10406 matches found
Directory traversal
Multiple directory traversal vulnerabilities in PHP Project Management 0.8.10 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the deflang parameter to modules/files/list.php; the mpath parameter to 2 modules/projects/summary.inc.php or 3...
Immunity Canvas: PEOPLEAGGREGATOR_INCLUDE
Name| peopleaggregatorinclude ---|--- CVE| CVE-2007-5631 Exploit Pack| CANVAS Description| peopleaggregator 1.2pre6 remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: peopleaggregator.org CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5631 CVE Name:...
Immunity Canvas: TOWEL_INCLUDE
Name| towelinclude ---|--- CVE| CVE-2007-5628 Exploit Pack| CANVAS Description| ToweLS remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: ToweLS CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5628 CVE Name: CVE-2007-5628...
reloadcms-lfi.txt
New Advisory: ReloadCMS http://reloadcms.com Summary- Software: ReloadCMS Sowtwares Web Site: http://reloadcms.com/main/ Versions: 1.2.7 Critical Level: Moderate Type: Multiple Vulnerabilities Class: Remote Status: Unpatched PoC/Exploit: Available Solution: Not Available Discovered b...
weather-lfi.txt
Weather for PHP Dr.2 = 4ever .... =D...
InstaGuide Weather Script (index.php) Local File Inclusion Vulnerability
No description provided by source. Weather for PHP = PageName Local File Include Vulnerability Script : Weather for PHP Version : 1.0 Download : http://www.instaguide.com/download/weatherfree.zip AUTHOR : BorN To K!LL Vuln Code : $PageName = $GET'PageName'; //// this is one ... :...
Jeebles Technology Jeebles Directory 2.9.60 - download.php Local File Inclusion
Jeebles Technology Jeebles Directory 2.9.60 - download.php Local File Inclusion source: https://www.securityfocus.com/bid/26171/info Jeebles Directory is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an...
InstaGuide Weather Script 1.0 - 'index.php' Local File Inclusion
Weather for PHP Dr.2 = 4ever .... =D milw0rm.com 2007-10-22...
CVE-2003-1426
Openwebmail in cPanel 5.0, when run using suid Perl, adds the directory in the SCRIPTFILENAME environment variable to Perl's @INC include array, which allows local users to execute arbitrary code by modifying SCRIPTFILENAME to reference a directory containing a malicious openwebmail-shared.pl...
Immunity Canvas: AWZMB_INCLUDE
Name| awzmbinclude ---|--- CVE| CVE-2007-5592 Exploit Pack| CANVAS Description| awzMB remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: awzMB CVE Url: https://vulners.com/cve/CVE-2007-5592 CVE Name: CVE-2007-5592...
Exploits CMS Creamotion - Remote File include
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? / / CMS Creamotion - Remote File include / This exploit should allow you to execute commands / By : HACKERS PAL / WwW.SoQoR.NeT / printr' // / CMS Creamotion Command Execution / / by HACKERS PAL [email protected] / / site:...
Immunity Canvas: PHPDJ_INCLUDE
Name| phpdjinclude ---|--- CVE| CVE-2007-5574 Exploit Pack| CANVAS Description| phpDJ remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: phpdj CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5574 CVE Name: CVE-2007-5574...
SiteBar 3.3.8 - translator.php?updcmdActionedit Arbitrary PHP Code Execution
SiteBar 3.3.8 - translator.php?updcmdActionedit Arbitrary PHP Code Execution source: https://www.securityfocus.com/bid/26126/info SiteBar is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input. These issues include: - A local file-include...
SiteBar 3.3.8 - 'integrator.php?lang' Cross-Site Scripting
source: https://www.securityfocus.com/bid/26126/info SiteBar is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input. These issues include: - A local file-include vulnerability - Multiple arbitrary-script-code-execution vulnerabilities -...
CVE-2003-1373: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in auth.php for PhpBB 1.4.0 through 1.4.4 allows remote attackers to read and include arbitrary files via .. dot dot sequences followed by NULL %00 characters in CGI parameters, as demonstrated using the lang parameter in prefs.php...
joomlacolorlab-rfi.txt
-------------------- Joomla comcolorlab Remote File Include -------------------- Found : xoron -------------------- Download: http://download.joomlaportal.ch/content/view/474/ -------------------- Wrong Code: include "$mosConfiglivesite/components/comcolor/about.html" ; --------------------...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in CARE2X 2G 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 encopyrite.php, 2 vicopyrite.php, and 3 arcopyrite.php in language/ directories; 4 classaccess.php, 5 classdepartment.php, 6...
Immunity Canvas: WEBDESKTOP_INCLUDE
Name| webdesktopinclude ---|--- CVE| CVE-2007-5388 Exploit Pack| CANVAS Description| webDesktop remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: webDesktop CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5388 CVE Name: CVE-2007-5388...
Immunity Canvas: PINDORAMA_INCLUDE
Name| pindoramainclude ---|--- CVE| CVE-2007-5387 Exploit Pack| CANVAS Description| pindorama remote file include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: pindorama CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5387 CVE Name: CVE-2007-5387...
CVE-2007-5431: Exposure of Sensitive Information to an Unauthorized Actor
include/imageupload.js in the MyFTPUploader module in Stride 1.0 contains sensitive information including FTP login credentials, which might allow remote attackers to gain unauthorized access to the FTP server being used by the module by viewing the source code...