10482 matches found
mxBB Module mx_glance 2.3.3 Remote File Include Vulnerability
No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + mxBB Module mxglance 2.3.3 Remote File Include Vulnerability + + + + Discovered by bd0rk || SOH-Crew + + + + www.soh-crew.it.tt + + + + The german Coding and IT-Security Ressource + + +...
chupix-rfi.txt
chupix 0.2.3 /admin/include/header.php RFI f0und by 0in contact: [email protected] Greetings to:Die-angel,Slim,Joker186,Kaja,Artysta,wojto111,reydex team:Our Dark-Coders team; --------------------------------------------------------------------------------------------------------------------...
CVE-2007-5139: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in admin/include/header.php in chupix 0.2.3, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the repertoire parameter...
CVE-2007-5114: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in include/plugin/block.t.php in Peter Schmidt phpmyProfiler 0.9.6b allows remote attackers to execute arbitrary PHP code via a URL in the pmprelpath parameter. NOTE: this issue is disputed by CVE because the applicable requireonce is in a function that is...
phpnukemobile-lfi.txt
Nuke Mobile Entartainment AsbMay's Group ... Vuln. Code : include 'modules/'.$modulename.'compatibility/data/marque.data.php'; ExploiT : path/data/compatible.php?modulename=Local File%00 Greetings 2 : str0ke - Dr.2 - AsbMay's Group - GoLdM - KuWaiT SeCuriTy...
PHP-Nuke Dance Music Module - 'index.php' Local File Inclusion
source: https://www.securityfocus.com/bid/25806/info Dance Music is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized remote user to view files and execute local scripts in the context of the...
CVE-2007-5053: Improper Control of Generation of Code
Multiple incomplete blacklist vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in 1 the adminhome parameter to modules/poll/pollsummary.php or 2 the rootdp parameter to include/db.php; or a URL in the languagehome parameter to 3...
PHP-Nuke addon Nuke Mobile Entartainment LFI Vulnerability
Exploit for unknown platform in category web applications ========================================================== PHP-Nuke addon Nuke Mobile Entartainment LFI Vulnerability ========================================================== Nuke Mobile Entartainment AsbMay's Group ... Vuln. Code :...
phpsyncml <= 0.1.2 Remote File Include Vulnerabilities
No description provided by source. ======================================================================== || || || || || || || || || || || || ======================================================================== ======================================================================== phpsync...
phpsyncml <= 0.1.2 Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ====================================================== phpsyncml = 0.1.2 Remote File Include Vulnerabilities ====================================================== ======================================================================== ||...
phpsyncml-rfi.txt
======================================================================== || || || || || || || || || || || || ======================================================================== ======================================================================== phpsyncml = 0.1.2 Remote File Include...
Coppermine Photo Gallery 1.4.12 - 'referer' Cross-Site Scripting
source: https://www.securityfocus.com/bid/25698/info Coppermine Photo Gallery is prone to a cross-site scripting issue and a local file-include issue. Attackers can exploit these issues to steal cookie-based authentication credentials, execute arbitrary code, and retrieve arbitrary content within...
Mambo / Joomla! Multiple Components 'mosConfig_live_site' Parameter Remote File Include
A third-party component for Mambo or Joomla! is running on the remote host. At least one such component is affected by a remote file include vulnerability due to improper sanitization of user-supplied input to the 'mosConfiglivesite' parameter before using it to include PHP code. Provided the PHP...
CRS Manager ($DOCUMENT_ROOT) Multi Remote File Include
X---- w w w . u N k n 0 w n . e u ----X CRS Managercrsmanager Multi Remote File Include ::Home: http://crsmanager.berlios.de ::Vuln Type : Remote File Include RFI ::Discovered by : iNs ::Vuln Code: index.php login.php ?php require $DOCUMENTROOT."/../admin/settings/conf.php"; PoC:...
CARE2X php Integ Hospital Info System 2G Deployment 2.2 Multi Remote File Include
X---- w w w . u N k n 0 w n . e u ----X CARE2X php Integ Hospital Info System 2G Deployment 2.2 Multi Remote File Include ::Home: http://care2x.org/ http://sourceforge.net/projects/care2002/ ::Vuln Type : Remote File Include RFI ::Discovered by : iNs ::Vuln Code: /language/en/encopyrite.php ?php...
phpreality-rfi.txt
|-------------------------------------------------------------------------------| | | | phpRealty 0.02 MGR Remote File include | | | | Script : phpRealty | | Version : 0.02 | | Authord : QTRinux | | Contact : Qataro at hotmail dot com | | Vendor : http://phprealty.budissy.com/phprealty/v0.02/ | |...
Pulsewiki And Pawfaliki 0.5.1 - 'index.php' Local File Inclusion
source: https://www.securityfocus.com/bid/25575/info Pulsewiki and Pawfaliki are prone to a local file-include vulnerability because the software fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts...
Claroline 1.x - admincampusProblem.php?view Cross-Site Scripting
Claroline 1.x - admincampusProblem.php?view Cross-Site Scripting source: https://www.securityfocus.com/bid/25521/info Claroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities. An attacker could exploit these issues to execute local script code in...
Claroline 1.x - adminadminusers.php?dir Cross-Site Scripting
Claroline 1.x - adminadminusers.php?dir Cross-Site Scripting source: https://www.securityfocus.com/bid/25521/info Claroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities. An attacker could exploit these issues to execute local script code in the...
Claroline 1.x - '/admin/advancedUserSearch.php?action' Cross-Site Scripting
source: https://www.securityfocus.com/bid/25521/info Claroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities. An attacker could exploit these issues to execute local script code in the context of the application and access sensitive data, which m...