falconcms-rfixss.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Multilple...

falcon CMS 1.4.3 - Remote File Inclusion / Cross-Site Scripting

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Multilple...

falcon CMS 1.4.3 - Remote File Inclusion Cross-Site Scripting

falcon CMS 1.4.3 - Remote File Inclusion Cross-Site Scripting --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

Falcon CMS 1.4.3 (RFI/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Falcon CMS 1.4.3 RFI/XSS Multiple Remote Vulnerabilities ========================================================== --------------------------------------------------------------- ...

SerWeb <= 2.0.0 dev1 2007-02-20 Multiple RFI / LFI Vulnerabilities

No description provided by source. SerWeb = 2.0.0 dev1 2007-02-20 Multiple RFI / LFI Vulnerabilities D.Script : http://ftp.iptel.org/pub/serweb/daily-snapshots/serweb-2.0.0-dev12007-02-20.tar.gz POC: /loadlang.php?SERWEBconfigdir=Shell /mainprepend.php?SERWEBfunctionsdir=Shell...

doom-rfi.txt

DOOM CMS for ISP's 1.2 RFI --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : DOOM CMS for ISP's 1.2 --------------------- Download : http://downloads.sourceforge.net/webwrench/DOOMISP20070521.zip?modtime=1179790880&bigmirror=0...

serweb-rfilfi.txt

SerWeb = 2.0.0 dev1 2007-02-20 Multiple RFI / LFI Vulnerabilities D.Script : http://ftp.iptel.org/pub/serweb/daily-snapshots/serweb-2.0.0-dev12007-02-20.tar.gz POC: /loadlang.php?SERWEBconfigdir=Shell /mainprepend.php?SERWEBfunctionsdir=Shell /loadphplib.php?PHPLIBlibdir=Shell...

SerWeb <= 2.0.0 dev1 2007-02-20 Multiple RFI / LFI Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== SerWeb = 2.0.0 dev1 2007-02-20 Multiple RFI / LFI Vulnerabilities ================================================================== SerWeb = 2.0.0 dev1 2007-02-20 Multiple...

SerWeb 2.0.0 dev1 2007-02-20 - Multiple Local/Remote File Inclusion Vulnerabilities

SerWeb = 2.0.0 dev1 2007-02-20 Multiple RFI / LFI Vulnerabilities D.Script : http://ftp.iptel.org/pub/serweb/daily-snapshots/serweb-2.0.0-dev12007-02-20.tar.gz POC: /loadlang.php?SERWEBconfigdir=Shell /mainprepend.php?SERWEBfunctionsdir=Shell /loadphplib.php?PHPLIBlibdir=Shell...

phpmychat-xssrfi.txt

Application : phpMyChat v0.14.5 Email ; [email protected] Website: http://phpmychat.sourceforge.net/ Many webhosting companies are offering this version of phpMychat in their cpanel : ---------------------------- | Remote File Inclusion: | ----------------------------...

RFI and Multiple XSS in PhpMyChat

Application : phpMyChat 0.14.5 Email ; [email protected] Website: http://phpmychat.sourceforge.net/ Many webhosting companies are offering this version of phpMychat in their cpanel : ---------------------------- | Remote File Inclusion: | ----------------------------...

Directory traversal

Directory traversal vulnerability in index.php in FTP Admin 0.1.0 allows remote authenticated users to include and execute arbitrary local files via a .. dot dot in the page parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an...

CVE-2007-6231

Multiple PHP remote file inclusion vulnerabilities in tellmatic 1.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the tmincludepath parameter to 1 Classes.inc.php, 2 statistic.inc.php, 3 status.inc.php, 4 statustopx.inc.php, or 5 libchart-1.1/libchart.php in include/. NOTE:...

Remote file inclusion

PHP remote file inclusion vulnerability in common/classes/classHeaderHandler.lib.php in Rayzz Script 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the CFGsiteprojectpath parameter...

CVE-2007-6231

Vulnerability: CVE-2007-6231 affects tellmatic 1.0.7 with multiple PHP remote file inclusion flaws that allow an attacker to execute arbitrary PHP code via a URL in tm_includepath for files under include/, including Classes.inc.php, statistic.inc.php, status.inc.php, status_top_x.inc.php, and lib...

CVE-2007-6229

CVE-2007-6229 describes a PHP remote file inclusion in Rayzz Script 2.0. The vulnerability affects the file common/classes/class_HeaderHandler.lib.php and permits remote attackers to execute arbitrary PHP code by supplying a URL in the CFG[site][project_path] parameter. The NVD entry cites a CVSS...

CVE-2007-6231

Multiple PHP remote file inclusion vulnerabilities in tellmatic 1.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the tmincludepath parameter to 1 Classes.inc.php, 2 statistic.inc.php, 3 status.inc.php, 4 statustopx.inc.php, or 5 libchart-1.1/libchart.php in include/. NOTE:...

CVE-2007-6229

PHP remote file inclusion vulnerability in common/classes/classHeaderHandler.lib.php in Rayzz Script 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the CFGsiteprojectpath parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Ossigeno CMS 2.2 pre1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 level parameter to a installmodule.php and b uninstallmodule.php in upload/xax/admin/modules/, c upload/xax/admin/patch/index.php, and d...

CVE-2007-6218

Summary (CVE-2007-6218) : The provided documents describe multiple PHP remote file inclusion vulnerabilities in Ossigeno CMS 2.2 pre1. The flaws allow remote attackers to execute arbitrary PHP code by supplying a URL to various parameters in the application, notably the level parameter to install...