phptraffic-lfi.txt

------=Part1622826164291.1172086007407 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline phpTrafficA-1.4.1 Local File Inclusion phpTrafficA is a GPL statistical tool for web traffic analysis, written in php and mySQL. It can...

CVE-2007-0651: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javascript script via 1 e-mail messages and 2 the ID parameter to a right.asp, b Forms/MAI/list.asp, and c Forms/VCF/list.asp in mewebmail/base/default/lang/EN/...

CVE-2007-0679: Undefined Security Weakness

PHP remote file inclusion vulnerability in lang/leslangues.php in Nicolas Grandjean PHPMyRing 4.1.3b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fichier parameter...

nsGalPHP (includes/config.inc.php racineTBS) Remote Inclusion Vuln

Exploit for unknown platform in category web applications ================================================================== nsGalPHP includes/config.inc.php racineTBS Remote Inclusion Vuln ================================================================== | | \ | S.W.A.T. | / \ | | / / || \ / ...

Bradabra <= 2.0.5 (include/includes.php) Remote Inclusion Vulnerability

No description provided by source. ====================================================================== Bradabra == v2.0.5 Remote File Include Vulnerability ====================================================================== Downlaoad Script :ftp://ftp1.comscripts.com/PHP/773bradabra-205.gz...

CVE-2007-0360: Undefined Security Weakness

PHP remote file inclusion vulnerability in lang/index.php in Oreon 1.2.3 RC4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file parameter...

Oreon <= 1.2.3 RC4 (lang/index.php file) Remote InclusionVulnerability

No description provided by source. ------------------------------------------------------------------------------------------------------------------------ Script:oreon-1.2.3-RC4 Downlaoad:http://www.oreon-project.org/...

Oreon 1.2.3 RC4 - langindex.php Remote File Inclusion

Oreon 1.2.3 RC4 - langindex.php Remote File Inclusion ------------------------------------------------------------------------------------------------------------------------ Script:oreon-1.2.3-RC4 Downlaoad:http://www.oreon-project.org/...

Oreon 1.2.3 RC4 - '/lang/index.php' Remote File Inclusion

------------------------------------------------------------------------------------------------------------------------ Script:oreon-1.2.3-RC4 Downlaoad:http://www.oreon-project.org/...

Oreon <= 1.2.3 RC4 (lang/index.php file) Remote InclusionVulnerability

Exploit for unknown platform in category web applications ====================================================================== Oreon = 1.2.3 RC4 lang/index.php file Remote InclusionVulnerability ======================================================================...

Sql injection

SQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the lang parameter...

CVE-2007-0202: Undefined Security Weakness

SQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the lang parameter...

Directory traversal

Directory traversal vulnerability in language.php in VerliAdmin 0.3 and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log fil...

CVE-2007-0098: Undefined Security Weakness

Directory traversal vulnerability in language.php in VerliAdmin 0.3 and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log fil...

CVE-2006-6857: Undefined Security Weakness

Cross-site scripting XSS vulnerability in modules/credits/credits.php in Docebo LMS allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2006-6857

Cross-site scripting XSS vulnerability in modules/credits/credits.php in Docebo LMS allows remote attackers to inject arbitrary web script or HTML via the lang parameter...

CVE-2006-6494

CVE-2006-6494 affects Sun Solaris 8, 9, and 10 where ld.so.1 is vulnerable to a directory traversal via a dot-dot sequence in the LANG environment variable that points to a locale file containing attacker-controlled format string specifiers. According to the provided records, this allows a local ...

CVE-2006-6494: Undefined Security Weakness

Directory traversal vulnerability in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via a .. dot dot sequence in the LANG environment variable that points to a locale file containing attacker-controlled format string specifiers...

Envolution <= 1.1.0 (PNSVlang) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ============================================================ Envolution = 1.1.0 PNSVlang Remote Code Execution Exploit ============================================================ ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+:...

PT-2006-6666 · Bloo · Bloo

Name of the Vulnerable Software and Affected Versions: Bloo version 1.0 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the lang parameter in the extensions/googiespell/googlespell proxy.php file. Recommendations: For...