myktools-lfi.txt

Autor: x0r Email: evolutionteam.x0atgmaildotcom Download: http://www.easy-script.com/scripts-dl/MyKtools-v2-4.zip Bug: LFI Bug: In \update.php // Include du fichier langue if $GET'langage' $langue = $GET'langage'; include "lang/".$langue.".php"; Exploit:...

myforum-lfi.txt

o------------------------------------------------------------------------------------x | Local File Inclusion Vulnerability | o------------------------------------------------------------------------------------o | Software : MyForum 1.3 | | Download :...

Tlnews 2.2 - Insecure Cookie Handling

Tlnews 2.2 Admin Login Bypass via Cookie Found by X0r - EvolutionTeaM Email: evolutionteam.x0atgmaildotcom Cms Download: http://www.easy-script.com/scripts-dl/tlnews-22.zip Exploit: javascript:document.cookie = "tlNewslogin=admin; content=admin; path=/" Beby y0ur system g0t d0wn :P // X0r -...

miniPortail <= 2.2 (XSS/LFI) Remote Vulnerabilities

No description provided by source. / miniPortail = 2.2 XSS/LFI Remote Vulnerabilities ------------------------------------------------------- By StAkeR - StAkeRathotmaildotit http://www.easy-script.com/scripts-dl/miniportail.zip ------------------------------------------------------- -1 Local Fil...

PHP Easy Download admin/save.php Paramater Code Injection Vulnerability

The remote web server contains a PHP script that is affected by a remote code execution issue. Description: The version of PHP Easy Download installed on the remote host fails to sanitize input to the 'moreinfo' parameter before using it in the 'save.php' script. By sending a specially-crafted...

PHP Easy Download admin/save.php Parameter Code Injection Vulnerability

The version of PHP Easy Download installed on the remote host fails to sanitize input to the SPDX-FileCopyrightText: 2008 Justin Seitz Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Easy File Sharing Web Server Information Disclosure

The version of Easy File Sharing Web Server that is installed on the remote host fails to restrict access to files via alternative data streams. By passing a specially-crafted request to the web server, an attacker may be able to access privileged information. SPDX-FileCopyrightText: 2008 Justin...

Easy File Sharing Web Server Information Disclosure

The remote web server is affected by an information disclosure vulnerability. Description : The version of Easy File Sharing Web Server that is installed on the remote host fails to restrict access to files via alternative data streams. By passing a specially-crafted request to the web server, an...

miniPortail 2.2 - Cross-Site Scripting Local File Inclusion

miniPortail 2.2 - Cross-Site Scripting Local File Inclusion / miniPortail javascript / milw0rm.com 2008-10-23...

XM Easy Personal FTP Server 'NSLT' Command Remote DoS Vulnerability

The host is running XM Easy Personal FTP Server, which is prone to denial of service vulnerability. The vulnerability is due to an error when handling a malformed NLST command. OpenVAS Vulnerability Test $Id: secpodxmeasypersonalftpserverdosvuln900158.nasl 4557 2016-11-17 15:51:20Z teissa $...

Wysi Wiki Wyg 1.0 (LFI/XSS/PHPInfo) Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Wysi Wiki Wyg 1.0 LFI/XSS/PHPInfo Remote Vulnerabilities ========================================================== / Wysi Wiki Wyg 1.0 LFI,XSS,PHPInfo Remote Vulnerabilities...

Wysi Wiki Wyg 1.0 - Local File Inclusion Cross-Site Scripting PHPInfo

Wysi Wiki Wyg 1.0 - Local File Inclusion Cross-Site Scripting PHPInfo / Wysi Wiki Wyg 1.0 LFI,XSS,PHPInfo Remote Vulnerabilities ---------------------------------------------------------- By StAkeRathotmaildotit http://www.easy-script.com/scripts-dl/wysiwikiwyg10.zip...

PHP Easy Downloader <= 1.5 Remote File Creation Exploit

No description provided by source. !/usr/bin/perl -------------------------------------------------------- PHP Easy Downloader = 1.5 Remote File Creation Exploit By StAkeR aka athos - StAkeRathotmaildotit On 17/10/2008 http://www.hasemithut.de/downloads/index.php...

CVE-2008-4604

SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2008-4604

SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

Sql injection

SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

PHP Easy Downloader <= 1.5 Remote File Creation Exploit

Exploit for unknown platform in category web applications ======================================================= PHP Easy Downloader ; if$code ! // print "? You must insert PHP Code\r\n"; exit; my $post = $http-post$host.'/fileinfo/admin/save.php', filename = $file, accesses = $code.'//', ;...

CVE-2008-4604

SQL injection vulnerability in index.php in Easy CafeEngine 1.1 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2008-4604

CVE-2008-4604 affects Easy CafeEngine 1.1. Affected component: index.php. Vulnerability: SQL injection in the itemid parameter in index.php, enabling remote execution of arbitrary SQL commands. Root cause: improper sanitization of input leading to SQL injection. Impact as stated by sources: parti...

ped-disclose.txt

::::::::::::::::::::R3AL.RU:::::::::::::::::::: PHP Easy Downloader = 1.5 Remote File Download Author: LMaster Greetz: Pogozheva Irina Borisovna and r3al.ru Download: http://www.hasemithut.de/downloads/index.php Exploit: http://www.target.com/phpeasydownloader/index.php?file=index.php...