9005 matches found
EasyTalk microblogging system X1. X file contains the vulnerability and the Fix-vulnerability warning-the black bar safety net
EasyTalk microblogging system X1. X file contains the vulnerability PluginsAction.class.php parameters in the file $GET'out' without any filter, directly take to call the include file, the resulting vulnerabilities generated. PluginsAction.class.php to:...
Dolibarr <= 3.0.0 Multiple Vulnerabilities - Active Check
Dolibarr is prone to a local file include LFI vulnerability and a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
Atlassian Confluence 2.x >= 2.7 / 3.x < 3.4.9 Multiple XSS
According to its self-reported version number, the instance of Atlassian Confluence on the remote host is a 2.x version that is 2.7 or later, or else version 3.x prior to 3.4.9. It is, therefore, affected by multiple cross-site scripting vulnerabilities. Errors in the validation of input data to...
PHP code execution vulnerability references summary-vulnerability warning-the black bar safety net
A code execution function In PHP you can execute the Code of the function. Such as eval , assert , theand system and exec and shellexec and passthru and escapeshellcmd and pcntlexec , etc. demo code 1.1: The second file contains the code injection The file containing the function in the specific...
SQL-Ledger <= 2.8.33 Post-authentication LFI/Edit Vulnerability
Exploit for php platform in category web applications Exploit Title: SQL-Ledger = 2.8.33 Post-authentication Local File Include/Edit Vulnerability Google Dork: inurl:/sql-ledger/login.pl Date: April 15, 2011 Author: bitform Software Link: http://www.sql-ledger.com/source/sql-ledger-2.8.33.tar.gz...
Joomla Module Virtuemart Featureprod RFI Vulnerability
Exploit for php platform in category web applications Title : Joomla Module Virtuemart Featureprod RFI Vulnerability Author : KedAns-Dz E-mail : email protected | email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Remote...
Joomla Module Virtuemart Latestprod RFI Vulnerability
Exploit for php platform in category web applications Title : Joomla Module Virtuemart Latestprod RFI Vulnerability Author : KedAns-Dz E-mail : email protected | email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Remote Fi...
WordPress Spellchecker Plugin 3.1 - Local and Remote File Include Vulnerabilities
This Spellchecker plugin's "general.php" parameter is prone to remote file include and local file include vulnerabilities because of application's failure to sufficiently clean up user-supplied input. These issues allow an attacker to execute arbitrary local and remote scripts in the context of t...
WordPress custom page plugin remote include vulnerability-vulnerability warning-the black bar safety net
Worepress a custom page plug-in there remote include vulnerability. Plugin name: wp custom pages version: 0.5.0.1 Have installed please hurry up and upgrade to the new version. Send a test. As follows: So say with a wordpress classmates don't install too many plug-ins. One more more of a danger...
Joomla Virtuemart Latestprod Remote File Inclusion
Title : Joomla Module Virtuemart Latestprod RFI Vulnerability Author : KedAns-Dz E-mail : [email protected] | [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Remote File Include Tested on : Windows XP sp3 FR Note :...
LFI Vulnerability in 024cms Admin Control Panel v1.1.0 Beta (Complete-Modules Package)
============================================================================================================= 1024cms Admin Control Panel v1.1.0 Beta Complete-Modules Package - Local File Include Vulnerability...
LFI Vulnerability in 1024cms Admin Control Panel v1.1.0 Beta (Master-cPanel Package)
========================================================================================================== 1024cms Admin Control Panel v1.1.0 Beta Master-cPanel Package - Local File Include Vulnerability...
1024cms ACP 1.1.0 Complete Modules Local File Inclusion
============================================================================================================= 1024cms Admin Control Panel v1.1.0 Beta Complete-Modules Package - Local File Include Vulnerability...
1024 CMS 1.1.0 Beta - Multiple Input Validation Vulnerabilities
1024 CMS 1.1.0 Beta - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/47282/info 1024cms is prone to multiple cross-site scripting vulnerabilities, multiple local file-include vulnerabilities, and a directory-traversal vulnerability An attacker may leverage the...
vTiger CRM 5.2.1 - sortfieldsjson.php Local File Inclusion
vTiger CRM 5.2.1 - sortfieldsjson.php Local File Inclusion source: https://www.securityfocus.com/bid/47263/info vtiger CRM is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially...
1024 CMS 1.1.0 Beta - Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/47282/info 1024cms is prone to multiple cross-site scripting vulnerabilities, multiple local file-include vulnerabilities, and a directory-traversal vulnerability An attacker may leverage these issues to execute arbitrary script code in the browser of an...
XOOPS 2.5 - banners.php Multiple Local File Inclusions
XOOPS 2.5 - banners.php Multiple Local File Inclusions source: https://www.securityfocus.com/bid/47174/info XOOPS is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially...
Pligg CMS Multiple Security Vulnerabilities
Pligg CMS is prone to multiple security vulnerabilities because it fails to properly sanitize user-supplied input. These vulnerabilities include a local file-include vulnerability, a security-bypass vulnerability, and an authentication-bypass vulnerability. Attackers can exploit these issues to...
osCSS 2.1 - Multiple Cross-Site Scripting / Local File Inclusions
source: https://www.securityfocus.com/bid/47074/info osCSS is prone to a cross-site scripting vulnerability and multiple local file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script...
webEdition CMS HTML Injection and Local File Include Vulnerabilities
webEdition CMS is prone to multiple HTML-injection vulnerabilities and a local file-include vulnerability. Exploiting these issues could allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication...