Jeebles Directory Local File Inclusion

By hack2prison - vnbrain.net member This is exploit: http://site/path/download.php?file Example: http://site/path/download.php?settings2.inc.php...

jeebles-lfi.txt

By hack2prison - vnbrain.net member This is exploit: http://site/path/download.php?file Example: http://site/path/download.php?settings2.inc.php...

Sql injection

Multiple eval injection vulnerabilities in Php-Stats 0.1.9.2 allow remote authenticated administrators to execute arbitrary code by writing PHP sequences to the php-stats-options record in the options table, which is used in an eval function call by 1 admin.php, 2 click.php, 3 download.php, and...

CVE-2007-5453

Multiple eval injection vulnerabilities in Php-Stats 0.1.9.2 allow remote authenticated administrators to execute arbitrary code by writing PHP sequences to the php-stats-options record in the options table, which is used in an eval function call by 1 admin.php, 2 click.php, 3 download.php, and...

CVE-2007-5453

CVE-2007-5453 concerns Php-Stats 0.1.9.2, which contains multiple eval-injection vulnerabilities. The issue allows remote authenticated administrators to execute arbitrary code by injecting PHP sequences into the php-stats-options record in the _options table, which is subsequently evaluated via ...

CVE-2007-5453: Improper Control of Generation of Code

Multiple eval injection vulnerabilities in Php-Stats 0.1.9.2 allow remote authenticated administrators to execute arbitrary code by writing PHP sequences to the php-stats-options record in the options table, which is used in an eval function call by 1 admin.php, 2 click.php, 3 download.php, and...

Unfixed XSS vulnerability at www.vicman.net

Security researcher MaXWeL, has submitted on 10/03/2007 a cross-site-scripting XSS vulnerability affecting www.vicman.net, which at the time of submission ranked 6003 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2007. It is currently...

chupix-file.txt

Chupix CMS 0.2.3 download.php Remote File Download Vulnerability P.Script : http://sourceforge.net/project/showfiles.php?groupid=134930 download.php Lain:18-57 - ifisset$GET'fichier' ", "", $result; $num = trim$result; else $num = 0; $num++; $msg = ""; if!isdir$repertoire mkdir $repertoire, 0755;...

CVE-2007-4957: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in download.php in Chupix CMS 0.2.3 allow remote attackers to read or overwrite arbitrary files via a .. dot dot in the 1 fichier or 2 repertoire parameter, or create arbitrary directories via a .. dot dot in the 3 repertoire parameter...

Chupix CMS 0.2.3 (download.php) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Chupix CMS 0.2.3 download.php Remote File Disclosure Vulnerability ==================================================================== Chupix CMS 0.2.3 download.php Remo...

Chupix CMS 0.2.3 (download.php) Remote File Disclosure Vulnerability

No description provided by source. Chupix CMS 0.2.3 download.php Remote File Download Vulnerability P.Script : http://sourceforge.net/project/showfiles.php?groupid=134930 download.php Lain:18-57 - ifisset$GET'fichier' --------------XXXX // téléchargement du fichier $file = "archives/"...

CVE-2007-4540: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in download.php in Olate Download od 3.4.2 allow remote attackers to execute arbitrary SQL commands via the 1 HTTPREFERER or 2 HTTPUSERAGENT HTTP header...

CVE-2007-2507

CVE-2007-2507 describes a directory traversal vulnerability in the Treble Designs 1024 CMS 0.7. The flaw exists in includes/download.php and allows remote attackers to read arbitrary files by providing a ../ sequence in the item parameter. The issue affects Treble Designs 1024 CMS 0.7 and enables...

CVE-2007-2507: Undefined Security Weakness

Directory traversal vulnerability in includes/download.php in Treble Designs 1024 CMS 0.7 allows remote attackers to read arbitrary files via a .. dot dot in the item parameter...

USP FOSS Distribution 1.01(download.php dnld)Remote File Disclosure

USP FOSS Distribution 1.01download.php dnldRemote File Disclosure D.Script: http://norcalvex.org/pagode/uspfossv101.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Dork:intitle:USP FOSS Distribution V.Code In /user/download.php: /user/download.php ? $file = @$GET'dnld';----+...

USP FOSS Distribution 1.01 (dnld) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ====================================================================== USP FOSS Distribution 1.01 dnld Remote File Disclosure Vulnerability ====================================================================== USP FOSS Distribution...

USP FOSS Distribution 1.01 - 'dnld' Remote File Disclosure

USP FOSS Distribution 1.01download.php dnldRemote File Disclosure D.Script: http://norcalvex.org/pagode/uspfossv101.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Dork:intitle:USP FOSS Distribution V.Code In /user/download.php: /user/download.php Exploit:PathUSP...

USP FOSS Distribution 1.01 - dnld Remote File Disclosure

USP FOSS Distribution 1.01 - dnld Remote File Disclosure USP FOSS Distribution 1.01download.php dnldRemote File Disclosure D.Script: http://norcalvex.org/pagode/uspfossv101.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Dork:intitle:USP FOSS Distribution V.Code In...

USP FOSS Distribution 1.01 (dnld) Remote File Disclosure Vulnerability

No description provided by source. USP FOSS Distribution 1.01download.php dnldRemote File Disclosure D.Script: http://norcalvex.org/pagode/uspfossv101.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Dork:intitle:USP FOSS Distribution V.Code In /user/download.php:...

garennes-rfi.txt

Garennes 0.6.1 = Remote File Include Vulnerablites D.Script: https://adullact.net/frs/download.php/672/garennes-easyphp-0.6.1.zip Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/cpe/index.php?repertoireconfig=Shell Exploit:Path/direction/index.php?repertoireconfig=She...