Joomla Component 'com_jimtawl' <= 1.0.2 LFI Vulnerability - Active Check

The SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; if description scriptoid"1.3.6.1.4.1.25623.1.0.100919";...

Joomla Component 'com_img' Local File Include Vulnerability

The 'comimg' component for Joomla! is prone to a local file- include vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver...

Joomla Component 'com_jimtawl' Local File Include Vulnerability

The 'comjimtawl' component for Joomla! is prone to a local file- include vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the...

RSForm! Component for Joomla! 'lang' Parameter Local File Include

The version of the RSForm! component for Joomla! running on the remote host is affected by a local file include vulnerability due to improper sanitization of user-supplied input to the 'lang' parameter before using it in the forme.php script to include PHP code. An unauthenticated, remote attacke...

DSquare Exploit Pack: D2SEC_VTIGERCRM

Name| d2secvtigercrm ---|--- CVE| CVE-2010-3910 Exploit Pack| D2ExploitPack Description| vtiger CRM 5.2.0 Local File Include Vulnerability Notes|...

PHP include alco-0day

Я слегка трезв, так что не судите строго. Если что Ded mazdai гарант того что в таком состоянии судить меня строго нельзя По мотивам: https://rdot.org/forum/showpost.php?p=9688&postcount=45 Имеем скрипт inc.php: Код: Определение имён папок: 1 Шлём обычный кривой запрос http://localhost/inc.php?a=...

Vtiger CRM <= 5.2.0 Multiple Vulnerabilities - Active Check

Vtiger CRM is prone to an arbitrary file upload vulnerability, multiple local file include LFI vulnerabilities, and multiple cross-site scripting XSS vulnerabilities because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text...

WebRCSdiff 0.9 - 'viewver.php' Remote File Inclusion

======================================================== = Author: Fl0riX - Bug Researchers = Application Name : WebRCSdiff 0.9 = Vulnerable Type: Remote File Inclusion = Download: http://sourceforge.net/projects/webrcsdiff/files/webrcsdiff/0.9%20Release/webrcsdiff-0.9.tar.zip/download = Risk :...

AWCM CMS <= 2.2 Multiple RFI Vulnerabilities

AWCM CMS is prone to multiple remote file include RFI vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

AWCM CMS Multiple Remote File Include Vulnerabilities

AWCM CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information or to execute arbitrary script code in the context of the webserver process. This...

WeBid Multiple Input Validation Vulnerabilities

WeBid is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include a local file-include vulnerability and a cross-site-scripting vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions migh...

WeBid 0.85P1 - Multiple Input Validation Vulnerabilities

WeBid 0.85P1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/44765/info WeBid is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include a local file-include vulnerability a...

Joomla 1.0.5 com_forme Multiple Vulnerabilities

Exploit for php platform in category web applications =============================================== Joomla 1.0.5 comforme Multiple Vulnerabilities =============================================== Exploit Title: RSform! 1.0.5 Joomla Multiple Vulnerabilities Date: 06.11.2010 Author: jdc Software...

Joomla! Component com_forme 1.0.5 - Multiple Vulnerabilities

Joomla! Component comforme 1.0.5 - Multiple Vulnerabilities Exploit Title: RSform! 1.0.5 Joomla Multiple Vulnerabilities Date: 06.11.2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/contacts-and-feedback/forms/2265 Version: 1.0.5 Local File Include ------------------...

Joomla! Component com_forme 1.0.5 - Multiple Vulnerabilities

Exploit Title: RSform! 1.0.5 Joomla Multiple Vulnerabilities Date: 06.11.2010 Author: jdc Software Link: http://extensions.joomla.org/extensions/contacts-and-feedback/forms/2265 Version: 1.0.5 Local File Include ------------------ ?option=comforme 〈=../../../../../../../../../etc/passwd%00 SQL...

JAF CMS <= 4.0 RC2 Multiple Vulnerabilities

JAF CMS is prone to a shell command execution vulnerability and multiple remote file include vulnerabilities because the application fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and a...

JAF CMS Multiple Remote File Include and Remote Shell Command Execution Vulnerabilities

JAF CMS is prone to an shell-command-execution vulnerability and multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit the remote shell-command-execution issue to execute arbitrary shell commands in the context...

Zen Cart 'includes/initsystem.php' Local File Include Vulnerability

Zen Cart is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow the...

openEngine Local File Include Vulnerability

openEngine is prone to a local file-include vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute local files within the...

TFTgallery 'thumbnailformpost.inc.php' Local File Include Vulnerability

TFTgallery is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This may allow t...