10390 matches found
Simple PHP Blog <= 0.5.1 Local File Include vulnerability
No description provided by source. ============================================= INTERNET SECURITY AUDITORS ALERT 2009-005 - Original release date: March 2nd, 2009 - Last revised: December 18th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.8/10 CVSS scored...
[ISecAuditors Security Advisories] Simple PHP Blog <= 0.5.1 Local File Include vulnerability
============================================= INTERNET SECURITY AUDITORS ALERT 2009-005 - Original release date: March 2nd, 2009 - Last revised: December 18th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.8/10 CVSS scored ============================================= I. VULNERABILITY...
phpPollScript - 1.3 Remote File Include
phpPollScript = 1.3 Remote File Include Vulnerability Download Script : http://download.tomex.org/phpPollScriptv13b.zip Author : ZZxxHackerzzXX Contact : [email protected] Location : Turkey file : init.poll.php line 2 $incpath = dirname$includeclass; line 3 require $incpath."/voting.poll.php";...
gpEasy <= 1.5RC3 Remote FIle Include Exploit
Exploit for unknown platform in category web applications ============================================ gpEasy = 1.5RC3 Remote FIle Include Exploit ============================================ Exploit Title: gpEasy = 1.5RC3 Remote FIle Include Exploit Date: 18-12-2009 Author: cr4wl3r Software Link...
QuiXplorer 2.41beta LFI / Traversal / Code Execution
============================================= INTERNET SECURITY AUDITORS ALERT 2009-003 - Original release date: March 2nd, 2009 - Last revised: December 17th, 2009 - Discovered by: Juan Galiana Lara - Severity: 9/10 CVSS scored ============================================= I. VULNERABILITY...
Simple PHP Blog 0.5.1 Local File Inclusion
============================================= INTERNET SECURITY AUDITORS ALERT 2009-005 - Original release date: March 2nd, 2009 - Last revised: December 18th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.8/10 CVSS scored ============================================= I. VULNERABILITY...
F3Site 2009 - '/mod/poll.php?GLOBALS[nlang]' Traversal Local File Inclusion
source: https://www.securityfocus.com/bid/37408/info F3Site is prone to multiple local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks ar...
gpEasy <= 1.5RC3 Remote FIle Include Exploit
No description provided by source. Exploit Title: gpEasy = 1.5RC3 Remote FIle Include Exploit Date: 18-12-2009 Author: cr4wl3r Software Link: http://sourceforge.net/projects/gpeasy/files/ Version: N/A Tested on: GNU/LINUX Code adminpassword.php :...
Family Connections <= 2.1.3 Multiple Input Validation Vulnerabilities
Family Connections is prone to multiple input-validation vulnerabilities, including a local file include LFI issue, an arbitrary file-upload issue, and multiple SQL injection SQLi issues. These issues occur because the application fails to properly sanitize user-supplied input...
Family Connections Multiple Input Validation Vulnerabilities
Family Connections is prone to multiple input-validation vulnerabilities, including a local file-include issue, an arbitrary file-upload issue, and multiple SQL-injection issues. These issues occur because the application fails to properly sanitize user- supplied input. Exploiting these issues ma...
[ISecAuditors Security Advisories] QuiXplorer <=2.4.1beta Remote Code Execution vulnerability
============================================= INTERNET SECURITY AUDITORS ALERT 2009-003 - Original release date: March 2nd, 2009 - Last revised: December 17th, 2009 - Discovered by: Juan Galiana Lara - Severity: 9/10 CVSS scored ============================================= I. VULNERABILITY...
Invision Power Board < 3.0.5 Multiple Vulnerabilities
The remote web server hosts a version of Invision Power Board earlier than 3.0.5. Such versions are potentially affected by multiple vulnerabilities : - A local-file include vulnerability affects the 'section' parameter sent to the 'forum/index.php' script. - A SQL injection vulnerability affects...
phpldapadmin 'cmd.php' Local File Include Vulnerability
phpldapadmin is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible. phpldapadmin 1.1.0.5 is vulnerable; other...
eoCMS <= 0.9.03 Remote FIle Include Vulnerability
No description provided by source. Exploit Title: eoCMS = 0.9.03 Remote FIle Include Vulnerability Date: 14-12-2009 Author: 1nd0n3s14n l4m3r Software Link: http://eocms.com/index.php?act=plugin&id=4 Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A eoCMS = 0.9.03 Remote FIle Include...
Invision Power Board < 3.0.5 Multiple Vulnerabilities (deprecated)
Binary data 5260.prm...
eoCMS <= 0.9.03 Remote FIle Include Vulnerability
Exploit for unknown platform in category web applications ================================================= eoCMS = 0.9.03 Remote FIle Include Vulnerability ================================================= Exploit Title: eoCMS = 0.9.03 Remote FIle Include Vulnerability Date: 14-12-2009 Author:...
Mamboleto Joomla! component Remote File Include Vulneralbility
No description provided by source. / ! Mamboleto Joomla! component Remote File Include Vulneralbility ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date : December 10, 2009 ! Tune In : http://antisecradio.fm choose your weapon / Software Informati...
Joomla! Mamboleto Component 2.0 RC3 Remote File Include Vulneralbility
No description provided by source. / ! Mamboleto Joomla! component Remote File Include Vulneralbility ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date : December 10, 2009 ! Tune In : http://antisecradio.fm choose your weapon / Software Informati...
CVE-2009-4254: Exposure of Sensitive Information to an Unauthorized Actor
PowerPhlogger 2.2.5 allows remote attackers to obtain sensitive information via a direct request to 1 edCss.inc.php, 2 foot.inc.php, 3 getcsscolors.inc.php, 4 head.inc.php, 5 headstuff.inc.php, 6 loglist.inc.php, and 7 pphloggersend.inc.php in include/, which reveals the installation path in an...
Invision Power Board Local File Include and SQL Injection Vulnerabilities
Invision Power Board is prone to a local file-include vulnerability and multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrigh...