[Full-disclosure] TinyMCE_exp Remote File Include Vulnerability

TinyMCEexp Remote File Include Vulnerability Author: Arturo Z. Contact: [email protected] Website: www.diosdelared.com Date: 10/03/07 Risk: critical Vendor Url: http://www.joomlaya.com/index.php?option=comremository&func=fileinfo&filecatid=1868 Affected Software: TinyMCEexp search: allinurl:...

PostNuke Module phgstats 0.5 (phgdir) Remote File Include Exploit

No description provided by source. PostNuke Module phgstats 0.5 phgdir Remote File Include Exploit Vendor: http://kent.dl.sourceforge.net/sourceforge/phgstats/phgstats0.5.zip Vulnerable Code: includeonce$phgdir . 'settings/config.inc.php'; Coded by bd0rk || SOH-Crew Usage: expl.pl target cmd...

OES (Open Educational System) 0.1beta - Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV69$2007 ----------------------------------------------------------------------------------------- ECHOADV69$2007 OES Open Educational System 0.1beta Remote File Inclusion Vulnerability...

PostNuke Module phgstats 0.5 - phgdir Remote File Inclusion

PostNuke Module phgstats 0.5 - phgdir Remote File Inclusion PostNuke Module phgstats 0.5 phgdir Remote File Include Exploit Vendor: http://kent.dl.sourceforge.net/sourceforge/phgstats/phgstats0.5.zip Vulnerable Code: includeonce$phgdir . 'settings/config.inc.php'; Coded by bd0rk || SOH-Crew Usage...

PostNuke Module phgstats 0.5 (phgdir) Remote File Include Exploit

Exploit for unknown platform in category web applications ================================================================= PostNuke Module phgstats 0.5 phgdir Remote File Include Exploit ================================================================= PostNuke Module phgstats 0.5 phgdir Remote...

PostNuke Module phgstats 0.5 - 'phgdir' Remote File Inclusion

PostNuke Module phgstats 0.5 phgdir Remote File Include Exploit Vendor: http://kent.dl.sourceforge.net/sourceforge/phgstats/phgstats0.5.zip Vulnerable Code: includeonce$phgdir . 'settings/config.inc.php'; Coded by bd0rk || SOH-Crew Usage: expl.pl target cmd shell shell variable Greetings: str0ke,...

Premod SubDog 2 - includeslogger_engine.php?phpbb_root_path Remote File Inclusion

Premod SubDog 2 - includesloggerengine.php?phpbbrootpath Remote File Inclusion source: https://www.securityfocus.com/bid/22912/info Premod SubDog 2 is prone to multiple remote file-include vulnerabilities. An attacker can exploit these issues to include an arbitrary remote file containing malicio...

SoftNews 4.15.5 - engineAjaxeditnews.php?root_dir Remote File Inclusion

SoftNews 4.15.5 - engineAjaxeditnews.php?rootdir Remote File Inclusion source: https://www.securityfocus.com/bid/22913/info DataLife Engine is prone to multiple remote file-include vulnerabilities. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP...

Remote File Include In Script Premod SubDog 2

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : Premod SubDog 2 Dork : "Premod SubDog 2" ------------------------------------ B.Files : functionskb.php themenportalmitte.php loggerengine.php ------------------------------------ Exploits :...

PostGuestbook 0.6.1(tpl_pgb_moddir)Remote File Include Expliot

PostGuestbook 0.6.1tplpgbmoddirRemote File Include Expliot D.Script: http://sourceforge.net/projects/postguestbook/ Dork: "Powered by: PostGuestbook 0.6.1" Discovered by GloDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group V.Code include...

PHP-Nuke <= 8.0 Cookie Manipulation (lang)

///////////////////////////////////////////////////////////////////////////////////////////////////// PHPNuke = 8.0 Cookie Manipulation lang PROGRAM: PHP-Nuke HOMEPAGE: http://phpnuke.org/ VERSION: All version BUG: Cookie Manipulation lang SQL Injection + Local file include AUTHOR: Aleksandar aka...

Premod SubDog 2 - '/includes/functions_kb.php?phpbb_root_path' Remote File Inclusion

source: https://www.securityfocus.com/bid/22912/info Premod SubDog 2 is prone to multiple remote file-include vulnerabilities. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may...

JCCorp URLShrink Free 1.3.1 - CreateURL.php Remote File Inclusion

JCCorp URLShrink Free 1.3.1 - CreateURL.php Remote File Inclusion source: https://www.securityfocus.com/bid/22894/info URLshrink Free is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to...

Remote File Include In Script copyright (c) James Coyle; JCcorp

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : copyright c James Coyle; JCcorp Expl : Remote Include File Dork : "copyright © James Coyle; JCcorp" ------------------------------------ B.File : createurl.php ------------------------------------ Exploit :...

Lazarus Guestbook (admin.php)Remote File Include Expliot

Lazarus Guestbook admin.phpRemote File Include Expliot D.Script: http://www.carbonize.co.uk Dork: "Powered by Lazarus Guestbook from carbonize.co.uk" Discovered by Crackman Homepage: http://www.b0rizq.biz Greetz To :B0rizq & redcasper & Draknaz kaiba & brokenproxy and all freind Exploit:...

Remote File Include In Script Coppermine Photo Gallery

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : Coppermine Photo Gallery Expl : Remote Include File Dork : "Copyright c 2003-2006 Coppermine Dev Team" ------------------------------------ B.Files : imageprocessor.php functions.php picmgmt.inc.php...

JCCorp URLShrink Free 1.3.1 - 'CreateURL.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/22894/info URLshrink Free is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are...

CVE-2007-1341: Undefined Security Weakness

include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which might allow attackers to obtain sensitive information...

Magic CMS 4.2.747 (mysave.php file) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Magic CMS 4.2.747 mysave.php file Remote File Include Vulnerability ===================================================================== '/ -.-...

CVE-2006-7159: Undefined Security Weakness

Directory traversal vulnerability in include/prunetorrents.php in BTI-Tracker 1.3.2 aka btitracker allows remote attackers to delete arbitrary files via ".." sequences in the TORRENTSDIR parameter in a prune action...