OpenSiteAdmin 0.9.7b (pageHeader.php path) RFI Vulnerability

Exploit for unknown platform in category web applications ============================================================ OpenSiteAdmin 0.9.7b pageHeader.php path RFI Vulnerability ============================================================ OpenSiteAdmin 0.9.7 BETA Remote File Include Vulnerability...

CVE-2008-7240: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop LWS php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template parameter...

efront <= 3.5.4 (database.php path) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================= efront = 3.5.4 database.php path Remote File Inclusion Vulnerability ======================================================================= efront = 3.5.4 Remote File...

Aurora CMS 1.0.2 (install.plugin.php) Remote File Inclusion Vulnerability

No description provided by source. --------------------------------------------------------------------------------------------------------------- Aurora Content Management System Enterprise Edition install.plugin.php = Remote File Include Vulnerability...

CVE-2008-7223: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via 1 ftp/index.php, 2 viewer.php, 3 functions/other.php, 4 include/leftmenu.class.php, or 5 plugins/stats/statsview.php...

SZNews 2.7 - printnews.php3 Remote File Inclusion

SZNews 2.7 - printnews.php3 Remote File Inclusion source: https://www.securityfocus.com/bid/42974/info SZNews is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive...

Arbitrary File Upload vulnerability in TinyBrowser

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Arbitrary File Upload уязвимости в TinyBrowser - файл менеджере для редактора TinyMCE. Arbitrary File Upload: http://site/path/tinybrowser.php?type=file При доступе к TinyBrowser, доступ к которому не ограничивается, можно загрузить через встроенн...

Drunken:Golem Gaming Portal - 'admin_news_bot.php' Remote File Inclusion

Author : EA Ngel + Location : Manado - Indonesia + Situs : wwwdotmanadocodingdotnet + Contact : engelpemulaatgmaildotcom + Download Script : http://sourceforge.net/projects/drunkengolem/ / Dork : sitou timou tumou tou Bug : include $rootpath."/include/irc/phpIRC.php"; ^ 3xpl0it :...

OBOphiX 2.7.0 - fonctions_racine.php Remote File Inclusion

OBOphiX 2.7.0 - fonctionsracine.php Remote File Inclusion OBOphiX fonctionsracine.php = 2.7.0 Remote File Include Vulnerability + Author : EA Ngel + Location : Manado - Indonesia + Situs : wwwdotmanadocodingdotnet + Contact : [email protected] + Download Script :...

CVE-2008-7187: Exposure of Sensitive Information to an Unauthorized Actor

Coppermine Photo Gallery CPG 1.4.14 allows remote attackers to obtain sensitive information via a direct request to include/slideshow.inc.php, which leaks the installation path in an error message...

PHPope 1.0.0 - Multiple Remote File Inclusions

x PHPope = 1.0.0 Multiple Remote File Include Vulnerability ! Download Script : http://sourceforge.net/projects/phpope/files/ ! Author : cr4wl3r ! Contact : cr4wl3r4tlinuxmaildotorg ! Location : Gorontalo - INDONESIA ! Dork : "FuCk y0u MaLaYsia" x 3xplo!t :...

phpSANE file_save Parameter Remote File Include

The remote web server is running phpSANE, an open source web-based, front-end to scanners using SANE Scanner Access Now Easy. The version of phpSANE installed on the remote host fails to sanitize user-supplied input to the 'filesave' parameter of the 'save.php' script before using it to include P...

DinamikCMS 1.09 XSS / Local File Inclusion

==================================================== DinamikCMS Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + support e-mail :...

CVE-2008-7046

The CVE-2008-7046 entry concerns AJ Square Free Polling Script (AJPoll). The vulnerability allows remote attackers to bypass authentication and create new polls via a direct request to admin/include/newpoll.php, a vector distinct from CVE-2008-7045. The description indicates an authentication byp...

CVE-2008-7044: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/include/newpoll.php in AJ Square Free Polling Script AJPoll Database version allows remote attackers to execute arbitrary SQL commands via the ques parameter...

CVE-2008-7046: Improper Authentication

AJ Square Free Polling Script AJPoll allows remote attackers to bypass authentication and create new polls via a direct request to admin/include/newpoll.php, a different vector than CVE-2008-7045. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...

CVE-2008-7005: Improper Control of Generation of Code

include/modules/top/1-randomquote.php in Minb Is Not a Blog minb 0.1.0 allows remote attackers to execute arbitrary PHP code via the quotestoedit parameter. NOTE: this issue has been reported as an unrestricted file upload by some sources, but that is a potential consequence of code execution...

CVE-2009-2769: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in include/timesheet.php in Ultrize TimeSheet 1.2.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the configincludedir parameter...

CMS Made Simple < 1.6.3 Local File Include Vulnerability

Binary data 5123.prm...

Facil Helpdesk - 'kbase/kbase.php' URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/42528/info Facil Helpdesk is prone to multiple input-validation vulnerabilities, including a cross-site scripting vulnerability, a local file-include vulnerability, and a remote file-include vulnerability. An attacker can exploit these issues to execute...