390 matches found
PT-2025-30233
Name of the Vulnerable Software and Affected Versions: File contents affected versions not specified Description: An attacker could read file contents from the local file system. Malicious code could be inserted into the file, potentially leading to a full compromise of the web application and it...
WP EasyCart Plugin for WordPress < 5.4.3 Local File Inclusions
The WordPress WP EasyCart Plugin installed on the remote host is affected by an flaw which permits authenticated admin users to perform local file inclusion LFI attacks against the host system. Note that the scanner has not tested for these issues but has instead relied only on the application's...
LFiFreak - An automated LFi Exploiter with Bind/Reverse Shells
LFiFreak is a tool for exploiting local file inclusions using PHP Input, PHP Filter and Data URI methods. Features Works with Windows, Linux and OS X Includes bind and reverse shell for both Windows and Linux Written in Python 2.7 Dependencies BeautifulSoup Download LFiFreak...
Htcap - web application scanner able to crawl single page application (SPA) in a recursive manner by intercepting ajax calls and DOM changes
htcap is a web application scanner able to crawl single page application SPA in a recursive manner by intercepting ajax calls and DOM changes. Htcap is not just another vulnerability scanner since it's focused mainly on the crawling process and uses external tools to discover vulnerabilities. It'...
Bigware Shop 2.3.01 - Multiple Local File Inclusions
Title: Bigware Shop 2.3.01 Multiple Local File Inclusion Vulnerabilities Author: bd0rk eMail: bd0rkathackermail.com Twitter: twitter.com/bd0rk Tested on: Ubuntu-Linux Vendor: http://www.bigware.de Download: http://www.bigware.de/download/bigwaresoftware-vollversion/BigwareShop.zip...
CollabNet Subversion Edge Management 4.0.11 - Local File Inclusion Vulnerability
Exploit for linux platform in category web applications Vuln Title: Local file inclusion in CollabNet Subversion Edge Management Frontend via logfile "fileName" parameter of the "tail" action Date: 28.06.2015 Author: otr Software Link: https://www.open.collab.net/downloads/svnedge Vendor: CollabN...
CollabNet Subversion Edge Management Show LFI
Vuln Title: Local file inclusion in CollabNet Subversion Edge Management Frontend via "fileName" parameter of the show action Date: 10.10.2014 Author: otr Software Link: https://www.open.collab.net/downloads/svnedge Vendor: CollabNet Version: 4.0.11 Tested on: Fedora Linux Type: Local file...
phPortal 1.2 - Multiple Remote File Inclusions Exploit
No description provided by source. !/usr/bin/perl phportal1.2Beta gunaysoft.php Remote File Include Vulnerability Discovered by : Ciph3r Class: Remote File Include Vulnerability exemplary Exp: http://www.site.com/sablonlar/gunaysoft/gunaysoft.php?icerikyolu=shell...
PHP-Nuke <= 7.9 Final (phpbb_root_path) Remote File Inclusions
No description provided by source. Milli-Harekat Advisory www.milli-harekat.org PHP-Nuke = All version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : PHP NUKE ALL VERSION Credits : ERNE Thanks : DjReMix,Eskobar,TRIP,ßy KorsaN,OsL3m7,Poizonbox,Dilejyoner and All MHG USERS...
podcast generator <= 1.2 globals[] Multiple Vulnerabilities
No description provided by source. ++ | Podcast Generator = 1.2 GLOBALS Multiple Remote Vulnerabilities | ++ | by staker - stakerathotmaildotit / http://zeroidentity.org | ++ +-------------------------------------------------------------------------------------+ | Remote/Local Arbitrary File...
dForum <= 1.5 (DFORUM_PATH) Multiple Remote File Inclusions
No description provided by source. dForum = 1.5 DFORUMPATH Multiple Remote File Inclusion Vulnerabilities. Method found by nukedx, Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploit works on dForum = 1.5...
ViArt Shop Evaluation 4.1 - Multiple Remote File Inclusions
ViArt Shop Evaluation 4.1 - Multiple Remote File Inclusions Exploit Title: ViArt Shop Evaluation v4.1 Multiple Remote File Inclusion Vulnerability Date: 26/9/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://www.viart.com/ Software...
ViArt Shop Evaluation 4.1 - Multiple Remote File Inclusions
Exploit Title: ViArt Shop Evaluation v4.1 Multiple Remote File Inclusion Vulnerability Date: 26/9/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://www.viart.com/ Software Link: http://www.viart.com/downloads/viartshop-4.1.zip Versio...
MindTouch DekiWiki - Multiple Local/Remote File Inclusions
source: https://www.securityfocus.com/bid/54991/info MindTouch DekiWiki is prone to multiple remote and local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary server-side script code that resides...
MindTouch DekiWiki - Multiple LocalRemote File Inclusions
MindTouch DekiWiki - Multiple LocalRemote File Inclusions source: https://www.securityfocus.com/bid/54991/info MindTouch DekiWiki is prone to multiple remote and local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues...
RIPS 0.53 - Multiple Local File Inclusions
RIPS 0.53 - Multiple Local File Inclusions RIPS = 0.53 Multiple Local File Inclusion Vulnerabilities Google Dork: allintitle: "RIPS - A static source code analyser for vulnerabilities in PHP scripts" Althout this script is not intended to be accesible from internet, there are some websites that...
RIPS 0.53 - Multiple Local File Inclusions
RIPS = 0.53 Multiple Local File Inclusion Vulnerabilities Google Dork: allintitle: "RIPS - A static source code analyser for vulnerabilities in PHP scripts" Althout this script is not intended to be accesible from internet, there are some websites that host it. Download:...
Basic Analysis and Security Engine (BASE) 1.4.5 - '/setup/base_conf_contents.php' Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/51979/info BASE is prone to a security-bypass vulnerability and multiple remote file-include vulnerabilities. An attacker can exploit these issues to gain unauthorized access, obtain potentially sensitive information, or execute arbitrary script code in t...
vBulletin 4.1.7 - Multiple Remote File Inclusions
vBulletin 4.1.7 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/50455/info vBulletin is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially...
vBulletin 4.1.7 - Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/50455/info vBulletin is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information or to execute arbitrary scri...