Stash 1.0.3 Cross Site Scripting

Author: Author: Mr.SeCreT E-mail: [email protected] From: Syria http://english.islamweb.net/ Script Information: Script: Stash 1.0.3 Remote XSS Vulnerability Language: PHP Download: http://garr.dl.sourceforge.net/project/nice-stash/Stash%20CMS/1.0.3/stash-1.0.3.zip Vul Code: footer.inc.php: "My In...

CVE-2008-6435: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in phpSQLiteCMS 1 RC2 allow remote attackers to inject arbitrary web script or HTML via the 1 langhome, 2 langadminmenu, and 3 langadminmenupageoverview parameters to cms/includes/header.inc.php; and the 4 langloginusername and 5 langloginpassword...

CVE-2008-4894: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php in Tribiq CMS 5.0.10a, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the...

Tribiq CMS 5.0.10a (Windows) - Local File Inclusion

| | | \ \ \ / / / \ / | / | / | | | | | | \ V / / \ | | | | | | | | | /images/logo.gif" alt="Company Name" / POC : /templates/mytribiqsite/tribal-GPL-1066/includes/header.inc.php?templatepath=Local File %00 / | | | | | | / | | | / \ | | / | | |/| | | || | | | | | | | | | | | | | / || ,| || ||...

Remote file inclusion

PHP remote file inclusion vulnerability in includes/header.inc.php in Dragoon 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...

CVE-2008-1773: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in includes/header.inc.php in Dragoon 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...

dragoon-rfi.txt

-========================================== ViVa YeMeN ====================================- Name : Dragoon 0.1 Remote File Include Vulnerabilitiy Download From : http://sourceforge.net/project/showfiles.php?groupid=118780 Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM BlackxHat , BlackBox , aLwHEeD Hom...

Dragoon 0.1 (root) Remote File Inclusion Vulnerability

No description provided by source. -========================================== ViVa YeMeN ====================================- Name : Dragoon 0.1 Remote File Include Vulnerabilitiy Download From : http://sourceforge.net/project/showfiles.php?groupid=118780 Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM...

Dragoon 0.1 (root) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================== Dragoon 0.1 root Remote File Inclusion Vulnerability ====================================================== -========================================== ViVa YeMeN...

Dragoon 0.1 - 'root' Remote File Inclusion

-========================================== ViVa YeMeN ====================================- Name : Dragoon 0.1 Remote File Include Vulnerabilitiy Download From : http://sourceforge.net/project/showfiles.php?groupid=118780 Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM BlackxHat , BlackBox , aLwHEeD Hom...

CVE-2008-1043: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in templates/default/header.inc.php in Linux Web Shop LWS php User Base 1.3 BETA allows remote attackers to execute arbitrary PHP code via a URL in the menu parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in header.inc.php in Philex 0.2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CssFile parameter...

CVE-2007-1697: Undefined Security Weakness

PHP remote file inclusion vulnerability in header.inc.php in Philex 0.2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CssFile parameter...

Philex 0.2.3 - Remote File Inclusion File Disclosure

Philex 0.2.3 - Remote File Inclusion File Disclosure Philex 0.2.3 Exploit Remote File Include: PathPhilex/header.inc.php?CssFile=Shell V.Code Disclosure: readfile$HTTPGETVARS"file"; Exploit Remote File Disclosure: PathPhilex/download.php?file=conf.inc.php milw0rm.com 2007-03-23...

CVE-2007-0340: Undefined Security Weakness

SQL injection vulnerability in inc/header.inc.php in ThWboard 3.0b2.84-php5 and earlier allows remote attackers to execute arbitrary SQL commands via the boardstyleid parameter to index.php...

phpPrintAnalyzer <= 1.2 Remote File Include Vulnerability

No description provided by source. title: phpPrintAnalyzer Inclusion Vulnerability Author: Cmaster4 batamhacker irc.dal.net script: phpPrintAnalyzer Class : Remote cont@ct: [email protected] Exploit: http://site.com/path/inc/header.inc.php?ficStyle=evilcode Thx to : batamhacker crew on dal.net...

CVE-2006-4838: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to inject arbitrary web script or HTML via the 1 rooturl and 2 dcpversion parameters in a admin/inc/footer.inc.php, and the rooturl, 3 pagetopname, 4 pagename, and 5 pageoptions parameters in b...

CVE-2006-4164: Undefined Security Weakness

PHP remote file inclusion vulnerability in inc/header.inc.php in phpPrintAnalyzer 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ficStyle parameter...

CVE-2006-3375: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/header.inc.php in Randshop 1.1.1 allows remote attackers to execute arbitrary PHP code via the dateiPfad parameter...

randshop.txt

Title : randshop Remote File Inclusion Vulnerability - URL : http://www.randshop.com/ - Author : OLiBekaS - contact : olibekasatgmail.com - greetz : Renzokuzen,sikunYuk, Skulmatic, weleh, brokencode, bigmaster and all papmahackerlink crew - Exploit :...