directadmin-1281.txt

Aria-Security Team Advisory Original Advisory : http://aria-security.net/advisory/directadmin.txt ----------------------------------------------------------- Software: DirectAdmin V1.28.1 DirectAdmin level used : Admin level PoC: http://target:2222/CMDSHOWRESELLER?userXSS...

Yblog-xss.txt

---------------------------------------------------------- Aria-Security.net Advisory Discovered by: YouYou Gr33t to: A.u.r.a & O.U.T.L.A.W & R@1D3N @ DrtRp & Cl0wn & S3ll & T3rr0r1st ----------------------------------------------------------- Software: Yblog Attack method: Cross Site Scripting...

Yblog => Cross Site Scripting

---------------------------------------------------------- Aria-Security.net Advisory Discovered by: YouYou www.Aria-security.net Gr33t to: A.u.r.a & O.U.T.L.A.W & R@1D3N @ DrtRp & Cl0wn & S3ll & T3rr0r1st ----------------------------------------------------------- Software: Yblog Attack method:...

VirtueMart

Aria-Security.net Advisory Discovered by: Dr.T3rr0r1st www.Aria-security.net Gr33t to: The-0utl4w & A.u.r.a & R@1D3N & Smok3r ----------------------------------------------------------- Software: VirtueMart Link: virtumart.net Attack method: Remote File Inclusion Source : //Set up the mailer to...

opensef.txt

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: OpenSEF Attack method: Remote File Inclusion Description : OpenSEF is a Joomla component that extends the built-in SEF Search Engine Friendly Source: requireonce $mosConfigabsolutepath...

mosbot.txt

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo Component - Display MOSBot Manager Attack method: Remote File Inclusion Source: includeonce "".$mosConfigabsolutepath."/administrator/components/". $componentdirectory ."/toolbar."...

mtg_myhomepage.txt

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: mtgmyhomepage Component For Mambo 4.5 Vendor : http://www.kamgaing.com/ Attack method: Remote File Inclusion Source: if fileexists...

contxtd.txt

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo Components ContXTD Attack method: Remote File Inclusion Source: ensure this file is being included by a parent file / defined 'VALIDMOS' or die 'Direct Access to this location is not...

fusionnews.txt

!/usr/bin/perl Aria-Security.net Advisory Discovered by: OUTLAW Gr33t to: A.u.r.a & HessamX & Cl0wn & DrtRp Special Thanx To All Aria-Security Users use LWP::UserAgent; print "\n === Fusion News v3.7 Remote File Inclusion\n"; print "\n === Discovered by OutLaw .\n"; print "\n ===...

yabbXSScat.txt

Aria-Security.net Advisory Discovered by: OUTLAW Gr33t to: A.u.r.a & C0d3r & l2odon & R@1D3N @ DrtRp & Software: YaBB Attack method: Cross Site Scripting Proof of Concept: index.php?action=faqmy&myfaq=yes&idcat=1&categories=alert"xss" ----------------------------------------------------------...

discloser.txt

!/usr/bin/perl Aria-Security.net Advisory Discovered by: Dr.t3rr0r1st Gr33t to:Outlaw & A.u.r.a & HessamX & Cl0wn & DrtRp Special Thanx To All Aria-Security Users use LWP::UserAgent; print "\n === discloser 0.0.4 Remote File Inclusion\n"; print "\n === Discovered by OutLaw .\n"; print "\n ===...

phlymail.txt

PHlyMail Lite PMpathlib= Remote File Include Vulnerability ------------------------------------------------------------------------------------------------------ - Script name: PHlyMail Lite v. 3.4.4 - Script site: http://phlymail.de...

catalogshop.txt

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo CatalogShop Attack method: Remote File Inclusion Descriptio : This is a modified version of the FacileForms mambot, which allows you to add and view user comments and ratings below...

phphop.txt

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: mambo-phphop Product Scroller Module Attack method: Remote File Inclusion Source: / Load the phpshop main parse code / requireonce...

akoinclude.txt

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Ako Comments mod Attack method: Remote File Inclusion Source: Description: This module shows users' comments from component AkoComments. File Version: 1.1 for Mambo 4.5...

mambo-phphop Product Scroller Module R.F.I

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: mambo-phphop Product Scroller Module Attack method: Remote File Inclusion Source: / Load the phpshop main parse code / requireonce...

Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo Components ContXTD Attack method: Remote File Inclusion Source: ensure this file is being included by a parent file / defined 'VALIDMOS' or die 'Direct Access t...

mtg_myhomepage Component For Mambo R.F.I

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: mtgmyhomepage Component For Mambo 4.5 Vendor : http://www.kamgaing.com/ Attack method: Remote File Inclusion Source: if fileexists...

Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo Component - Display MOSBot Manager Attack method: Remote File Inclusion Source: includeonce "".$mosConfigabsolutepath."/administrator/components/"...

ToendaCMS <= 1.0.3 -(tcms_administer_site) Remote File Include

Iranians Are The Bests ToendaCMS = 1.0.3 -tcmsadministersite Remote File Include Descriptions Script.............. : ToendaCMS Discovered By.... : YouYou Risk : High Class.............. : Remote Special Thanx To All Aria-Security's Administrators...