CVE-2008-4331

Directory traversal vulnerability in library/pagefunctions.inc.php in phpOCS 0.1 beta3 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the act parameter to index.php...

Directory traversal

Directory traversal vulnerability in library/pagefunctions.inc.php in phpOCS 0.1 beta3 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the act parameter to index.php...

CVE-2008-4330

Summary: CVE-2008-4330 describes a directory traversal vulnerability in LanSuite 3.3.2, specifically in index.php where the design parameter can be exploited to include and execute arbitrary local files via a .. sequence. The NVD entry assigns a CVSS v2 base score of 7.5 (HIGH) with Network attac...

CVE-2008-4331

CVE-2008-4331 describes a directory traversal vulnerability in phpOCS 0.1 beta3 and earlier. The flaw resides in library/pagefunctions.inc.php, where an attacker can influence the act parameter in index.php to perform dot-dot traversal, enabling remote inclusion and execution of arbitrary local f...

Pritlog <= 0.4 (filename) Remote File Disclosure Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog = 0.4: Remote File Edition Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: Printlog $ File affected: index.php $ Version: 0.4 $ Download: http://www.hardkap.net/pritlog Found...

Pritlog 0.4 - Filename Remote File Disclosure

Pritlog 0.4 - Filename Remote File Disclosure -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog eNYe-Sec - www.enye-sec.org -- Description by the author's page -- PRITLOG is an extremely simple, small and powerful blog system. It does not use or need a MYSQL database and fully works bas...

CVE-2008-4354: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the products module in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php...

CVE-2008-4330: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in LanSuite 3.3.2 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the design parameter...

CVE-2008-4351: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in phpSmartCom 0.2 allows remote attackers to include and execute arbitrary files via a .. dot dot in the p parameter...

CVE-2008-4337: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Bitweaver 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the URL parameter to 1 edit.php and 2 list.php in articles/; 3 listblogs.php and 4 rankings.php in blogs/; 5 calendar/index.php; 6 calendar.php, 7 index.php, and 8...

CVE-2008-4356: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Kasseler CMS 1.1.0 and 1.2.0 allow remote attackers to execute arbitrary SQL commands via 1 the nid parameter to index.php in a View action to the News module; 2 the vid parameter to index.php in a Result action to the Voting module; 3 the fid parameter t...

Pritlog 0.4 - 'Filename' Remote File Disclosure

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Printlog eNYe-Sec - www.enye-sec.org -- Description by the author's page -- PRITLOG is an extremely simple, small and powerful blog system. It does not use or need a MYSQL database and fully works based on flat files. The idea is derived from a...

帝国ECMS V5 /e/member/list/index.php注入漏洞

帝国ECMS /e/member/list/index.php文件: if$sear $keyboard=RepPostVar2$GET'keyboard'; if$keyboard $add.=$where.$userusername." like '%$keyboard%'"; $search.="&sear=1&keyboard=$keyboard"; 判断sear参数是否存在,然后直接去keyboard的参数,然后再判断keyboard值是否为空,如果不为 空就直接把keyboard带入查询产生注射漏洞. 帝国ECMS V5 暂无...

PlugSpace 0.1 (index.php navi) Local File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl PlugSpace v0.1 Local File Inclusion Vulnerability Download:...

PHPcounter 1.3.2 - index.php SQL Injection

PHPcounter 1.3.2 - index.php SQL Injection !/usr/bin/php -q milw0rm.com 2008-09-28...

PHPcounter 1.3.2 - 'index.php' SQL Injection

!/usr/bin/php -q milw0rm.com 2008-09-28...

plugspace-lfi.txt

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl PlugSpace v0.1 Local File Inclusion Vulnerability Download: http://sourceforge.net/projects/plugspace/ Vuln:...

PlugSpace 0.1 - navi Local File Inclusion

PlugSpace 0.1 - navi Local File Inclusion :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl PlugSpace v0.1 Local File Inclusion Vulnerability Download:...

PlugSpace 0.1 (index.php navi) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= PlugSpace 0.1 index.php navi Local File Inclusion Vulnerability ================================================================= :::::::-. ... ::::::. :::. ;;, ';, ;;...

PlugSpace 0.1 - 'navi' Local File Inclusion

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl PlugSpace v0.1 Local File Inclusion Vulnerability Download: http://sourceforge.net/projects/plugspace/ Vuln:...