9059 matches found
Datafeed Studio - 'patch.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/30659/info Datafeed Studio is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in th...
Gallery 1.5.7, 1.6-alpha3 (phpEx) Local File Inclusion Vulnerability
No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-035 Application: Gallery Versions Affected: 1.5.7, 1.6-alpha3 Vendor URL: http://gallery.menalto.com/ Bug: Local File Include Exploits: YES Reported: 14.07.2008 Vendor response: 15.07.2008 Solution: YES...
txtSQL 2.2 Final (startup.php) Remote File Inclusion Vulnerability
No description provided by source. ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ ββ C r a C k E r ββ ββ T H E C R A C K O F E T E R N A L M I G H T ββ ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ βββββ From The Ashes and Dust Rise...
linkspider-rfi.txt
============================================================= Linkspider v.1.08 Remote File Include Vulnerability ============================================================== App Name : Linkspider v.1.08 HomePage : http://www.phoenix.frihost.net/linkspider/readme.php Vulnerability Discovered by...
txtsql-rfi.txt
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ ββ C r a C k E r ββ ββ T H E C R A C K O F E T E R N A L M I G H T ββ ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ βββββ From The Ashes and Dust Rises An Unimaginable crack.... βββββ...
DSECRG-08-035.txt
Digital Security Research Group DSecRG Advisory DSECRG-08-035 Application: Gallery Versions Affected: 1.5.7, 1.6-alpha3 Vendor URL: http://gallery.menalto.com/ Bug: Local File Include Exploits: YES Reported: 14.07.2008 Vendor response: 15.07.2008 Solution: YES Date of Public Advisory: 08.08.2008...
Directory traversal
Directory traversal vulnerability in the usergetprofile function in include/functions.inc.php in Coppermine Photo Gallery CPG 1.4.18 and earlier, when the charset is utf-8, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang part of serialized data in...
Quate CMS 0.3.4 (LFI/XSS) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ========================================================= Quate CMS 0.3.4 LFI/XSS Multiple Remote Vulnerabilities =========================================================...
Chupix CMS Contact Module 0.1 - 'index.php' Multiple Local File Inclusions
source: https://www.securityfocus.com/bid/30564/info The Contact module for Chupix CMS is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues using directory-traversal strings to view local files with...
quatecms-lfixss.txt
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ ββ C r a C k E r ββ ββ T H E C R A C K O F E T E R N A L M I G H T ββ ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ βββββ From The Ashes and Dust Rises An Unimaginable crack.... βββββ...
UNAK-CMS 1.5 - 'connector.php' Local File Inclusion
source: https://www.securityfocus.com/bid/30533/info UNAK-CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to view local files within the context of the...
pepsicms-rfi.txt
Dear Packetstormsecurity ! I found Vulnerability in Pepsi CMS here is the description ======================================= Pepsi CMS template-loader.php Remote File Include ======================================= ::Home: http://sourceforge.net/projects/pepsicms/ ::Vuln Type : Remote File Inclu...
H0tturk Panel - gizli.php Remote File Inclusion
H0tturk Panel - gizli.php Remote File Inclusion source: https://www.securityfocus.com/bid/30468/info H0tturk Panel is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file...
Directory traversal
Directory traversal vulnerability in userportal.php in the Dokeos E-Learning System 1.8.5 on Windows allows remote attackers to include and execute arbitrary local files via a ..\ dot dot backslash in the include parameter...
CVE-2008-3363
Directory traversal vulnerability in userportal.php in the Dokeos E-Learning System 1.8.5 on Windows allows remote attackers to include and execute arbitrary local files via a ..\ dot dot backslash in the include parameter...
DEV Web Management System 1.5 - Multiple Input Validation Vulnerabilities
DEV Web Management System 1.5 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/30447/info DEV Web Management System is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include local...
[DSECRG-08-034] Local File Include Vulnerability in Minishowcase v09b136
Digital Security Research Group DSecRG Advisory DSECRG-08-034 Application: Minishowcase Image Gallery Versions Affected: v09b136 Vendor URL: http://minishowcase.frwrd.net Bug: Local File Include Exploits: YES Reported: 14.07.2008 Second report: 22.07.2008 Vendor response: NONE Solution: NONE Date...
DEV Web Management System 1.5 - Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/30447/info DEV Web Management System is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include local file-include, SQL-injection, and cross-site scripting vulnerabilities...
Minishowcase 09b136 (lang) Local File Inclusion Vulnerability
No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-034 Application: Minishowcase Image Gallery Versions Affected: v09b136 Vendor URL: http://minishowcase.frwrd.net Bug: Local File Include Exploits: YES Reported: 14.07.2008 Second report: 22.07.2008 Vendor...
[DSECRG-08-033] Local File Include Vulnerability in Pixelpost 1.7.1
Digital Security Research Group DSecRG Advisory DSECRG-08-033 Application: Pixelpost photoblog Versions Affected: 1.7.1 Vendor URL: http://www.pixelpost.org/ Bug: Local File Include Exploits: YES Reported: 22.07.2008 Vendor response: 23.07.2008 Solution: YES Date of Public Advisory: 28.07.2008...