77 matches found
Netpet CMS 1.9 (confirm.php language) Local File Inclusion Vulnerability
No description provided by source. + Netpet CMS 1.9 confirm.php language Local File Inclusion Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://www.netpet.at/en/downloads + Local File Inclusion - Vulnerable code in netpet/confirm.php...
Netpet CMS 1.9 - confirm.php?language Local File Inclusion
Netpet CMS 1.9 - confirm.php?language Local File Inclusion + Netpet CMS 1.9 confirm.php language Local File Inclusion Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://www.netpet.at/en/downloads + Local File Inclusion - Vulnerable code in...
Netpet CMS 1.9 - 'confirm.php?language' Local File Inclusion
Netpet CMS 1.9 confirm.php language Local File Inclusion Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Download : http://www.netpet.at/en/downloads + Local File Inclusion - Vulnerable code in netpet/confirm.php...
CVE-2009-2176
Multiple directory traversal vulnerabilities in fuzzylime cms 3.03a and earlier, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 list parameter to code/confirm.php and the 2 template parameter to...
CVE-2009-2176: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in fuzzylime cms 3.03a and earlier, when magicquotesgpc is disabled, allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 list parameter to code/confirm.php and the 2 template parameter to...
fuzzylime cms <= 3.03a Local Inclusion / Arbitrary File Corruption PoC
+------------------------------------------------------------------------+ | fuzzylime cms = 3.03a local inclusion / arbitrary file corruption poc | +-----------+------------------------------------------------------------+ | by staker | +-----------+---------------------+ Author : xhaxkerx Speci...
fuzzylime cms <= 3.03a Local Inclusion / Arbitrary File Corruption PoC
Exploit for unknown platform in category web applications ====================================================================== fuzzylime cms = 3.03a Local Inclusion / Arbitrary File Corruption PoC ======================================================================...
FuzzyLime CMS 3.03a Local File Inclusion
+------------------------------------------------------------------------+ | fuzzylime cms = 3.03a local inclusion / arbitrary file corruption poc | +-----------+------------------------------------------------------------+ | by staker | +-----------+---------------------+ | mail:...
Fuzzylime CMS 3.03a - Local Inclusion / Arbitrary File Corruption
+------------------------------------------------------------------------+ | fuzzylime cms = 3.03a local inclusion / arbitrary file corruption poc | +-----------+------------------------------------------------------------+ | by staker | +-----------+---------------------+ | mail:...
File Store PRO 3.2 Multiple Blind SQL Injection Vulnerabilities
No description provided by source. | File Store PRO 3.2 Blind SQL Injection | || Download from: http://upoint.info/cgi/demo/fs/filestore.zip - Need admin rights: /confirm.php: code ifisset$GET"folder" && $GET"folder"!="" $folder=$GET"folder"; else exit"Bad Request"; ifisset$GET"id" && $GET"id"!="...
File Store PRO 3.2 Multiple Blind SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications =============================================================== File Store PRO 3.2 Multiple Blind SQL Injection Vulnerabilities =============================================================== | File Store PRO 3.2 Blind SQL Injection | || -...
CVE-2008-0516: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in spaw/dialogs/confirm.php in SQLiteManager 1.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the spawroot parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
SQLiteManager confirm.php spaw_root Parameter Remote File Inclusion
The remote host is running SQLiteManager, a web-based application for managing SQLite databases. The version of SQLiteManager installed on the remote host fails to sanitize user-supplied input to the 'spawroot' parameter of the 'spaw/dialogs/confirm.php' script before using it to include PHP code...
Unfixed XSS vulnerability at www.skyarc.co.jp
Security researcher kusomiso.com, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting www.skyarc.co.jp, which at the time of submission ranked 401351 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It is...
CVE-2006-4594: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager phpAtm 1.21 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the includelocation parameter in 1 confirm.php or 2 login.php. NOTE: the includelocation parameter to index.php is already...
phpAtm <= 1.21 (include_location) Remote File Include Vulnerabilities
phpAtm = v1.21 includelocation Remote File Inclusion Exploit Level : Dangerous Download : http://phpatm.free.fr/ Version : v1.21 Found By: KinSize MHG Security Team Code : include$includelocation.'include/conf.php'; exploit:...
CVE-2006-1237: Undefined Security Weakness
Multiple SQL injection vulnerabilities in DSNewsletter 1.0, with magicquotesgpc disabled, allow remote attackers to execute arbitrary SQL commands via the email parameter to 1 include/sub.php, 2 include/confirm.php, or 3 include/unconfirm.php...