phpcrs <= 2.06 (importFunction) Local File Inclusion Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpcrs = 2.06 / Local File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: phpcrs $ Version: = 2.06 $ File affected: frame.php $ Download:...

phpcrs 2.06 - importFunction Local File Inclusion

phpcrs 2.06 - importFunction Local File Inclusion -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpcrs eNYe-Sec - www.enye-sec.org --Bug -- 151. elseif isset $btnStartImport 152. require"../inc/frmDoImport.inc.php"; 153. require"../inc/". $importFunction .".inc.php"; 154...

phpcrs <= 2.06 (importFunction) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== phpcrs = 2.06 importFunction Local File Inclusion Vulnerability ==================================================================...

phpcrs-lfi.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpcrs eNYe-Sec - www.enye-sec.org --Bug -- 151. elseif isset $btnStartImport 152. require"../inc/frmDoImport.inc.php"; 153. require"../inc/". $importFunction .".inc.php"; 154. require"../inc/inc/getFunctions.inc.php"; 155. $importFunction; 156...

phpcrs 2.06 - 'importFunction' Local File Inclusion

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpcrs eNYe-Sec - www.enye-sec.org --Bug -- 151. elseif isset $btnStartImport 152. require"../inc/frmDoImport.inc.php"; 153. require"../inc/". $importFunction .".inc.php"; 154. require"../inc/inc/getFunctions.inc.php"; 155. $importFunction; 156...

Ol BookMarks Manager 0.7.5 - Local File Inclusion Remote File Inclusion SQL Injection

Ol BookMarks Manager 0.7.5 - Local File Inclusion Remote File Inclusion SQL Injection Ol Bookmarks Manager 0.7.5 RFI / LFI / SQL Injection Vulnerabilities POC & Vulns RFI In frame.php In Line 46 include "$GETframefile"; Ex : /frame.php?framefile=Shell LFI In /read/frame.php In Line 46 include...

Ol Bookmarks Manager 0.7.5 RFI / LFI / SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ==================================================================== Ol Bookmarks Manager 0.7.5 RFI / LFI / SQL Injection Vulnerabilities ==================================================================== Ol Bookmarks Manager 0.7.5 RFI /...

olbookmarks-rfilfisql.txt

Ol Bookmarks Manager 0.7.5 RFI / LFI / SQL Injection Vulnerabilities POC & Vulns RFI In frame.php In Line 46 include "$GETframefile"; Ex : /frame.php?framefile=Shell LFI In /read/frame.php In Line 46 include "../$GETframefile"; Ex : /frame.php?framefile=../../../../../../etc/passwd SQL Injection ...

CVE-2007-5982

Multiple cross-site scripting XSS vulnerabilities in X7 Chat 2.0.4, 2.0.5, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the 1 room parameter to sources/frame.php, the 2 themec parameter to help/index.php, or the 3 INSTALLX7CHATVERSION parameter to...

CVE-2007-5982: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in X7 Chat 2.0.4, 2.0.5, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the 1 room parameter to sources/frame.php, the 2 themec parameter to help/index.php, or the 3 INSTALLX7CHATVERSION parameter to...

X7 Chat 2.0.4 - frame.php Cross-Site Scripting

X7 Chat 2.0.4 - frame.php Cross-Site Scripting source: https://www.securityfocus.com/bid/26417/info X7 Chat is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute...

PHPMyphorum Frame.PHP远程文件包含漏洞

PHPMyphorum是一款基于PHP的WEB应用程序。 PHPMyphorum不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Frame.PHP'脚本对用户提交的'chem'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 PHPMyphorum 目前没有解决方案提供： http://sourceforge.net/projects/uberghey/...

Remote file inclusion

PHP remote file inclusion vulnerability in mep/frame.php in PHPMyphorum 1.5a allows remote attackers to execute arbitrary PHP code via a URL in the chem parameter...

CVE-2007-0361: Undefined Security Weakness

PHP remote file inclusion vulnerability in mep/frame.php in PHPMyphorum 1.5a allows remote attackers to execute arbitrary PHP code via a URL in the chem parameter...

PHPMyphorum 1.5a (mep/frame.php) Remote File Include Vulnerability

No description provided by source...

PHPMyphorum 1.5a (mep/frame.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================== PHPMyphorum 1.5a mep/frame.php Remote File Include Vulnerability ================================================================== PHPMyphorum 1.5a Class: File Include...

PHPMyphorum 1.5a - '/mep/frame.php' Remote File Inclusion

PHPMyphorum 1.5a Class: File Include Vulnerability Published 2007/1/17 Remote: Yes Critical Level : Dangerous Site: http://www.comscripts.com/scripts/php.phpmyphorum.1104.html Author: TheViper-hacker Contact: [email protected] file ; frame.php...