Magnifica Webscripts Anima Gallery Directory Traversal Vulnerability

Magnifica Webscripts is a PHP image management system. Magnifica Webscripts Anima Gallery suffers from a directory traversal vulnerability due to the func.php function in the program failing to adequately filter the 'theme' and 'lang' cookie parameter, which allows remote attackers to obtain the...

AnimaGallery 2.6 - Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: AnimaGallery 2.6 theme and lang cookie parametre Local File Include Vulnerability Date: 2015/06/07 Vendor Homepage: http://dg.no.sapo.pt/ Software Link:http://dg.no.sapo.pt/AnimaGallery2.6.zip Version: 2.6 Tested on: Centos...

CVE-2015-4415

The provided connected sources confirm CVE-2015-4415 affects Magnifica Webscripts Anima Gallery 2.6, specifically the func.php component. The vulnerability is a directory traversal flaw that allows remote attackers to include and execute arbitrary local files by manipulating the theme or lang coo...

CVE-2015-4415: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in func.php in Magnifica Webscripts Anima Gallery 2.6 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 theme or 2 lang cookie parameter to AnimaGallery/...

AnimaGallery 2.6 (theme and lang cookie parameter) Local File Include Vulnerability

Exploit Title: AnimaGallery 2.6 theme and lang cookie parameter Local File Include Vulnerability Date: 2015/06/07 Vendor Homepage: http://dg.no.sapo.pt/ Software Link:http://dg.no.sapo.pt/AnimaGallery2.6.zip Version: 2.6 Tested on: Centos 6.5,php 5.3.2,magicquotesgpc=off Category: webapps...

CVE-2011-4432: Undefined Security Weakness

www/include/configuration/nconfigObject/contact/DB-Func.php in Merethis Centreon before 2.3.2 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach...

CVE-2008-4332: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the showjavatopic function in func.php in PHP infoBoard V.7 Plus allows remote attackers to execute arbitrary SQL commands via the idcat parameter to showtopic.php...

CVE-2008-2913: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in func.php in Devalcms 1.4a, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the currentpath parameter, in conjunction with certain ... triple dot and ..... sequences in the currentfile...

devalcms-lfi.txt

===================================================== Devalcms 1.4a Local File Inclusion Vulnerability ===================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Devalcms 1.4a (currentfile) Local File Inclusion Vulnerability

No description provided by source. ===================================================== Devalcms 1.4a Local File Inclusion Vulnerability ===================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Devalcms 1.4a - currentfile Local File Inclusion

Devalcms 1.4a - currentfile Local File Inclusion ===================================================== Devalcms 1.4a Local File Inclusion Vulnerability ===================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...

Devalcms 1.4a (currentfile) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================== Devalcms 1.4a currentfile Local File Inclusion Vulnerability ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||...

aForum <= 1.32 (CommonAbsDir) Remote File Inclusion Vulnerability

No description provided by source. AForum =1.33 Remote file inclusion Func.php Download Script : http://www.agner.org/software/msgbrd2/aforum.zip Thanks Str0ke D0rk:allintitle:List of messageboards Exploit : http://localhost/aforumpath/common/func.php?CommonAbsDir=shell.txt? Discovered By : ThE...

CVE-2007-2596: Undefined Security Weakness

PHP remote file inclusion vulnerability in common/func.php in aForum 1.32 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CommonAbsDir parameter...

aforum-rfi.txt

AForum =1.33 Remote file inclusion Func.php Download Script : http://www.agner.org/software/msgbrd2/aforum.zip Thanks Str0ke D0rk:allintitle:List of messageboards Exploit : http://localhost/aforumpath/common/func.php?CommonAbsDir=shell.txt? Discovered By : ThE TiGeR Greetz : Reda, $BraveHeart$...

aForum 1.32 - 'CommonAbsDir' Remote File Inclusion

AForum =1.33 Remote file inclusion Func.php Download Script : http://www.agner.org/software/msgbrd2/aforum.zip Thanks Str0ke D0rk:allintitle:List of messageboards Exploit : http://localhost/aforumpath/common/func.php?CommonAbsDir=shell.txt? Discovered By : ThE TiGeR Greetz : Reda,...

SubberZ[Lite] - Remote File Include

Chironex Fleckeri SubberZLite - Remote File Include Find by Chironex Fleckeri Mail/MSN: [email protected] http://site/path/user-func.php?myadmindir=Shell...

CVE-2006-3689

PHP remote file inclusion vulnerability in user-func.php in Codeworks Gnomedia SubberZLite allows remote attackers to execute arbitrary PHP code via a URL in the myadmindir parameter. NOTE: this issue has been disputed by a third party that claims that " the myadmindir variable is set before any...

PT-2006-4555 · Codeworks · Codeworks Gnomedia Subberz[Lite]

Name of the Vulnerable Software and Affected Versions: Codeworks Gnomedia SubberZLite affected versions not specified Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the myadmindir parameter in the user-func.php file. However, a third party has disputed...

CVE-2006-3689: Undefined Security Weakness

PHP remote file inclusion vulnerability in user-func.php in Codeworks Gnomedia SubberZLite allows remote attackers to execute arbitrary PHP code via a URL in the myadmindir parameter. NOTE: this issue has been disputed by a third party that claims that " the myadmindir variable is set before any...