CVE-2007-6476

GF-3XPLORER 2.4 allows remote attackers to obtain configuration information via a direct request to explorer/phpinfo.php, which calls the phpinfo function...

Directory traversal

Multiple directory traversal vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the langsel parameter to 1 updater.php and 2 thumber.php...

CVE-2007-6474

Multiple cross-site scripting XSS vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to inject arbitrary web script or HTML via the newdir parameter to index3x.php, and unspecified other vectors...

CVE-2007-6474

GF-3XPLORER 2.4 contains multiple XSS vulnerabilities exploitable via the newdir parameter to index_3x.php (and other vectors). Remote attackers can inject arbitrary web script/HTML. The exact root cause details, affected versions beyond 2.4, exploit status, and remediation steps are not specifie...

CVE-2007-6475

CVE-2007-6475 affects GF-3XPLORER 2.4 with directory traversal in the lang_sel parameter, enabling remote attackers to include and execute arbitrary local files via updater.php and thumber.php. Root cause is traversal via .. in lang_sel; impact is partial confidentiality/integrity exposure (local...

CVE-2007-6475

Multiple directory traversal vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the langsel parameter to 1 updater.php and 2 thumber.php...

CVE-2007-6476

GF-3XPLORER 2.4 allows remote attackers to obtain configuration information via a direct request to explorer/phpinfo.php, which calls the phpinfo function...

GF-3XPLORER 2.4 (XSS/LFI/Etc.) Multiple Remote Vulnerabilities

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...

gf-3xplorer 2.4 - Cross-Site Scripting / Local File Inclusion

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Local File...

vBulletin ImpEx <= 1.74 Remote Command Execution Exploit

No description provided by source. ?php / vbulletin ImpEx Remote File Inclusion Exploit c0ded by ReZEN Sh0uts: xorcrew.net, ajax, gml, subterrain, My gf url: http://www.xorcrew.net/ReZEN example: turl: http://www.target.com/impex/ImpExData.php?systempath= hurl:http://www.pwn3d.com/evil.txt? / $cm...