Joomla! / Mambo Component Multiple Parameter Local File Include Vulnerabilities

The remote host contains a component for Joomla! or Mambo that fails to sanitize user-supplied input to multiple parameters in a GET request before using it to include PHP code. Regardless of the PHP 'registerglobals' setting, an unauthenticated, remote attacker can exploit this issue to disclose...

Weatimages Directory Traversal and LFI Vulnerabilities

No description provided by source. Weatimages Directory Traversal&Local File Include Vulnerabilities By: e.wiZz! Script info: Site: http://nazarkin.name/projects/weatimages/download.php In the wild... index.php: ... //kill oneself if user trying to access resource with '/../' in path if...

AdaptBB 1.0 RFI Vulnerability

No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...

Joomla Component com_if_nexus Remote File Include

No description provided by source. \|/// \ - - // @ @ ----oOOo---oOOo--------------------------- @=Author : Fl0riX @=Greez : Deep-Power ,Pyske & All Friends ---------------Ooooo------------------------- ooooO / / \ \ @=======================================@ @=Script :Joomla Component comifnexus...

DrBenHur.com DBHcms 1.1.4 - 'dbhcms_core_dir' Parameter Remote File Include Vulnerability

DrBenHur.com DBHcms 1.1.4 'dbhcmscoredir' Parameter Remote File Include Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/37498/info DrBenHur.com DBHcms is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input...

Joomla Component com_if_nexus Remote File Include

Exploit for unknown platform in category web applications ================================================= Joomla Component comifnexus Remote File Include ================================================= @email protected @=Script :Joomla Component comifnexus @email protected @=Vuln : http://sit...

DBHCMS - Web Content Management System v1.1.4 RFI Vulnerability

Exploit for unknown platform in category web applications =============================================================== DBHCMS - Web Content Management System v1.1.4 RFI Vulnerability =============================================================== DBHCMS - Web Content Management System RFI...

apache mod-include 1.3.29 缓冲区溢出漏洞

No description provided by source...

SQL-Ledger – several vulnerabilities

============================================ ||| Security Advisory AKLINK-SA-2009-001 ||| ||| CVE-2009-3580 CVE candidate ||| ||| CVE-2009-3581 CVE candidate ||| ||| CVE-2009-3582 CVE candidate ||| ||| CVE-2009-3583 CVE candidate ||| ||| CVE-2009-3584 CVE candidate |||...

Simple PHP Blog <= 0.5.1 Local File Include vulnerability

No description provided by source. ============================================= INTERNET SECURITY AUDITORS ALERT 2009-005 - Original release date: March 2nd, 2009 - Last revised: December 18th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.8/10 CVSS scored...

phpPollScript <= 1.3 Remote File Include Vulnerability

No description provided by source. phpPollScript = 1.3 Remote File Include Vulnerability Download Script : http://download.tomex.org/phpPollScriptv13b.zip Author : ZZxxHackerzzXX Contact : [email protected] Location : Turkey file : init.poll.php line 2 $incpath = dirname$includeclass; line 3 requi...

Simple PHP Blog v0.5.1 Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================= Simple PHP Blog v0.5.1 Local File Inclusion Vulnerability ========================================================= Simple PHP Blog is prone to a local file-include vulnerability...

phpPollScript - 1.3 Remote File Include

phpPollScript = 1.3 Remote File Include Vulnerability Download Script : http://download.tomex.org/phpPollScriptv13b.zip Author : ZZxxHackerzzXX Contact : [email protected] Location : Turkey file : init.poll.php line 2 $incpath = dirname$includeclass; line 3 require $incpath."/voting.poll.php";...

[ISecAuditors Security Advisories] Simple PHP Blog <= 0.5.1 Local File Include vulnerability

============================================= INTERNET SECURITY AUDITORS ALERT 2009-005 - Original release date: March 2nd, 2009 - Last revised: December 18th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.8/10 CVSS scored ============================================= I. VULNERABILITY...

Simple PHP Blog 0.5.1 Local File Inclusion

============================================= INTERNET SECURITY AUDITORS ALERT 2009-005 - Original release date: March 2nd, 2009 - Last revised: December 18th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.8/10 CVSS scored ============================================= I. VULNERABILITY...

QuiXplorer 2.41beta LFI / Traversal / Code Execution

============================================= INTERNET SECURITY AUDITORS ALERT 2009-003 - Original release date: March 2nd, 2009 - Last revised: December 17th, 2009 - Discovered by: Juan Galiana Lara - Severity: 9/10 CVSS scored ============================================= I. VULNERABILITY...

gpEasy <= 1.5RC3 Remote FIle Include Exploit

No description provided by source. Exploit Title: gpEasy = 1.5RC3 Remote FIle Include Exploit Date: 18-12-2009 Author: cr4wl3r Software Link: http://sourceforge.net/projects/gpeasy/files/ Version: N/A Tested on: GNU/LINUX Code adminpassword.php :...

gpEasy <= 1.5RC3 Remote FIle Include Exploit

Exploit for unknown platform in category web applications ============================================ gpEasy = 1.5RC3 Remote FIle Include Exploit ============================================ Exploit Title: gpEasy = 1.5RC3 Remote FIle Include Exploit Date: 18-12-2009 Author: cr4wl3r Software Link...

F3Site 2009 - '/mod/poll.php?GLOBALS[nlang]' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/37408/info F3Site is prone to multiple local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks ar...

Family Connections <= 2.1.3 Multiple Input Validation Vulnerabilities

Family Connections is prone to multiple input-validation vulnerabilities, including a local file include LFI issue, an arbitrary file-upload issue, and multiple SQL injection SQLi issues. These issues occur because the application fails to properly sanitize user-supplied input...