PHP iCalendar 2.24 - 'cookie_language' Local File Inclusion / Arbitrary File Upload

'.$lang'lcalfile'.' '.$filenumber.': '.$lang'lactionsuccess'.''; 84. else 85. $addupdatemsg = $addupdatemsg . ''.$lang'lcalfile'.'...

PHP iCalendar 2.24 - cookie_language Local File Inclusion Arbitrary File Upload

PHP iCalendar 2.24 - cookielanguage Local File Inclusion Arbitrary File Upload '.$lang'lcalfile'.' '.$filenumber.': '.$lang'lactionsuccess'.''; 84. el...

Seagull PHP Framework <= 0.6.4 (fckeditor) Arbitrary File Upload Exploit

No description provided by source. ?php / ------------------------------------------------------------------------ Seagull PHP Framework = 0.6.4 fckeditor Arbitrary File Upload Exploit ------------------------------------------------------------------------ author...: EgiX mail.....:...

Seagull PHP Framework 0.6.4 - 'FCKeditor' Arbitrary File Upload

?php / ------------------------------------------------------------------------ Seagull PHP Framework = 0.6.4 fckeditor Arbitrary File Upload Exploit ------------------------------------------------------------------------ author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...

PHPmotion 2.0 - update_profile.php Arbitrary File Upload

PHPmotion 2.0 - updateprofile.php Arbitrary File Upload = $limitsize 269. // Display file size error 270. // /////////////////////// 271. $show = 1; 272. $messagetype = $config"notificationsuccess";//the messsage displayed at t...

cmsWorks 2.2 RC4 (fckeditor) Remote Arbitrary File Upload Exploit

No description provided by source. ?php / ----------------------------------------------------------------- cmsWorks 2.2 RC4 fckeditor Remote Arbitrary File Upload Exploit ----------------------------------------------------------------- discovered by Stack exploited by ..: EgiX special thnx to...

cmsWorks 2.2 RC4 (fckeditor) Remote Arbitrary File Upload Exploit

Exploit for unknown platform in category web applications ================================================================= cmsWorks 2.2 RC4 fckeditor Remote Arbitrary File Upload Exploit =================================================================...

FreeCMS.us 0.2 (fckeditor) Arbitrary File Upload Exploit

Exploit for unknown platform in category web applications ======================================================== FreeCMS.us 0.2 fckeditor Arbitrary File Upload Exploit ======================================================== ?php / --------------------------------------------------------------...

achievo-upload.txt

array"zip","doc","xls","pdf","rtf","csv","jpg","gif","jpeg","png","avi","mpg","mpeg","swf","fla", with a default configuration of this script, an attacker might be able to upload arbitrary files containing malicious PHP code due to multiple file extensions isn't properly checked / errorreporting0...

Achievo <= 1.3.2 (fckeditor) Arbitrary File Upload Exploit

Exploit for unknown platform in category web applications ========================================================== Achievo array"zip","doc","xls","pdf","rtf","csv","jpg","gif","jpeg","png","avi","mpg","mpeg","swf","fla", with a default configuration of this script, an attacker might be able to...

fluxcms-overwrite.txt

?php / ------------------------------------------------------------------------ Flux CMS = 1.5.0 loadsave.php Remote Arbitrary File Overwrite Exploit ------------------------------------------------------------------------ author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...

Flux CMS 1.5.0 - 'loadsave.php' Arbitrary File Overwrite

?php / ------------------------------------------------------------------------ Flux CMS = 1.5.0 loadsave.php Remote Arbitrary File Overwrite Exploit ------------------------------------------------------------------------ author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...

La-Nai CMS <= 1.2.16 (fckeditor) Arbitrary File Upload Exploit

Exploit for unknown platform in category web applications ============================================================== La-Nai CMS = 1.2.16 fckeditor Arbitrary File Upload Exploit ============================================================== ?php /...

CMS Made Simple 1.2.4 Module FileManager - Arbitrary File Upload

?php / --------------------------------------------------------------------------- CMS Made Simple = 1.2.4 FileManager module Arbitrary File Upload Exploit --------------------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...

deluxebb12-multi.txt

query"SELECT COUNTtid FROM ".$prefix."threads WHERE lastpostdate='$posttime' && fid='$fid'"; 125. $nrows = $db-result$rows; 126. 127. $pageinfo = multipage$nrows, $page, $settings'tppf', "forums.php?fid=$fid"; 128. 129. include$templatefolder.'/forumsheader.dtf'; 130. 131. //get and format all...

FLABER <= 1.1 RC1 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ================================================== FLABER " . $FILENAME . " Incorrect parameter targetfile."; 18. exit; 19. 20. 21. 22. $targetfile = "../" . $targetfile; 23. 24. // if it is a file 25. if isfile $targetfile 26. 27. if...

FLABER 1.1 RC1 - Remote Command Execution

" . $FILENAME . " Incorrect parameter targetfile."; 18. exit; 19. 20. 21. 22. $targetfile = "../" . $targetfile; 23. 24. // if it is a file 25. if isfile $targetfile 26. 27. if !iswritable $targetfile 28. 29. echo "" . $FILENAME . " " . $targetfile . " is not writable."; 30. exit; 31. 32. 33. $fp...

Drake CMS <= 0.4.11 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================== Drake CMS gid 17. if '' === $gbname = in'gbname', SQL | NOHTML, $POST, '', 50 18. || '' === $gbemail = in'gbemail', SQL | NOHTML, $POST, '', 50 19. || !isemail$gbemail 20. 21...

Site@School 2.4.10 - Blind SQL Injection

? / -------------------------------------------------------- Site@School = 2.3.10 Remote Blind SQL Injection Exploit -------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http:// details..: works with magicquotesgpc = off - Blind SQL...

pmos-exec.txt

?php / ------------------------------------------------------ PMOS Help Desk = 2.4 Remote Command Execution Exploit ------------------------------------------------------ author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://www.h2desk.com/pmos dork.....: "Powered by PMOS Help Desk" ...