5166 matches found
OpenInferno OI.Blogs Multiple Local File Include Vulnerabilities
OpenInferno OI.Blogs is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user- supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver...
WikyBlog Multiple Remote Input Validation Vulnerabilities
WikyBlog is prone to multiple vulnerabilities, including an arbitrary-file- upload issue, a cross-site scripting issue, a remote file-include issue and a session-fixation issue. Attackers can exploit these issues to: - execute arbitrary script code in the browser of an unsuspecting user in the...
OpenInferno OI.Blogs 1.0 - Multiple Local File Inclusions
OpenInferno OI.Blogs 1.0 - Multiple Local File Inclusions source: https://www.securityfocus.com/bid/38402/info OpenInferno OI.Blogs is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to...
WikyBlog <= 1.7.3rc2 Multiple Vulnerabilities
WikyBlog is prone to multiple vulnerabilities, including an arbitrary file upload issue, a cross-site scripting XSS issue, a remote file include issue and a session-fixation issue. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and a...
n-cms-equipe 1.1c.Debug - Multiple Local File Inclusions
source: https://www.securityfocus.com/bid/39298/info n-cms-equipe is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute arbitrary loca...
Quicksilver Forums Local File Include and Arbitrary File Upload Vulnerabilities
Quicksilver Forums is prone to a local file-include vulnerability and an arbitrary-file-upload vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to upload arbitrary files onto the webserver, execute arbitrary local files...
Quicksilver Forums Local File Include and Arbitrary File Upload Vulnerabilities
Quicksilver Forums is prone to a local file-include vulnerability and an arbitrary-file-upload vulnerability because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, a...
vBseo v3.1.0 Local File Include Vulnerability
Exploit for unknown platform in category web applications ============================================= vBseo v3.1.0 Local File Include Vulnerability ============================================= » Script: vBseo » Language: PHP === Exploit === »...
Scriptegrator Plugin for Joomla! 'files[]' Parameter Remote File Include
The version of the Core Design Scriptegrator plugin for Joomla! running on the remote host is affected by a remote file include vulnerability due to improper sanitization of user-supplied input to the 'files' parameter before using it in the cdscriptegrator/libraries/highslide/js/jsloader.php...
CMS Made Simple Local File Include and Cross Site Scripting Vulnerabilities
CMS Made Simple is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within...
CMS Made Simple <= 1.6.6 LFI and XSS Vulnerabilities
CMS Made Simple is prone to a local file include LFI vulnerability and a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
ZeusCMS v0.2 Local File Include Vulnerability
Exploit for unknown platform in category web applications ============================================= ZeusCMS v0.2 Local File Include Vulnerability ============================================= » Script: ZeusCMS » Language: PHP » Site page: ZeusCMS is yet another Content Management System »...
ZeusCMS 0.2 - Database Backup Dump Local File Inclusion
ZeusCMS 0.2 - Database Backup Dump Local File Inclusion ============================================================================== » Note : Tribute to the martyrs of Gaza . ============================================================================== » ZeusCMS v0.2 DBD/LFI Multiple...
Saskia's Shopsystem <= beta1 Local File Include Exploit
Exploit for unknown platform in category web applications ======================================================= Saskia's Shopsystem Download: http://sourceforge.net/projects/saskiasshop/files/ Date: 13.02.2010 Remote: yes Vuln : include"include/".$id.".php"; PoC : Saskiapath/content.php?id=LFI%...
simplePMS <= 0.1.4 Local File Include Vulnerability
Exploit for unknown platform in category web applications =================================================== simplePMS + Download : http://sourceforge.net/projects/simplepms/files/ + Code : content.php + Example : simplePMSpath/include/content.php?filename=LFI%00 0day.today 2018-01-03...
Newsletter Tailor v0.2.0 RFI Vulnerability
Exploit for unknown platform in category web applications ========================================== Newsletter Tailor v0.2.0 RFI Vulnerability ========================================== ============================================================================== » Newsletter Tailor Remote Fil...
Cpanel Image Manager Local File Include Exploit
No description provided by source. Cpanel Image Manager Local File Include Exploit Author : AnTi SeCuRe TeaM : SauDi ViRuS TeaM Site : WwW.VxX9.Cc Email : [email protected] =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= How To Exploit :...
JaxCMS v1.0 Local File Include Vulnerability
Exploit for unknown platform in category web applications ============================================ JaxCMS v1.0 Local File Include Vulnerability ============================================ / Name : JaxCMS p Local File Include WebSite : http://www.pixiescripts.com/ Author : Hamza 'MizoZ' N. /...
EncapsCMS <= 0.3.6 (config[path]) Remote File Include Vulnerability
No description provided by source. + EncapsCMS = 0.3.6 configpath Remote File Include Vulnerability + Discovered by cr4wl3r cr4wl3r!linuxmail.org + Download : http://scripts.ringsworld.com/content-management/encapscms-0.3.6/ + Vuln Code : commonfoot.php include$config'path'."idxfoot.html";...
EncapsCMS <= 0.3.6 (config[path]) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =================================================================== EncapsCMS 0 echo ''; echo '$POST:';vardump$POST; + PoC : EncapsCMSpath/commonfoot.php?configpath=Shell 0day.today 2018-03-28...