PHProg.txt

------=Part387718013116.1157965429026 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Content-Disposition: inline 11/09/06 Produit vuln=E9rable : PHProg Album photo en PHP Site officiel du produit : http://www.PHProg.com/ Failles de...

jetboxCMSSQL.txt

Hello,, Multible Injections in Jetbox CMS Discovered By : HACKERS PAL & mohajali Copy rights : HACKERS PAL & mohajali Website : http://www.soqor.net Email Address : [email protected] This Contains multible injections and vulnerabilities in Jetbox CMS // sql injections if magicquotesgpc = off...

XHP CMS v0.5.1 Vuls Xss and Full path vuls

Hello,, XHP CMS v0.5.1 Vuls Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Xss index.php?errcode=scriptalertdocument.cookie;/script Full path action.php?action=1&module=engine...

MagpieRSS (a simple RSS integration tool) Full path vul

Hello MagpieRSS a simple RSS integration tool Full path vul magpierss/rssfetch.inc.php magpierss/rssparse.inc.php...

[Full-disclosure] PHProg : Local File Inclusion + XSS + Full path disclosure

11/09/06 Produit vulnerable : PHProg Album photo en PHP Site officiel du produit : http://www.PHProg.com/ Failles de securite decelees : 1 Full path disclosure : http://localhost/PHProg/?id=1&album=cdg393 2 Cross Site Scripting XSS : http://localhost/PHProg/?id=1&album= scriptalert'cdg393'/script...

softbb01.txt

!/usr/bin/perl Affected.scr..: SoftBB 0.1 Poc.ID........: 11060904 Type..........: PHP code execution, SQL Injection, Full Path Disclosure Risk.level....: High Vendor.Status.: Unpatched Src.download..: softbb.be Poc.link......: acid-root.new.fr/poc/11060904.txt Advisory.link.:...

SoftBB 0.1 (cmd) Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl Affected.scr..: SoftBB 0.1 Poc.ID........: 11060904 Type..........: PHP code execution, SQL Injection, Full Path Disclosure Risk.level....: High Vendor.Status.: Unpatched Src.download..: softbb.be Poc.link......: acid-root.new.fr/poc/11060904.txt...

SoftBB 0.1 (cmd) Remote Command Execution Exploit

Exploit for unknown platform in category web applications ================================================= SoftBB 0.1 cmd Remote Command Execution Exploit ================================================= !/usr/bin/perl Affected.scr..: SoftBB 0.1 Poc.ID........: 11060904 Type..........: PHP code...

SoftBB 0.1 - 'cmd' Remote Command Execution

!/usr/bin/perl Affected.scr..: SoftBB 0.1 Poc.ID........: 11060904 Type..........: PHP code execution, SQL Injection, Full Path Disclosure Risk.level....: High Vendor.Status.: Unpatched Src.download..: softbb.be Poc.link......: acid-root.new.fr/poc/11060904.txt Advisory.link.:...

Full Path Disclosure xGuestBook v1.02

Dicomdk Full Path Disclosure xGuestBook v1.02 http://xatrix.xa.funpic.de/xguestbook2/ By : X-boy http://HOST/post.php Test : http://xatrix.xa.funpic.de/xguestbook2/post.php Result : ======== Notice: Undefined index: user in sitepost.php on line 15 Notice: Undefined index: mail in sitepost.php on...

DotClear : Multiples Full Path Disclosure

DotClear : Multiples Full Path Disclosure Discovred By Silitix - Silitixgmailcom www.Silitix.com A remote user can access the files directly to cause the system to display an error message that indicates the full path of the server. /ecrire/tools/blogroll/editcat.php...

WordPress <= 2.0.3 - Full Path Disclosure

Because of this vulnerabilitity, attackers can obtain the installation path via a direct request to various files for the example, wp-includes directories, wp-content, and wp-admin. Solution Update the WordPress to the latest available version at least 2.0.4...

WordPress 2.0.3 SQL Error and Full Path Disclosure

WordPress 2.0.3 SQL Error and Full Path Disclosure Discovered By zero Moroccan Security Team Software: WordPress 2.0.3 Site : www.wordpress.org SQL Error Example: http://localhost/wordpress/index.php?paged=-1 Result: WordPress database error: Erreur de syntaxe pr?s de '-20, 10' ? la ligne 1 SELEC...

phpBB 2.0.21 Full Path Disclosure

------------------------------------------------------------------- phpBB 2.0.21 Full Path Disclosure ------------------------------------------------------------------- Discovered By zero Moroccan Security Team ------------------------------------------------------------------- Details Software:...

Zen-Cart 1.3.0.2 Full Path Disclosure

Zen-Cart 1.3.0.2 En: Zen-Cart .. E-commerce PHP Program - This Bug Can Tell U Where The Program @ Server Ar: .. Full Path Disclosure :- /index.php?GET= /index.php?SESSION= /index.php?POST= /index.php?COOKIE= /index.php?SESSION= /------------------------------------------/...

News52.txt

!/usr/bin/perl VulnScr: News version 5.2 and prior E-mail: [email protected] Web: www.vincent-leclercq.com Date: Thu June 29 12:01 2006 Credits: DarkFig [email protected] Vuln: XSS, Full Path Disclosure, SQL Injection Advisorie: http://www.acid-root.new.fr/advisories/news52.txt frenc...

buddyzone101.txt

Buddy Zone Version 1.0.1 Homepage: http://www.vastal.com/buddy-zone-social-networking-script.html Affected files: Sending invitations Profiles Blogs Journals Posting comments Posting in the forum Sending mail Creating a group viewsubforum.php viewpost.php viewclassifieds.php viewad.php...

Buddy Zone Version 1.0.1 - XSS

Buddy Zone Version 1.0.1 Homepage: http://www.vastal.com/buddy-zone-social-networking-script.html Affected files: Sending invitations Profiles Blogs Journals Posting comments Posting in the forum Sending mail Creating a group viewsubforum.php viewpost.php viewclassifieds.php viewad.php...

v3chatIM.txt

V3 Chat Instant Messenger http://www.v3chat.com/ Affected files: /mail/index.php /mail/reply.php isonline.php online.php profile.php profileview.php search.php mycontacts.php expire.php Editing your profile: - input boxes ------------------------------------------ Mail Vulnerabilities: Full path...

singaporeMultiple.txt

Produce : singapore gallery Versions : 0.10.0 and prior Site : http://www.sgal.org/ Discovred By : Moroccan Security Research Team Simo64 Greetz : CiM-Team - dabdoub - DarkbiteX - drackanz - Iss4m - Mourad - Rachid .:r00tkita - s4mi - Silitix - tahati - And All Friends : - Vulnerable code near...