67 matches found
fuzzylime cms <= 3.03a Local Inclusion / Arbitrary File Corruption PoC
Exploit for unknown platform in category web applications ====================================================================== fuzzylime cms = 3.03a Local Inclusion / Arbitrary File Corruption PoC ======================================================================...
fuzzylime cms code/track.php Local File Inclusion Vulnerability
fuzzylime CMS is prone to Local File Inclusion vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
fuzzylime cms 3.03 (track.php p) Local File Inclusion Vulnerability
No description provided by source. / --+---=+--==+++++ -- FuzzyLime 3.03 Local File Iclude PoC -0- -======+++++---'''' -- Vuln - code/track.php $m = $GETm; $p = $GETp; //1 include "settings.inc.php"; if!isset$POSTurl || !isset$POSTtitle || !isset$POSTexcerpt //2 header"Location:...
Fuzzylime CMS 3.03 - track.php Local File Inclusion
Fuzzylime CMS 3.03 - track.php Local File Inclusion / --+---=+--==+++++ -- FuzzyLime 3.03 Local File Iclude PoC -0- -======+++++---'''' -- Vuln - code/track.php $m = $GETm; $p = $GETp; //1 include "settings.inc.php"; if!isset$POSTurl || !isset$POSTtitle || !isset$POSTexcerpt //2 header"Location:...
fuzzylime cms 3.03 (track.php p) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications =================================================================== fuzzylime cms 3.03 track.php p Local File Inclusion Vulnerability =================================================================== / --+---=+--==+++++ -- FuzzyLime 3.03...
Fuzzylime CMS 3.03 - 'track.php' Local File Inclusion
/ --+---=+--==+++++ -- FuzzyLime 3.03 Local File Iclude PoC -0- -======+++++---'''' -- Vuln - code/track.php $m = $GETm; $p = $GETp; //1 include "settings.inc.php"; if!isset$POSTurl || !isset$POSTtitle || !isset$POSTexcerpt //2 header"Location: $rooturlindex.php?s=news&p=$p&m=$m"; else...
CVE-2008-3098
Cross-site scripting XSS vulnerability in admin/usercheck.php in fuzzylime cms before 3.03 allows remote attackers to inject arbitrary web script or HTML via the user parameter to the login form...
Cross Site Scripting (XSS) Vulnerabilitiy in fuzzylime (cms) >=3.02, CVE-2008-3098
Cross Site Scripting XSS Vulnerabilitiy in fuzzylime cms =3.02, CVE-2008-3098 References https://vulners.com/cve/CVE-2008-3098 http://cms.fuzzylime.co.uk http://www.datensalat.eu/fabian/cve/CVE-2008-3098-fuzzylime-cms.html Description Fuzzylime cms is a way to run websites and keep it up-to-date...
Fuzzylime (cms) 3.0 - 'usercheck.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/31306/info fuzzylime cms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the...
Fuzzylime (cms) 3.0 - usercheck.php Cross-Site Scripting
Fuzzylime cms 3.0 - usercheck.php Cross-Site Scripting source: https://www.securityfocus.com/bid/31306/info fuzzylime cms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform...
Directory traversal
Directory traversal vulnerability in blog.php in fuzzylime cms 3.01, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the file parameter. NOTE: it was later reported that 3.01a is also affected...
Directory traversal
Directory traversal vulnerability in rss.php in fuzzylime cms 3.01a and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter, as demonstrated using content.php, a different vector than CVE-2007-4805...
CVE-2008-3165
Directory traversal vulnerability in rss.php in fuzzylime cms 3.01a and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the p parameter, as demonstrated using content.php, a different vector than CVE-2007-4805...
CVE-2008-3164
CVE-2008-3164 affects fuzzylime (cms) 3.01 (and 3.01a) with a directory traversal condition in blog.php. When magic_quotes_gpc is disabled, an attacker can supply a .. in the file parameter to cause the application to include and execute arbitrary local files. The vulnerability impact is remote c...
fuzzylime cms 3.01 (commrss.php) Remote Code Execution Exploit
No description provided by source. ?php Name: Fuzzylime 3.01 Remote Code Execution Exploit Credits: Charles "real" F. charlesfolathotmail.fr Conditions: None Greetz: Inphex, hEEGy and austeN Explanations Ok, so today we will go for a walk in the fuzzylime cms maze ... Finding vulns was easy, but...
fuzzylime cms 3.01 (polladd.php poll) Remote Code Execution Exploit (pl)
No description provided by source. !/usr/bin/perl newst version Fuzzylime 3.01 Remote Code Execution Credits: real and inphex C:\ perl ye.pl host /path/ :id uid=63676dswrealty gid=888vusers groups=33www-data use Digest::MD5 qwmd5 md5hex md5base64; use LWP::UserAgent; use HTTP::Cookies; use Switch...
fuzzylime cms 3.01 (commrss.php) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================== fuzzylime cms 3.01 commrss.php Remote Code Execution Exploit ============================================================== Conditions: None Greetz: Inphex, hEEGy and austeN...
Fuzzylime CMS 3.01 - commrss.php Remote Code Execution
Fuzzylime CMS 3.01 - commrss.php Remote Code Execution Conditions: None Greetz: Inphex, hEEGy and austeN Explanations Ok, so today we will go for a walk in the fuzzylime cms maze ... Finding vulns was easy, but finding a no condition vuln was quite harder ... First, we look to the code/content.ph...
fuzzylime cms 3.01 (polladd.php poll) Remote Code Execution Exploit (php)
No description provided by source. !/usr/bin/php ?php Fuzzylime 3.01 Remote Code Execution Credits: Inphex and real C:\ php fuzzylime.php http://www.target.com/fuzzylime/ targetcmd id uid=63676dswrealty gid=888vusers groups=33www-data $url = $argv1;...
Fuzzylime CMS 3.01 - 'commrss.php' Remote Code Execution
Conditions: None Greetz: Inphex, hEEGy and austeN Explanations Ok, so today we will go for a walk in the fuzzylime cms maze ... Finding vulns was easy, but finding a no condition vuln was quite harder ... First, we look to the code/content.php file:...