CVE-2008-2073

Directory traversal vulnerability in include/global.inc.php in Virtual Design Studio vlbook 1.21 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the l parameter...

Content Management System for Phprojekt 0.6.1 RFI Vulnerabiltiies

No description provided by source. -========================================== ViVa Islam + YeMeN ====================================- Name : cm4p 0.6.1 Multiple Remote File Include Vulnerabiliy Download From : http://www.mariovaldez.net/software/cm4p/download.php Found By : RoMaNcYxHaCkEr...

Joomla! Component Visites 1.1 - MosConfig_absolute_path Remote File Inclusion

source: https://www.securityfocus.com/bid/28942/info The Visites component for Joomla! is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system...

Siteman 2.0.x2 - 'module' Cross-Site Scripting / Local File Inclusion

source: https://www.securityfocus.com/bid/28943/info Siteman is prone to a local file-include vulnerability and a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this as a cross-site scripting issue to execute...

Content Management System for Phprojekt 0.6.1 - Remote File Inclusion

Content Management System for Phprojekt 0.6.1 - Remote File Inclusion -========================================== ViVa Islam + YeMeN ====================================- Name : cm4p 0.6.1 Multiple Remote File Include Vulnerabiliy Download From :...

Content Management System for Phprojekt 0.6.1 RFI Vulnerabiltiies

Exploit for unknown platform in category web applications ================================================================= Content Management System for Phprojekt 0.6.1 RFI Vulnerabiltiies ================================================================= -========================================...

Immunity Canvas: GRAPE_INCLUDE

Name| grapeinclude ---|--- CVE| CVE-2008-1963 Exploit Pack| CANVAS Description| Grape Web Statistics Remote File include Notes| CVE Name: CVE-2008-1963 VENDOR: Quate Repeatability: Infinite References: http://www.securityfocus.com/bid/28838 CVE Url: https://vulners.com/cve/CVE-2008-1963 CVSS: 7.5...

Directory traversal

Multiple directory traversal vulnerabilities in Aterr 0.9.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 class parameter to include/functions.inc.php and the 2 file parameter to include/common.inc.php...

CVE-2008-1962

CVE-2008-1962 affects Aterr 0.9.1 and is caused by directory traversal that allows remote attackers to include and execute arbitrary local files. The vulnerability is rooted in unsafely handling user-supplied input in two PHP include points: (1) the class parameter to include/functions.inc.php an...

CVE-2008-1962

Multiple directory traversal vulnerabilities in Aterr 0.9.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 class parameter to include/functions.inc.php and the 2 file parameter to include/common.inc.php...

Immunity Canvas: NEWSOFFICE_INCLUDE

Name| newsofficeinclude ---|--- CVE| CVE-2008-1903 Exploit Pack| CANVAS Description| NewsOffice 1.1 Remote File Include Vulnerabilitiy Notes| CVE Name: CVE-2008-1903 VENDOR: Newanz.com Repeatability: Infinite References: http://securityreason.com/exploitalert/3732 CVE Url:...

atter-lfi.txt

Atter 0.9.1 Local File Inclusion Vulnerability Author : KnocKout ThanX : CW ALL USERS ================================================= Script Download : http://cms-bg.org/modules/mydownloads/viewcat.php?cid=5 Attackz : http://localsite.com/path/include/functions.inc.php?class=Local File...

Chimaera Project Aterr 0.9.1 - Multiple Local File Include Vulnerabilities

Chimaera Project Aterr 0.9.1 Multiple Local File Include Vulnerabilities. Webapps exploit for php platform source: http://www.securityfocus.com/bid/28861/info Aterr is prone to local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit...

grape-rfi.txt

Name : Grape Web Statistics Remote File include Vulnerability Download From :http://www.quate.net/link.php?grape Found By : MajnOoNxHaCkEr Home Page : http://www.4rxh.com ============================================================================ Vulne Code In File functions.php : Function:...

Immunity Canvas: VISUALPIC_INCLUDE

Name| visualpicinclude ---|--- CVE| CVE-2008-1876 Exploit Pack| CANVAS Description| VisualPic 0.3.1 Remote File Include Notes| CVE Name: CVE-2008-1876 VENDOR: Snarky.fr Repeatability: Infinite References: http://www.frsirt.com/english/advisories/2008/1127 CVE Url:...

Sql injection

SQL injection vulnerability in Blog Pixel Motion aka Blog PixelMotion allows remote attackers to execute arbitrary SQL commands via the categorie parameter to index.php, possibly related to include/requetesIndex.php...

Istant-Replay - 'read.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/28797/info Istant-Replay is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue can allow an attacker to compromise the application and the underlying system; other attacks are...

Immunity Canvas: PHPBLOCK_INCLUDE

Name| phpblockinclude ---|--- CVE| CVE-2008-1776 Exploit Pack| CANVAS Description| PHPBlock Remote File include Notes| CVE Name: CVE-2008-1776 VENDOR: phpblock Repeatability: Infinite References: http://www.securityfocus.com/bid/28588 CVE Url:...

Immunity Canvas: DRAGOON_INCLUDE

Name| dragooninclude ---|--- CVE| CVE-2008-1773 Exploit Pack| CANVAS Description| Dragoon 0.1 Remote File Include Notes| CVE Name: CVE-2008-1773 VENDOR: Dragoon Repeatability: Infinite References: http://securityreason.com/exploitalert/3697 CVE Url: https://vulners.com/cve/CVE-2008-1773 CVSS: 6.8...

PT-2008-3301 · Blogator · Blogator-Script

Name of the Vulnerable Software and Affected Versions: Blogator-script version 1.0 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the incl page parameter in several PHP files, including struct admin.php, struct admin blog.php, and struct main.php in the...