1892 matches found
Remote file inclusion
PHP remote file inclusion vulnerability in config.php in Built2Go PHP Link Portal 1.79 allows remote attackers to execute arbitrary PHP code via a URL in the fullpathtodb parameter...
CVE-2007-2250
admin.php in Phorum before 5.1.22 allows remote attackers to obtain the full path via the module parameter...
lwphpbb2-rfi.txt
------=Part5959220650484.1177339131270 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline AuThor:Silitoad emA!l:SilitoadathotmaildotCom HoMePaGe: http://www.Arabian-FighterZ.com Info LWphpBB2 Version: 0.4c Problem: Full path...
cm4p-rfi.txt
AuThor:Silitoad emA!l:SilitoadathotmaildotCom HoMePaGe: http://www.Arabian-FighterZ.com Info website: http://www.mariovaldez.net cms: cm4p Version: 0.6.1 Download: http://www.mariovaldez.net/software/cm4p/files/cm4p0.6.1.zip Problem: Include file bug: includeonce $pathpre . "cm/cmanon.inc.php";...
metabb-rfi.txt
AuThor:Silitoad emA!l:SilitoadathotmaildotCom HoMePaGe: http://www.Arabian-FighterZ.com Info cms: metabb Version: 6 Download:http://www.hotscripts.com/jump.php?listingid=61127&jumptype=1 Problem: Include file bug: includeonce$phprootpath . 'rabbitoshi/includes/functionsrabbitoshicron. Vuls 1.Full...
modx-rfi.txt
AuThor:Silitoad emA!l:SilitoadathotmaildotCom HoMePaGe:http://www.silitoad.org Powered By Silitoad From Arabian-Fighterz Info Website: http://modxcms.com/ Version: 0.9.5 Download: http://modxcms.com/assets/snippets/filedownload/download.php?path=YnVpbGRz&fileName=modx-0.9.5.zip Problem: Full path...
Phorum 5.1.20 - 'admin.php?module[]' Full Path Disclosure
source: https://www.securityfocus.com/bid/23616/info Phorum is prone to multiple input-validation vulnerabilities, including an unauthorized-access issue, privilege-escalation issue, multiple SQL-injection issues, and cross-site scripting issues, because the application fails to sufficiently...
fsbchat09-rfi.txt
AuThor:Silitoad emA!l:SilitoadathotmaildotCom HoMePaGe:http://www.Arabian-FighterZ.com Powered By Silitoad From Arabian-Fighterz Info Website: http://www.zoneur.com Version: 0.9 Download: http://pub.zoneur.com/script/php/fsb/fsbchat/fsbchat-0.9.rar Problem: Include file bug: includeonce $racine...
IPB (Invision Power Board) Full Path Disclusure
Hello IPB Invision Power Board Full Path Disclusure Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Tested on 2.1.X and 2.2.X Maybe Infected ipskernel/PEAR/Text/Diff3.php ipskernel/PEAR/Text/Diff/Renderer/unified.php...
myspeach-inclusion.txt
/=======================================\ | Advisory :: MySpeach = 5.0.0, registerglobals = On, allowurlfopen = On | | Vuln 2 : registerglobals = On | | Risk level : High | | | +-------------------------------------------------------------------------------------------------------+ | | | Program...
MySpeach <= 3.0.7 Remote/Local File Inclusion Vulnerability
/======================================= | Advisory :: MySpeach = 3.0.7 | +=======================================+--------------------------------------------------------------- | | | Download link : http://www.graphiks.net/scripts-php/script-7-1-0.html | | Official website : www.graphiks.net | ...
MySpeach 3.0.7 - LocalRemote File Inclusion
MySpeach 3.0.7 - LocalRemote File Inclusion /=======================================\ | Advisory :: MySpeach = 5.0.0, registerglobals = On, allowurlfopen = On | | Vuln 2 : registerglobals = On | | Risk level : High | | |...
MySpeach 3.0.7 - Local/Remote File Inclusion
/=======================================\ | Advisory :: MySpeach = 5.0.0, registerglobals = On, allowurlfopen = On | | Vuln 2 : registerglobals = On | | Risk level : High | | | +-------------------------------------------------------------------------------------------------------+ | | | Program...
drake-xss.txt
Hello DrakeCMS multiple vulerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Local File Inclusion 404.php?dprivate=soqor.net? Local File and Full path classes/captcha/captcha.jpg.php?dprivate=../& Xss Cross Site...
DrakeCMS multiple vulerabilities
Hello DrakeCMS multiple vulerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Local File Inclusion 404.php?dprivate=soqor.net? Local File and Full path classes/captcha/captcha.jpg.php?dprivate=../& Xss Cross Site...
phpbb2. 0. 1 2 full path disclosure vulnerability-a vulnerability warning-the black bar safety net
phpbb is a powerful, scalable open source electronic Bulletin system. The latest version and low version are there is a path disclosure issue. Test method: The forum path is/viewtopic. php? p=6&highlight=\xiaohua Will appear the following text: Warning: Compilation failed: missing terminating for...
photostand120-xss.txt
Photostand1.2.0 Multiple Cross Site Scripting Vendor site : http://www.photostand.org/ Global risk : medium XSS ----- + Permanents Message & name fields are vulnerable to xss attacks. This kind of xss are pretty dangerous,because anyone who see the page gone get his cookie stolen and sended to th...
sitex multiple vulnerabilities
global risk:critical upload vulnerability: in user profile upload an avatar with a double extension like : file.php.jpg once it's done,you gone get an error like:Fatal error: Call to undefined function imagedestroy in /. but the last extension jpg will be removed by the script, and stored in :...
Photostand_1.2.0 Multiple Cross Site Scripting
Photostand1.2.0 Multiple Cross Site Scripting Vendor site : http://www.photostand.org/ Global risk : medium XSS ----- + Permanents Message & name fields are vulnerable to xss attacks. This kind of xss are pretty dangerous,because anyone who see the page gone get his cookie stolen and sended to th...