Bitrix Site Manager Remote File Inclusion

Author : Don Tukulesto [email protected] + Date : November 13, 2009 + Homepage : http://www.indonesiancoder.com + Vendor : http://www.bitrixsoft.com/ + Method : Remote File Inclusion + Location : INDONESIA Notes : I know this is an old bugs, but i just write this exploit under perl module...

Bitrix Site Manager Multiple Remote File Include Vulnerability

No description provided by source. + Author : Don Tukulesto [email protected] + Date : November 13, 2009 + Homepage : http://www.indonesiancoder.com + Vendor : http://www.bitrixsoft.com/ + Method : Remote File Inclusion + Location : INDONESIA Notes : I know this is an old bugs, but i just...

CVE-2009-2081

Directory traversal vulnerability in help.php in phpWebThings 1.5.2 and earlier, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the module parameter...

CVE-2009-2081: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in help.php in phpWebThings 1.5.2 and earlier, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the module parameter...

CVE-2009-1445

Multiple directory traversal vulnerabilities in WebPortal CMS 0.8-beta allow remote attackers to 1 read arbitrary files via directory traversal sequences in the lang parameter to libraries/helpdocs/help.php and 2 include and execute arbitrary local files via directory traversal sequences in the...

CVE-2008-6201

Directory traversal vulnerability in help.php in the eskuel module in KwsPHP 1.3.456, as available before 20080416, allows remote attackers to execute arbitrary commands via the action parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-6201: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in help.php in the eskuel module in KwsPHP 1.3.456, as available before 20080416, allows remote attackers to execute arbitrary commands via the action parameter. NOTE: some of these details are obtained from third party information...

Unfixed XSS vulnerability at phpsnips.com

Security researcher GTADarkDude, has submitted on 15/08/2008 a cross-site-scripting XSS vulnerability affecting phpsnips.com, which at the time of submission ranked 1996003 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/08/2008. It is...

BBlog 0.7.6 (mod) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================== BBlog 0.7.6 mod Remote SQL Injection Vulnerability ==================================================== BBlog 0.7.6 SQL Injection Vuln Vulnpath: /bblogplugins/builtin.help.php Vuln:...

CVE-2008-3565

Multiple cross-site scripting XSS vulnerabilities in Meeting Room Booking System MRBS 1.2.6 allow remote attackers to inject arbitrary web script or HTML via the area parameter to 1 day.php, 2 week.php, 3 month.php, 4 search.php, 5 report.php, and 6 help.php. NOTE: the provenance of this...

CVE-2008-3565: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Meeting Room Booking System MRBS 1.2.6 allow remote attackers to inject arbitrary web script or HTML via the area parameter to 1 day.php, 2 week.php, 3 month.php, 4 search.php, 5 report.php, and 6 help.php. NOTE: the provenance of this...

Meeting Room Booking System (MRBS) 1.2.6 - help.php Cross-Site Scripting

Meeting Room Booking System MRBS 1.2.6 - help.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30531/info MRBS Meeting Room Booking Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...

CVE-2008-3384

CVE-2008-3384 affects Interact Learning Community Environment Interact 2.4.1. Multiple directory traversal vulnerabilities in help/help.php allow remote attackers to include and execute arbitrary local files via a .. in the (1) module and (2) file parameters. The NVD entry notes a CVSS v2 base sc...

CVE-2008-3384: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in help/help.php in Interact Learning Community Environment Interact 2.4.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 module and 2 file parameters...

CVE-2008-3371: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter...

talkback-lfi.txt

============================================================================================================= o TalkBack 2.3.5 Local File Inclusion Vulnerability Software : TalkBack version 2.3.5 Vendor : http://www.scripts.oldguy.us/talkback Author : NoGe Contact : nogedotcodeatgmaildotcom...

TalkBack 2.3.5 - Language Local File Inclusion

TalkBack 2.3.5 - Language Local File Inclusion ============================================================================================================= o TalkBack 2.3.5 Local File Inclusion Vulnerability Software : TalkBack version 2.3.5 Vendor : http://www.scripts.oldguy.us/talkback Author ...

TalkBack 2.3.5 (language) Local File Inclusion Vulnerability

No description provided by source. ============================================================================================================= o TalkBack 2.3.5 Local File Inclusion Vulnerability Software : TalkBack version 2.3.5 Vendor : http://www.scripts.oldguy.us/talkback Author : NoGe Conta...

TalkBack 2.3.5 - 'Language' Local File Inclusion

============================================================================================================= o TalkBack 2.3.5 Local File Inclusion Vulnerability Software : TalkBack version 2.3.5 Vendor : http://www.scripts.oldguy.us/talkback Author : NoGe Contact : nogedotcodeatgmaildotcom...

CVE-2007-5620: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin/inc/help.php in ZZ:FlashChat 3.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the file parameter...