ProMan 0.1.1 - Multiple File Inclusions

ProMan Download: http://sourceforge.net/projects/pman/files/ RFI Code LFI Code includeonce'lang/'.$SESSION'userLang'.'/elisttasks.php'; if !defined'PROMAN' pexit $l'no hack'; PoC RFI: phpRAINCHECKpath/center.php?page=Shell PoC LFI: phpRAINCHECKpath/elisttasks.php?SESSIONuserLang=LFI%00...

phpCDB <= 1.0 Local File Include Vulnerability

Exploit for unknown platform in category web applications ============================================== phpCDB = 1.0 Local File Include Vulnerability ============================================== phpCDB = 1.0 Local File Include Vulnerability Download: http://sourceforge.net/projects/phpcdb/file...

OpenInferno OI.Blogs Multiple Local File Include Vulnerabilities

OpenInferno OI.Blogs is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user- supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver...

OpenInferno OI.Blogs Multiple Local File Include Vulnerabilities

OpenInferno OI.Blogs is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user- supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver...

Dportal wap-cms <= 1.1 Local Include / XSS Vulnerability

Exploit for unknown platform in category web applications ======================================================== Dportal wap-cms Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered...

WikyBlog Multiple Remote Input Validation Vulnerabilities

WikyBlog is prone to multiple vulnerabilities, including an arbitrary-file- upload issue, a cross-site scripting issue, a remote file-include issue and a session-fixation issue. Attackers can exploit these issues to: - execute arbitrary script code in the browser of an unsuspecting user in the...

OpenInferno OI.Blogs 1.0 - Multiple Local File Inclusions

OpenInferno OI.Blogs 1.0 - Multiple Local File Inclusions source: https://www.securityfocus.com/bid/38402/info OpenInferno OI.Blogs is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to...

WikyBlog <= 1.7.3rc2 Multiple Vulnerabilities

WikyBlog is prone to multiple vulnerabilities, including an arbitrary file upload issue, a cross-site scripting XSS issue, a remote file include issue and a session-fixation issue. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and a...

n-cms-equipe 1.1c.Debug - Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/39298/info n-cms-equipe is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute arbitrary loca...

Quicksilver Forums Local File Include and Arbitrary File Upload Vulnerabilities

Quicksilver Forums is prone to a local file-include vulnerability and an arbitrary-file-upload vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to upload arbitrary files onto the webserver, execute arbitrary local files...

On the php local includes-vulnerability warning-the black bar safety net

Would have thought it struck gold with a black brother after the Exchange found can only be applied to the Win32 platform, so this BUG might of the storm reduced, the basic not much harm, because in the WIN32 platform using PHP too. include $GETfile.”. php”; Previously we used a%0 0 to cut off, n...

Quicksilver Forums Local File Include and Arbitrary File Upload Vulnerabilities

Quicksilver Forums is prone to a local file-include vulnerability and an arbitrary-file-upload vulnerability because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, a...

DinamikCMS <= v.1.09 Xss / local include Vulnerability

Exploit for unknown platform in category web applications ====================================================== DinamikCMS Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By :...

Scriptegrator Plugin for Joomla! 'files[]' Parameter Remote File Include

The version of the Core Design Scriptegrator plugin for Joomla! running on the remote host is affected by a remote file include vulnerability due to improper sanitization of user-supplied input to the 'files' parameter before using it in the cdscriptegrator/libraries/highslide/js/jsloader.php...

vBseo v3.1.0 Local File Include Vulnerability

Exploit for unknown platform in category web applications ============================================= vBseo v3.1.0 Local File Include Vulnerability ============================================= » Script: vBseo » Language: PHP === Exploit === »...

CMS Made Simple Local File Include and Cross Site Scripting Vulnerabilities

CMS Made Simple is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within...

CMS Made Simple <= 1.6.6 LFI and XSS Vulnerabilities

CMS Made Simple is prone to a local file include LFI vulnerability and a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

ZeusCMS v0.2 Local File Include Vulnerability

Exploit for unknown platform in category web applications ============================================= ZeusCMS v0.2 Local File Include Vulnerability ============================================= » Script: ZeusCMS » Language: PHP » Site page: ZeusCMS is yet another Content Management System »...

Saskia's Shopsystem <= beta1 Local File Include Exploit

Exploit for unknown platform in category web applications ======================================================= Saskia's Shopsystem Download: http://sourceforge.net/projects/saskiasshop/files/ Date: 13.02.2010 Remote: yes Vuln : include"include/".$id.".php"; PoC : Saskiapath/content.php?id=LFI%...

ZeusCMS 0.2 - Database Backup Dump Local File Inclusion

ZeusCMS 0.2 - Database Backup Dump Local File Inclusion ============================================================================== » Note : Tribute to the martyrs of Gaza . ============================================================================== » ZeusCMS v0.2 DBD/LFI Multiple...