Directory traversal

Directory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next generation yappa-ng 2.3.2 and possibly other versions through 2.3.3-beta0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in th...

Kure 0.6.3 (index.php post doc) Local File Inclusion Vulnerability

No description provided by source. Kure 0.6.3 index.php post,doc Local File Inclusion Vulnerability url: http://code.google.com/p/kure/downloads/list Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational...

kure-lfi.txt

Kure 0.6.3 index.php post,doc Local File Inclusion Vulnerability url: http://code.google.com/p/kure/downloads/list Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk...

Gforge <= 4.6 rc1 (skill_edit) SQL Injection Vulnerability

No description provided by source. Gforge = 4.6 rc1 skilledit SQL injection Vendor Notified: 2008-10-06 Impact: zomg! Note: should work regardless magicquotesgpc setting. Requires: Creating an account and be logged in Vulnerable function: handlemultiedit$skillids on /www/people/skillsutils.php...

CVE-2008-4483

Directory traversal vulnerability in index.php in Crux Gallery 1.32 and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the theme parameter...

mysqlquick-lfi.txt

MySQL Quick Admin = 1.5.5 COOKIE Local File Inclusion Vulnerability url: http://www.mysqlquickadmin.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author will b...

euploader-sql.txt

E-Uploader Pro = 1.0 SQL Injection Vulnerability Author: !DoktOR! Date found: 26.08.08 Product: E-Uploader Pro Version: 1.0 Price: $49 URL: www.scriptsfrenzy.com Download script: http://rapidshare.com/files/18285945/E-UploaderPro.PHP.NULL-DGTlicense.zip Vulnerability Class: SQL Injection Conditio...

Pro Chat Rooms 3.0.3 - SQL Injection

Author: !DoktOR! Date found: 28.09.08 Product: Pro Chat Rooms Version: 3.0.3 Price: $55 URL: www.prochatrooms.com Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit 1:...

UBB.threads 'Forum[]'数组SQL注入漏洞

BUGTRAQ ID: 31074 CNCAN ID：CNCAN-2008091108 UBB.threads是一款基于PHP的论坛程序。 UBB.threads搜索功能存在SQL注入攻击，远程攻击者可以利用漏洞获得敏感信息或操作数据库。 问题存在于dosearch.inc.php // The forums we are searching will be in a different format // depending on where we are coming from if @isarray$POST'Forum' $Forum = join",",$POST'Forum'...

tinycms-lfi.txt

Name : tinyCMS 1.1.2 templater.php Local File Inclusion Vulnerability Author : cOndemned Dark-Coders Greetz : Avantura, str0ke, ZaBeaTy, doctor, voo|doo, sid.psycho, irk4z Conditions : Magic quotes gpc = Off / Register Globals = On Other info : Prior versions probably are vulnerable too Source of...

tinyCMS 1.1.2 (templater.php) Local File Inclusion Vulnerability

No description provided by source. Name : tinyCMS 1.1.2 templater.php Local File Inclusion Vulnerability Author : cOndemned Dark-Coders Greetz : Avantura, str0ke, ZaBeaTy, doctor, voo|doo, sid.psycho, irk4z Conditions : Magic quotes gpc = Off / Register Globals = On Other info : Prior versions...

cyberBB 0.6 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. Name : cyberBB v. 0.6 Multiply Remote SQL Injection Vulnerabilities Author : cOndemned Dark-Coders Greetz : Avantura, str0ke, ZaBeaTy, voo|doo, irk4z, and many, many more... Conditions : Magic quotes gpc = On & Off / User must be logged into source of...

Pligg CMS 9.9.0 - Cross-Site Scripting Local File Inclusion SQL Injection

Pligg CMS 9.9.0 - Cross-Site Scripting Local File Inclusion SQL Injection GulfTech Security Research July 30, 2008 Vendor : Pligg LLC URL : http://www.pligg.com/ Version : Pligg alertdocument.cookie; The above example link would display the end users cookie to them. Of course this can also be use...

Fuzzylime CMS 3.01 - 'commrss.php' Remote Code Execution

Conditions: None Greetz: Inphex, hEEGy and austeN Explanations Ok, so today we will go for a walk in the fuzzylime cms maze ... Finding vulns was easy, but finding a no condition vuln was quite harder ... First, we look to the code/content.php file:...

File Store PRO 3.2 Multiple Blind SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications =============================================================== File Store PRO 3.2 Multiple Blind SQL Injection Vulnerabilities =============================================================== | File Store PRO 3.2 Blind SQL Injection | || -...

File Store PRO 3.2 - Multiple Blind SQL Injections

| File Store PRO 3.2 Blind SQL Injection | || Download from: http://upoint.info/cgi/demo/fs/filestore.zip - Need admin rights: /confirm.php: code ifisset$GET"folder" && $GET"folder"!="" $folder=$GET"folder"; else exit"Bad Request"; ifisset$GET"id" && $GET"id"!="" $id=$GET"id"; else exit"Bad...

1024 CMS多个文件包含漏洞

BUGTRAQ ID: 30091 1024是基于PHP和MySQL的内容管理系统。 1024 CMS中存在多个文件包含漏洞，允许恶意用户泄露敏感信息或入侵有漏洞的系统。 1...

fuzzylime cms 3.01 Remote Command Execution Exploit

Exploit for unknown platform in category web applications =================================================== fuzzylime cms 3.01 Remote Command Execution Exploit =================================================== !/usr/bin/perl fuzzylime 3.0.1 Perl exploit discovered & written by Ams DESCRIPTION...

Wordtrans-web exec_wordtrans Function Arbitrary Command Execution

The remote host is running wordtrans-web, a web-based front-end for wordtrans, for translating words. The version of wordtrans-web installed on the remote host fails to sanitize input to the 'advanced' parameter of the 'wordtrans.php' script before using it in an 'passthru' statement to execute P...

faname10-xss.txt

netVigilance Security Advisory 43 Fa Name version 1.0 Multiple XSS Attack Vulnerabilities Description: Fa Name http://webscripts.softpedia.com/script/Content-Management/Fa-Name-41229.html is useful portal CMS for .name websites. You can have a simple portal but useful one for you domain names and...