Yerba SACphp <= 6.3 (mod) Local File Inclusion Exploit

No description provided by source. ! /usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Yerba SACphp = 6.3 / Local File Inclusion Exploit -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Program: Yerba SACphp Version: = 6.3 File affected: index.php Download:...

Yerba SACphp 6.3 - Local File Inclusion

Yerba SACphp 6.3 - Local File Inclusion ! /usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Yerba SACphp eNYe-Sec - www.enye-sec.org Bug: 37- include"modulos/$mod/modnucleo.php"; use LWP::UserAgent; use HTTP::Request::Common; my $host, $file = @ARGV ; unless$ARGV1 print "\nUsage:...

Yerba SACphp 6.3 - Local File Inclusion

!/usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Yerba SACphp eNYe-Sec - www.enye-sec.org Bug: 37- include"modulos/$mod/modnucleo.php"; use LWP::UserAgent; use HTTP::Request::Common; my $host, $file = @ARGV ; unless$ARGV1 print "\nUsage: perl $0 \n"; print "\tex: perl $0...

CVE-2008-4455: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in EKINdesigns MySQL Quick Admin 1.5.5 and earlier, when magicquotesgpc is disabled, allows remote attackers to read and execute arbitrary files via a .. dot dot in the language cookie...

CVE-2008-4431

CVE-2008-4431 describes a SQL injection in IceBB 1.0-rc9.3 and earlier, exploitable via the skin parameter in index.php. The root cause is a likely flaw in the protection mechanism within the clean_string function in includes/functions.php, allowing remote attackers to execute arbitrary SQL comma...

CVE-2008-4431: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in IceBB 1.0-rc9.3 and earlier allows remote attackers to execute arbitrary SQL commands via the skin parameter, probably related to an incorrect protection mechanism in the cleanstring function in includes/functions.php...

CVE-2008-4423: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Ovidentia 6.6.5 allows remote attackers to execute arbitrary SQL commands via the item parameter in a contact modify action...

CVE-2008-4424: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Domain Group Network GooCMS 1.02 allows remote attackers to inject arbitrary web script or HTML via the s parameter in a comments action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Printlog <= 0.4: Remote File Edition Vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog = 0.4: Remote File Edition Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: Printlog $ File affected: index.php $ Version: 0.4 $ Download: http://www.hardkap.net/pritlog Found by Pepelux pepeluxatenye-sec.org...

hostadmin-xss.txt

Islamic Republic Of Iran Security Team Www.IrIsT.Ir HostAdmin == 3.1.1 Cross-Site Scripting Vulnerabilities Download......: http://dreamcost.com/?page=hostadmin Bug Found.....: IrIsT™ discovery.....: Am!r IrIsT™ contact.......: AdminatIrIsT.ir Exploit.......: http://site/path/index.php?page=XSS...

CVE-2008-4374

CVE-2008-4374 describes an SQL injection in CMS Buzz: index.php vulnerable to manipulation of the id parameter in the playgame action, enabling remote SQL command execution. The issue is due to improper input handling in the affected PHP file, with CVSS v2 indicating High severity (base score 7.5...

CVE-2008-4376

CVE-2008-4376 affects the Live TV Script software, specifically the vulnerable code path in index.php where the mid parameter is used in SQL queries. The underlying issue is an SQL injection vulnerability that could allow a remote attacker to execute arbitrary SQL commands. Documented impact is p...

CVE-2008-4376

SQL injection vulnerability in index.php in Live TV Script allows remote attackers to execute arbitrary SQL commands via the mid parameter...

printlog-disclose.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog eNYe-Sec - www.enye-sec.org -- Description by the author's page -- PRITLOG is an extremely simple, small and powerful blog system. It does not use or need a MYSQL database and fully works based on flat files. The idea is derived from a...

CVE-2008-4376: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Live TV Script allows remote attackers to execute arbitrary SQL commands via the mid parameter...

CVE-2008-4374: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in CMS Buzz allows remote attackers to execute arbitrary SQL commands via the id parameter in a playgame action...

Crux Gallery <= 1.32 (index.php theme) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================================= Crux Gallery Osirys and darkjoker 14. $m = $GET'm'; 15. $p = $GET'p'; 16. $dir = $GET'dir'; 17. requireonce"main.php"; 18. requireonce"themes/".$theme."/theme.php";...

CVE-2008-4354

SQL injection vulnerability in the products module in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php...

CVE-2008-4351

Directory traversal vulnerability in index.php in phpSmartCom 0.2 allows remote attackers to include and execute arbitrary files via a .. dot dot in the p parameter...

CVE-2008-4354

The CVE-2008-4354 entry describes an SQL injection in the NetArt Media iBoutique 4.0 products module, exploitable via the cat parameter to index.php. Affected component: products module; vulnerable input handling allows arbitrary SQL execution. Root cause: improper input validation for the cat pa...