Limny 3.2.2 Local File Inclusion

======================================================================== | Title : limny 3.2.2 Local File Inclusion vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : 3.2.2 | Vendor : http://www.limny.org/ | Dork : n/a...

CVE-2014-4853

CVE-2014-4853 is a reported cross-site scripting (XSS) flaw in OpenDocMan’s odm-init.php prior to version 1.2.7.3. The vulnerability allows remote authenticated users to inject arbitrary web script or HTML by supplying a specially crafted file name during upload. Public sources from NVD and CVE l...

CVE-2014-4853: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in odm-init.php in OpenDocMan before 1.2.7.3 allows remote authenticated users to inject arbitrary web script or HTML via the file name of an uploaded file...

AdaptCMS 2.0.0 Beta (init.php) Remote File Inclusion Vulnerability

No description provided by source. / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

PHPIDS 0.4 - Remote File Inclusion Vulnerability

No description provided by source. PHPIDS 0.4 - Remote File Inclusion Vulnerability @package PHPIDS @Version 0.4 @license http://www.gnu.org/licenses/lgpl.html LGP @link http://php-ids.org/ Type : Remote File Inclusion Vulnerability Author: eidelweiss Date : 2010-02-08 Location: Indonesia...

playSMS 0.9.3 - Multiple Remote/Local File Inclusion Vulnerabilities

No description provided by source. ==:RFI/LFI:== ===================== script:playsms 0.9.3 ========================================================================== download from:http://downloads.sourceforge.net/playsms/playsms-0.9.3.tar.gz?modtime=1211284086&bigmirror=0...

Telaen Multiple Vulnerabilities

Telaen is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-3794: Exposure of Sensitive Information to an Unauthorized Actor

Pligg CMS 1.1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by widgets/statistics/init.php and certain other files...

Information disclosure

MicroBlog 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by init.php and certain other files...

CVE-2011-3756: Exposure of Sensitive Information to an Unauthorized Actor

MicroBlog 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by init.php and certain other files...

Froxlor 0.9.15 - Remote File Inclusion

Froxlor 0.9.15 - Remote File Inclusion Exploit Title: Froxlor v 0.9.15 Remote file include vulnerbility Google Dork: © 2009-2010 by the Froxlor Team Date: 26/1/2011 Author: DIES3L Software Link: http://www.froxlor.org Version: v 0.9.15 Tested on: ubuntu + win7 Email : [email protected] Fichier :...

AdaptCMS 2.0.1 Beta - Remote File Inclusion (Metasploit)

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' 'AdaptCMS 2.0.1 Beta Released Remote File Inclusion Exploit', 'Description' = %q This module can be used to exploit Remote File...

CVE-2010-2618: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in inc/smarty/libs/init.php in AdaptCMS 2.0.0 Beta, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter. NOTE: it was later reported that 2.0.1 is also affected...

AdaptCMS 2.0.0 Beta Remote File Inclusion

/ / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID ----------------------------------------------------------------------- AdaptCMS...

CVE-2010-2005: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in DataLife Engine DLE 8.3 allow remote attackers to execute arbitrary PHP code via a URL in 1 the selectedlanguage parameter to engine/inc/include/init.php, 2 the configlangs parameter to engine/inc/help.php, 3 the configlang parameter to...

CVE-2009-4836: Improper Control of Generation of Code

Eval injection vulnerability in system/services/init.php in Movie PHP Script 2.0 allows remote attackers to execute arbitrary PHP code via the anticode parameter...

PHPIDS 0.4 - Remote File Inclusion

PHPIDS 0.4 - Remote File Inclusion PHPIDS 0.4 - Remote File Inclusion Vulnerability @package PHPIDS @Version 0.4 @license http://www.gnu.org/licenses/lgpl.html LGP @link http://php-ids.org/ Type : Remote File Inclusion Vulnerability Author: eidelweiss Date : 2010-02-08 Location: Indonesia...

PHPIDS 0.4 - Remote File Inclusion

PHPIDS 0.4 - Remote File Inclusion Vulnerability @package PHPIDS @Version 0.4 @license http://www.gnu.org/licenses/lgpl.html LGP @link http://php-ids.org/ Type : Remote File Inclusion Vulnerability Author: eidelweiss Date : 2010-02-08 Location: Indonesia http://yogyacarderlink.web.id Contact:...

CVE-2009-1960: Improper Control of Generation of Code

inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via the configcascademaindefault parameter to doku.php. NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp://...

CVE-2009-1911: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in .include/init.php aka admin/include/init.php in QuiXplorer 2.3.2 and earlier, as used in TinyWebGallery TWG 1.7.6 and earlier, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter to admin/index.php...