclusion Vulnerability Google Dork: inurl: powered by Nodesforum Date: 6/23/2011 Author: bd0rk bd0rkathackermail.com Software-Download: http://home.nodesforum.com/download?file=nodesforum1.059withbbcode1.004.zip Tested on: Ubuntu-Linux / Windows Vista...

Nodesforum 1.059 Remote File Inclusion

Exploit Title: nodesforum 1.059 Remote File Inclusion Vulnerability Google Dork: inurl: powered by Nodesforum Date: 6/23/2011 Author: bd0rk bd0rkathackermail.com Software-Download: http://home.nodesforum.com/download?file=nodesforum1.059withbbcode1.004.zip Tested on: Ubuntu-Linux / WinVista...

nodesforum 1.059 - Remote File Inclusion

nodesforum 1.059 - Remote File Inclusion Exploit Title: nodesforum 1.059 Remote File Inclusion Vulnerability Google Dork: inurl: powered by Nodesforum Date: 6/23/2011 Author: bd0rk bd0rkathackermail.com Software-Download: http://home.nodesforum.com/download?file=nodesforum1.059withbbcode1.004.zip...

Nodesforum 1.059 Remote File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: nodesforum 1.059 Remote File Inclusion Vulnerability Google Dork: inurl: powered by Nodesforum Date: 6/23/2011 Author: bd0rk bd0rkathackermail.com Software-Download:...

nodesforum 1.059 - Remote File Inclusion

Exploit Title: nodesforum 1.059 Remote File Inclusion Vulnerability Google Dork: inurl: powered by Nodesforum Date: 6/23/2011 Author: bd0rk bd0rkathackermail.com Software-Download: http://home.nodesforum.com/download?file=nodesforum1.059withbbcode1.004.zip Tested on: Ubuntu-Linux / WinVista...

NetServe Web Server v1.0.58 Multiple Remote Vulnerabilities

Summary NetServe is a super compact Web Server and File Sharing application for Windows NT, 95, 98, 2000, and XP. It's HTTP Web Server can serve all types of files including html, gif and jpeg, actually any files placed in your NetServe directory can be served. New key features include...

PopScript Multiple Vulnerabilities

Exploit Title: PopScript Multiple Vulnerabilities home : http://www.D99Y.com Google Dork: Do as you would be done by ; Date: 5/6/2011 Author: NassRawI Software Link: http://www.popscript.com/ 1 SQL injection http://localhost/PopScript/index.php?act=inbox&mode=1 SQL injection 2 File inclusion =...

PopScript Local File Inclusion / SQL Injection

Exploit Title: PopScript Multiple Vulnerabilities home : http://www.D99Y.com Google Dork: Do as you would be done by ; Date: 5/6/2011 Author: NassRawI Software Link: http://www.popscript.com/ 1 SQL injection http://localhost/PopScript/index.php?act=inbox&mode=1 SQL injection 2 File inclusion =...