directadmin-1281.txt

Aria-Security Team Advisory Original Advisory : http://aria-security.net/advisory/directadmin.txt ----------------------------------------------------------- Software: DirectAdmin V1.28.1 DirectAdmin level used : Admin level PoC: http://target:2222/CMDSHOWRESELLER?userXSS...

DirectAdmin Multiple Cross Site Scription

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory : http://aria-security.net/advisory/directadmin.txt ----------------------------------------------------------- Software: DirectAdmin V1.28.1 DirectAdmin level used : Admin level PoC:...

VirtueMart

Aria-Security.net Advisory Discovered by: Dr.T3rr0r1st www.Aria-security.net Gr33t to: The-0utl4w & A.u.r.a & R@1D3N & Smok3r ----------------------------------------------------------- Software: VirtueMart Link: virtumart.net Attack method: Remote File Inclusion Source : //Set up the mailer to...

discloser.txt

!/usr/bin/perl Aria-Security.net Advisory Discovered by: Dr.t3rr0r1st Gr33t to:Outlaw & A.u.r.a & HessamX & Cl0wn & DrtRp Special Thanx To All Aria-Security Users use LWP::UserAgent; print "\n === discloser 0.0.4 Remote File Inclusion\n"; print "\n === Discovered by OutLaw .\n"; print "\n ===...

opensef.txt

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: OpenSEF Attack method: Remote File Inclusion Description : OpenSEF is a Joomla component that extends the built-in SEF Search Engine Friendly Source: requireonce $mosConfigabsolutepath...

phphop.txt

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: mambo-phphop Product Scroller Module Attack method: Remote File Inclusion Source: / Load the phpshop main parse code / requireonce...

mtg_myhomepage.txt

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: mtgmyhomepage Component For Mambo 4.5 Vendor : http://www.kamgaing.com/ Attack method: Remote File Inclusion Source: if fileexists...

catalogshop.txt

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo CatalogShop Attack method: Remote File Inclusion Descriptio : This is a modified version of the FacileForms mambot, which allows you to add and view user comments and ratings below...

phlymail.txt

PHlyMail Lite PMpathlib= Remote File Include Vulnerability ------------------------------------------------------------------------------------------------------ - Script name: PHlyMail Lite v. 3.4.4 - Script site: http://phlymail.de...

fusionnews.txt

!/usr/bin/perl Aria-Security.net Advisory Discovered by: OUTLAW Gr33t to: A.u.r.a & HessamX & Cl0wn & DrtRp Special Thanx To All Aria-Security Users use LWP::UserAgent; print "\n === Fusion News v3.7 Remote File Inclusion\n"; print "\n === Discovered by OutLaw .\n"; print "\n ===...

mambo-phphop Product Scroller Module R.F.I

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: mambo-phphop Product Scroller Module Attack method: Remote File Inclusion Source: / Load the phpshop main parse code / requireonce...

mtg_myhomepage Component For Mambo R.F.I

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: mtgmyhomepage Component For Mambo 4.5 Vendor : http://www.kamgaing.com/ Attack method: Remote File Inclusion Source: if fileexists...

Mambo CatalogShop Remote File Inclusion

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo CatalogShop Attack method: Remote File Inclusion Descriptio : This is a modified version of the FacileForms mambot, which allows you to add and view user commen...

ToendaCMS <= 1.0.3 -(tcms_administer_site) Remote File Include

Iranians Are The Bests ToendaCMS = 1.0.3 -tcmsadministersite Remote File Include Descriptions Script.............. : ToendaCMS Discovered By.... : YouYou Risk : High Class.............. : Remote Special Thanx To All Aria-Security's Administrators...

Fusionphp Fusion News 3.7 - index.php Remote File Inclusion

Fusionphp Fusion News 3.7 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/19546/info Fusion News is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote...

wheatblog ُSession.php Remote File Inclusion

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.u.r.a & l2odon & DrtRp & Sh3ll ?php includeonce"$wbclassdir/classDatabase.php"; function StartSession global $sessiondir; if $sessiondir != '' sessionsavepath$sessiondir; if ! isset$SESSION sessionstart; //...

CMSimple Cross Site Scripting

Aria-Security.net Advisory Discovered by: OUTLAW www.Aria-security.net Gr33t to: A.u.r.a & l2odon & R@1D3N @ DrtRp & Cl0wn Software: CMSimple Attack method: Cross Site Scripting Original advisory:http://www.aria-security.net/advisory/cmsimple.txt Proof of Concept: Search in:...

phpauction.txt

---------------------------------------------------------- Aria-Security.net Advisory Discovered by: l2odon Gr33t to: A.u.r.a & O.U.T.L.A.W & R@1D3N @ DrtRp & Cl0wn ----------------------------------------------------------- Software: PHP-Auction Vendor: http://www.vhcs.net Attack method: SQL...

wwwthreadsXSS.txt

---------------------------------------------------------- Aria-Security.net Advisory Discovered by: l2odon Gr33t to: A.u.r.a & O.U.T.L.A.W & R@1D3N @ DrtRp & Cl0wn ----------------------------------------------------------- Software: wwwThreads Attack method: Cross Site Scripting Original...

PHP-Auction SQL injection

---------------------------------------------------------- Aria-Security.net Advisory Discovered by: l2odon www.Aria-security.net Gr33t to: A.u.r.a & O.U.T.L.A.W & R@1D3N @ DrtRp & Cl0wn ----------------------------------------------------------- Software: PHP-Auction Vendor: http://www.vhcs.net...