FarsiNews 2.1/2.5 show_archives.php template Parameter Traversal Arbitrary File Access

No description provided by source. source: http://www.securityfocus.com/bid/16580/info FarsiNews is prone to directory-traversal and local file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit the...

AdaptCMS 2.0.1 Beta Release Remote File Inclusion Vulnerability (msf)

No description provided by source. / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID This file is part of the Metasploit Framework...

Files Desk Pro v1.4 iOS - Local File Inclusion

No description provided by source. Document Title: =============== Files Desk Pro v1.4 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1266 Release Date: ============= 2014-05-16 Vulnerability Laboratory ID VL-ID:...

Satel Lite Satellite.PHP Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23143/info Satel Lite is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to access sensitive information and to execute...

JCCorp URLShrink Free 1.3.1 CreateURL.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22894/info URLshrink Free is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the...

SIPS <= 0.3.1 (box.inc.php) Remote File Include Vulnerability

No description provided by source. Title : SIPS = 0.3.1box.inc.php Remote File Include Vulnerability Author : ajann Contact : : S.Page : http://sourceforge.net/projects/sips/ $$ : Free ERROR .. ... ..... ? include $configsipssys ./code/rssparser.inc.php; ? .. ... ..... ERROR RFI...

phpMyWebmin <= 1.0 (target) Remote File Include Vulnerabilities

No description provided by source...

MoreGroupWare 0.6.8 WEBMAIL2_INC_DIR Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8249/info moregroupware is prone to a vulnerability that may permit remote attackers to include and execute malicious PHP scripts. Remote users, under some PHP configurations, may influence a moregroupware URI variable...

Coppermine Photo Gallery 1.3/1.4 YABBSE.INC.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25243/info Coppermine Photo Gallery is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application a...

Evaria Content Management System 1.1 File Disclosure Vulnerability

No description provided by source. Exploit Title: local file include / File Disclosure Date: Author: khayeye shotor Software Link: http://www.evaria.com/en/?view=download&dload=1 Version: Evaria Content Management System v.1.1 Thanks: khayeye sag , kandome mivei , sinehaye amam and all amehaye...

AT Contenator <= 1.0 - (Root_To_Script) Remote File Include Exploit

html head meta http-equiv=Content-Type content=text/html; charset=windows-1254 titleAT Contenator = v1.0 RootToScript Remote File Include Exploit/title script language=JavaScript //'=============================================================================================== //'Script Name: AT...

ATutor 1.x forum.inc.php Arbitrary Command Execution

No description provided by source. source: http://www.securityfocus.com/bid/15221/info ATutor is prone to multiple vulnerabilities. These issues can allow remote attackers to execute arbitrary PHP commands and carry out local file include and cross-site scripting attacks. ATutor 1.5.1-pl1 and pri...

Black Sheep Web Software Form Tools 1.5 Multiple Remote File Include Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/26889/info Black Sheep Web Software Form Tools is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...

PHPAlbum 0.2.3/4.1 - Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15651/info phpAlbum is prone to a local file-include vulnerability. An attacker may leverage this issue to execute arbitrary server-side script code that resides on an affected computer with the privileges of the webserve...

FlashChat <= 4.5.7 (aedating4CMS.php) Remote File Include Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class TestPOCPOCBase: vulID = '63921' ssvid version = '1.0' author = 'kikay' vulDate = '2006-09-06' createDate =...

Vivvo CMS - Local File include

No description provided by source...

ToendaCMS 0.x/1.0.x Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19806/info ToendaCMS is prone a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PH...

Synergiser 1.2 Index.PHP Local File Include Vulnerability

No description provided by source...

phpBB Static Topics <= 1.0 [phpbb_root_path] File Include Vulnerability

No description provided by source. --------------------------------------------------------------------------- phpBB Static Topics = 1.0 phpbbrootpath Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Securi...

Back-End CMS <= 0.7.2.1 (jpcache.php) Remote Include Vulnerability

No description provided by source. Federico Fazzi, [email protected] Back-end = 0.7.2.1 jpcache.php Remote command execution 08/06/2006 1:04 Bug: jpcache.php: line 40 --- $includedir = $PSL'classdir' . /jpcache; --- Proof of concept: Back-end have a default path pre-set on jpcache.php, and...