PT-2008-3301 · Blogator · Blogator-Script

Name of the Vulnerable Software and Affected Versions: Blogator-script version 1.0 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the incl page parameter in several PHP files, including struct admin.php, struct admin blog.php, and struct main.php in the...

newsoffice-rfi.txt

-========================================== ViVa Islam + YeMeN ====================================- Name : NewsOffice 1.1 Remote File Include Vulnerabilitiy Download From : http://www.newanz.com/applications/NewsOffice/?page=download Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM BlackxHat , BlackBox ,...

GLSA-200804-07 : PECL APC: Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-200804-07 PECL APC: Buffer Overflow Daniel Papasian discovered a stack-based buffer overflow in the apcsearchpaths function in the file apc.c when processing long filenames. Impact : A remote attacker could exploit this...

ksemail-lfi.txt

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discoverd by dun \ dunatstrcpy.eu Ksemail Local File Include Vulnerability Script site: http://www.ksemail.com/, http://mail.ksemail.com Vuln:...

ExBB 0.22 - LocalRemote File Inclusion

ExBB 0.22 - LocalRemote File Inclusion ==================================================================================================== / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ==================================================================================================== This is a...

dragoon-rfi.txt

-========================================== ViVa YeMeN ====================================- Name : Dragoon 0.1 Remote File Include Vulnerabilitiy Download From : http://sourceforge.net/project/showfiles.php?groupid=118780 Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM BlackxHat , BlackBox , aLwHEeD Hom...

seemes-rfi.txt

┌┌───────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐...

visualpic-rfi.txt

-Coderx.Org- Digital-AngeLs ^| By Cr@zyKing / [email protected] \ ^| Special Greatz All My Friends to str0ke \ ^| VisualPic 0.3.1 Remote File İnclude \ ^| Down : http://www.snarky.fr/index.php?page=telechargement-2 \ ^| Error : include$CONFIG'files''functionspage' ; \ ^| Files : index.php ...

Mole 2.1.0 - viewsource.php Remote File Disclosure

Mole 2.1.0 - viewsource.php Remote File Disclosure Mole v2.1.0 viewsource.php Remote File Disclosure Vulnerability Script : http://sourceforge.net/project/showfiles.php?groupid=164171 Vuln Code : Mole: Template viewer POC : /mole210/viewsource.php?dirn=include/config.inc.php...

VisualPic 0.3.1 Remote File Inclusion Vulnerability

No description provided by source. -Coderx.Org- Digital-AngeLs ^| By Cr@zyKing / [email protected] \ ^| Special Greatz All My Friends to str0ke \ ^| VisualPic 0.3.1 Remote File Ä°nclude \ ^| Down : http://www.snarky.fr/index.php?page=telechargement-2 \ ^| Error :...

Web Server Creator 0.1 - langfile Remote File Inclusion

Web Server Creator 0.1 - langfile Remote File Inclusion source: https://www.securityfocus.com/bid/28631/info Web Server Creator is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue can allow an attacker to compromise t...

Web Server Creator 0.1 - 'langfile' Remote File Inclusion

source: https://www.securityfocus.com/bid/28631/info Web Server Creator is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue can allow an attacker to compromise the application and the underlying system; other attacks...

EasySite 2.0 - image_editor.php Remote File Inclusion

EasySite 2.0 - imageeditor.php Remote File Inclusion source: https://www.securityfocus.com/bid/28563/info EasySite is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...

EasySite 2.0 - skin_chooser.php Remote File Inclusion

EasySite 2.0 - skinchooser.php Remote File Inclusion source: https://www.securityfocus.com/bid/28563/info EasySite is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...

mxbbmxblogs-rfi.txt

mxBB Module mxblogs 2.0.0-beta Remote File Include Exploit Vendor: http://www.mx-system.com Download: http://www.mx-system.com/index.php?page=4&action=file&fileid=405 Vulncode in: /includes/functionsweblog.php line 24 Greetz: str0ke, TheJT, rgod, Vallani, DNX, NBBN use Getopt::Long; use...

Terracotta - index.php Local File Inclusion

Terracotta - index.php Local File Inclusion source: https://www.securityfocus.com/bid/28550/info Terracotta is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to vie...

Terracotta - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/28550/info Terracotta is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to view local files in the context of the webserve...

CVE-2008-1555

CVE-2008-1555 affects BolinOS 4.6.1, vulnerability in system/_b/contentFiles/gbincluder.php where ".." in _bFileToInclude enables directory traversal to include/execute local files. Impact: partial confidentiality, integrity, and availability. CVSS v2 base score 6.8. no remediation details provid...

kisgb-lfi.txt

KISGB Keep It Simple Guest Book : Local FiLe Include's tmptheme Version : All Versions Download : http://sourceforge.net/project/showfiles.php?groupid=38585 ---------------------------------------------------------- Exploit coded and founded by Cr@zyKing Date: 30.03.2008 [email protected]...

jshop-lfi.txt

JShop 1.x-2.x local file include --------------------------------------------------------------------------------------------------------------------- + scripts: Jshop Server 1.x-2.x + + Discovered By : v0l4arrra + + url: www.jshop.co.uk + + dork: "powered by jshop" and also usefull one...