CVE-2009-4541

Multiple PHP remote file inclusion vulnerabilities in IsolSoft Support Center 2.5 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to 1 newticket.php or 2 rempass.php, or a URL in the lang parameter in an adduser action to 3 index.php. NOTE: this can also be...

CVE-2009-4543

PHP remote file inclusion vulnerability in index.php in Cromosoft Technologies Facil Helpdesk 2.3 Lite allows remote attackers to execute arbitrary PHP code via a URL in the lng parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

CVE-2009-4543

CVE-2009-4543 affects Cromosoft Technologies Facil Helpdesk 2.3 Lite. The issue is a PHP remote file inclusion in index.php via the lng parameter, which can also be triggered to include and execute local files through .. sequences. Documented impact is arbitrary PHP code execution with network ac...

CVE-2009-4541

Multiple PHP remote file inclusion vulnerabilities in IsolSoft Support Center 2.5 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to 1 newticket.php or 2 rempass.php, or a URL in the lang parameter in an adduser action to 3 index.php. NOTE: this can also be...

CVE-2009-4541

IsolSoft Support Center 2.5 is affected by multiple PHP remote file inclusion vulnerabilities. The issue allows an attacker to supply a URL in the lang parameter to newticket.php or rempass.php, or in the lang parameter in an adduser action to index.php, causing inclusion and execution of arbitra...

LightOpen CMS Remote File Inclusion (smarty.php)

Exploit for unknown platform in category web applications ================================================ LightOpen CMS Remote File Inclusion smarty.php ================================================ Exploit Title: LightOpen CMS Remote File Inclusion smarty.php Date: 2010-01-05 Author: Zer0...

Rezervi 3.0.2 Remote File Inclusion

Rezervi Homepage : !n y0ur m!nd PoC r00t : r00t.h4x0r/include/mail.inc.php?root=Shell 9r33tz : cr4wl3r INDONESIAN HACKER...

Gbook MX 4.1.0 (Arabic Version) - Remote File Inclusion

======================================================================================== | Title : Gbook MX v4.1.0 Arabic Version File inclusion Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total aler...

LightOpenCMS 0.1 - smarty.php Remote File Inclusion

LightOpenCMS 0.1 - smarty.php Remote File Inclusion Exploit Title: LightOpen CMS Remote File Inclusion smarty.php Date: 2010-01-05 Author: Zer0 Thunder Software Link: http://sourceforge.net/projects/lightopencms/ Version: v0.1 Tested on: Windows XP sp2 Wamp CVE : Code : Exploit :...

LightOpenCMS 0.1 - 'smarty.php' Remote File Inclusion

Exploit Title: LightOpen CMS Remote File Inclusion smarty.php Date: 2010-01-05 Author: Zer0 Thunder Software Link: http://sourceforge.net/projects/lightopencms/ Version: v0.1 Tested on: Windows XP sp2 Wamp CVE : Code : Exploit : http://site.com/path/smarty.php?cwd=shell.txt?%00 Example :...

Rezervi 3.0.2 - mail.inc.php Remote File Inclusion

Rezervi 3.0.2 - mail.inc.php Remote File Inclusion Rezervi Homepage : !n y0ur m!nd PoC r00t : r00t.h4x0r/include/mail.inc.php?root=Shell 9r33tz : cr4wl3r INDONESIAN HACKER...

Rezervi <= 3.0.2 (mail.inc.php) RFI Vulnerability

Exploit for unknown platform in category web applications ================================================= Rezervi = 3.0.2 mail.inc.php RFI Vulnerability ================================================= Rezervi = 3.0.2 mail.inc.php RFI Vulnerablities http://www.rezervi.com PoC r00t :...

Rezervi 3.0.2 - 'mail.inc.php' Remote File Inclusion

Rezervi Homepage : !n y0ur m!nd PoC r00t : r00t.h4x0r/include/mail.inc.php?root=Shell 9r33tz : cr4wl3r INDONESIAN HACKER...

Photokorn 1.542 RFI / XSS / phpinfo() Disclosure

======================================================================================== | Title : photokorn Multi Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts found : 3 | High : 2 | Medi...

PHP-Calendar Multiple Remote And Local File Inclusion Vulnerabilities

PHP-Calendar is prone to Remote And Local File Inclusion vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PhotoKorn 1.542 - Cross-Site Scripting Remote File Inclusion

PhotoKorn 1.542 - Cross-Site Scripting Remote File Inclusion source: https://www.securityfocus.com/bid/37559/info Photokorn is prone to a cross-site scripting vulnerability and a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploi...

PhotoKorn 1.542 - Cross-Site Scripting / Remote File Inclusion

source: https://www.securityfocus.com/bid/37559/info Photokorn is prone to a cross-site scripting vulnerability and a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these issues to execute malicious PHP code in the context o...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in FreeSchool 1.1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CLASSPATH parameter to 1 bibform.php, 2 bibpldetails.php, 3 bibplform.php, 4 bibplsearchc.php, 5 bibplsearchs.php, 6 bibsave.php, 7...

CVE-2009-4471

Multiple PHP remote file inclusion vulnerabilities in FreeSchool 1.1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CLASSPATH parameter to 1 bibform.php, 2 bibpldetails.php, 3 bibplform.php, 4 bibplsearchc.php, 5 bibplsearchs.php, 6 bibsave.php, 7...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in PHPope 1.0.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 GLOBALSconfigdirplugins parameter to plugins/address/admin/index.php, 2 GLOBALSconfigdirfunctions parameter to plugins/im/compose.php, and 3...