Boonex Dolphin <= 5.2 index.php Remote Code Execution Exploit

No description provided by source. !/usr/bin/php ?php / Boonex Dolphin 5.2 Remote Command Execution / File Inclusion Vulnerability Note: Requires register globals to be on, and magic quotes gpc to be off. Usage: php script.php host path command Usage Example: php script.php domain.com /dolphin/...

Comdev One Admin 4.1 - Adminfoot.php Remote Code Execution

Comdev One Admin 4.1 - Adminfoot.php Remote Code Execution !/usr/bin/php //oneadmin/adminfoot.php?pathdocroot= Googledork: inurl:/oneadmin/ w4ck1ng - w4ck1ng.com / if!$argv3 die"Usage: php $argv0 host path command\n Usage Example: php $argv0 domain.com /dolphin/ whoami\n"; function send$host, $pu...

Comdev One Admin 4.1 - 'Adminfoot.php' Remote Code Execution

!/usr/bin/php //oneadmin/adminfoot.php?pathdocroot= Googledork: inurl:/oneadmin/ w4ck1ng - w4ck1ng.com / if!$argv3 die"Usage: php $argv0 host path command\n Usage Example: php $argv0 domain.com /dolphin/ whoami\n"; function send$host, $put global $data; $conn = fsockopen gethostbyname$host,"80" ;...

Boonex Dolphin 5.2 - index.php Remote Code Execution

Boonex Dolphin 5.2 - index.php Remote Code Execution !/usr/bin/php //templates/tmpldfl/scripts/index.php?dirinc= w4ck1ng - w4ck1ng.com / if!$argv3 die"Usage: php $argv0 host path command\n Usage Example: php $argv0 domain.com /dolphin/ whoami\n"; function send$host, $put global $data; $conn =...

CyberBrau 0.9.4 - '/forum/track.php' Remote File Inclusion

--------------------------------------------------------------------------- CyberBrau = 0.9.4 path Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net : Remote : Yes Critica...

[ECHO_ADV_51$2006] docmint <= 2.0 (MY_ENV[BASE_ENGINE_LOC]) Remote File Inclusion Vulnerability

ECHOADV51$2006 ----------------------------------------------------------------------------------------- ECHOADV51$2006 docmint = 2.0 MYENVBASEENGINELOC Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...

OpenDock Easy Doc 1.4 - 'doc_directory' File Inclusion

ECHOADV49$2006 ----------------------------------------------------------------------------------------------- ECHOADV49$2006OpenDock Easy Doc =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...

PHP Live! <= 3.1 help.php Remote File Inclusion vulnerability

/ -------------------------------------------------------- Neo Security Team NST - Advisory 25 - 08/10/06 -------------------------------------------------------- Program: PHP Live! Homepage: http://www.phplivesupport.com/ Vulnerable Versions: 3.1 and prior Risk: High! Impact: Critical Risk -==PH...

UBB.threads doeditconfig Arbitrary Command Injection

The version of UBB.threads installed on the remote host fails to sanitize input to the 'thispath' and 'config' parameters of the 'admin/doeditconfig.php' script before using them to update the application's configuration file. Provided PHP's 'registerglobals' setting is enabled, an unauthenticate...

PT-2006-5806 · Php · Phpsatk

Name of the Vulnerable Software and Affected Versions: PHP System Administration Toolkit PHPSaTK affected versions not specified Description: A remote file inclusion issue in the loader.php file of PHPSaTK allows remote attackers to execute arbitrary PHP code via a URL in the config parameter of...

PT-2006-5643 · Telekorn · Telekorn Signkorn Guestbook

Name of the Vulnerable Software and Affected Versions: Telekorn SignKorn Guestbook SL versions 1.3 and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the dir path parameter in multiple PHP files, including "index.php", "includes/functions.gb.php"...

Site@School Multiple Script cmsdir Parameter Remote File Inclusion

The remote host is running Site@School, an open source, PHP-based, content management system intended for primary schools. The version of Site@School installed on the remote host fails to sanitize input to the 'cmsdir' parameter before using it to include PHP code in several scripts. Provided PHP...

CCleague Pro 1.0.1RC1 - 'cookie' Remote Code Execution

!/usr/bin/php -q -d shortopentag=on ? $devilteam = " ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:...

[SA21807] Fantastic News "CONFIG[script_path]" File Inclusion Vulnerabilities

TITLE: Fantastic News "CONFIGscriptpath" File Inclusion Vulnerabilities SECUNIA ADVISORY ID: SA21807 VERIFY ADVISORY: http://secunia.com/advisories/21807/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Fantastic News 2.x http://secunia.com/product/6254/ DESCRIPTION:...

[SA21825] Somery "skindir" File Inclusion Vulnerability

TITLE: Somery "skindir" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA21825 VERIFY ADVISORY: http://secunia.com/advisories/21825/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Somery 0.x http://secunia.com/product/11898/ DESCRIPTION: basher13 has reported a...

PT-2006-5395 · Phprojekt · Phprojekt

Name of the Vulnerable Software and Affected Versions: PHProjekt version 0.6.1 Description: The issue allows remote attackers to execute arbitrary PHP code via the path pre parameter in several PHP files, including cm lib.inc.php, doc/br.edithelp.php, doc/de.edithelp.php, doc/ct.edithelp.php,...

PmWiki < 2.1.21 Global Variables Overwriting

The version of PmWiki installed on the remote host contains a programming flaw in 'pmwiki.php' that may allow an unauthenticated remote attacker to overwrite global variables used by the application, which could in turn be exploited to execute arbitrary PHP code on the affected host, subject to t...

CVE-2006-4458

Directory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9.16.010 and earlier allows remote attackers to include arbitrary local files via a .. dot dot sequence and trailing null %00 byte in the GLOBALSphpgwinfouserpreferencescommoncountry parameter...

CubeCart < 3.0.13 Multiple Remote Vulnerabilities (LFI, SQLi, XSS)

The version of CubeCart installed on the remote host fails to properly sanitize user-supplied input to the 'gateway' parameter before using it in the 'includes/content/gateway.inc.php' script to include PHP code. An unauthenticated, remote attacker may be able to exploit this issue to view...

CVE-2006-4448

Multiple PHP remote file inclusion vulnerabilities in interact 2.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 CONFIGBASEPATH parameter in a admin/autoprompter.php and b includes/common.inc.php, and the 2 CONFIGLANGUAGECPATH parameter ...