CVE-2007-0659

download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary files, as demonstrated by downloading config.inc.php to obtain database credentials...

CVE-2007-0659

download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary files, as demonstrated by downloading config.inc.php to obtain database credentials...

NSGalPHP Config.Inc.PHP远程文件包含漏洞

NSGalPHP是一款基于PHP的WEB应用程序。 NSGalPHP不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Config.Inc.PHP'脚本对用户提交的'racineTBS'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 nsGalPHP 目前没有解决方案提供,请关注以下链接： http://www.easy-script.com/compt.php?id=3521 http://www.example.com/path/includes/config.inc.php?racineTBS=PHPSHELL...

nsGalPHP (includes/config.inc.php racineTBS) Remote Inclusion Vuln

No description provided by source. | | \ | S.W.A.T. | / \ | | / / || \ / &nbsp...

nsGalPHP (includes/config.inc.php racineTBS) Remote Inclusion Vuln

Exploit for unknown platform in category web applications ================================================================== nsGalPHP includes/config.inc.php racineTBS Remote Inclusion Vuln ================================================================== | | \ | S.W.A.T. | / \ | | / / || \ / ...

PhpSherpa (include/config.inc.php) Remote File Include Vulnerability

No description provided by source. ------------------------------------------------------------------------------------------------------------------------ Script:PhpSherpa Affected Version:.... Downlaoad:http://linuxeduquebec.org/IMG/tgz/sherpa.tgz...

PHPSherpa - '/include/config.inc.php' Remote File Inclusion

------------------------------------------------------------------------------------------------------------------------ Script:PhpSherpa Affected Version:.... Downlaoad:http://linuxeduquebec.org/IMG/tgz/sherpa.tgz...

Torbstoff News 4 (pfad) Remote File Inclusion Vulnerability

No description provided by source. ================================================================= Torbstoff News 4 = pfad Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://www.torbstoff.de | |...

miniCWB <= 1.0.0 (contact.php) Local File Include Exploit

No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

lesvisit (visiteurs) <= v2.0 (lvc_include_dir) Remote File Include Vulnerability

============================================================================================== lesvisit visiteurs = v2.0 lvcincludedir Remote File Include Vulnerability =============================================================================================== Critical Level : Dangerous...

Les Visiteurs (Visitors) 2.0 - config.inc.php File Inclusion

Les Visiteurs Visitors 2.0 - config.inc.php File Inclusion ============================================================================================== lesvisit visiteurs = v2.0 lvcincludedir Remote File Include Vulnerability...

Les Visiteurs (Visitors) 2.0 - 'config.inc.php' File Inclusion

============================================================================================== lesvisit visiteurs = v2.0 lvcincludedir Remote File Include Vulnerability =============================================================================================== Critical Level : Dangerous...

phpunity.postcard (gallery_path) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================== phpunity.postcard gallerypath Remote File Include Vulnerability ================================================================== phpunity.postcard phpunity-postcard.php...

Directory traversal

Directory traversal vulnerability in gallerie.php in SLsite 1.0 allows remote attackers to list images in arbitrary directories via ".." sequences in the rep parameter, which is used to construct a directory name in admin/config.inc.php. NOTE: this issue could be used to produce resultant XSS fro...

GLSA-200504-30 : phpMyAdmin: Insecure SQL script installation

"The remote host is affected by the vulnerability described in GLSA-200504-30 phpMyAdmin: Insecure SQL script installation The phpMyAdmin installation process leaves the SQL install script with insecure permissions. Impact : A local attacker could exploit this vulnerability to obtain the initial...