Cart Engine 3.0.0 - task.php Local File Inclusion

Cart Engine 3.0.0 - task.php Local File Inclusion Cart Engine 3.0.0 task.php Local File Inclusion Vulnerability Vendor: C97net Product web page: http://www.c97.net Affected version: 3.0.0 Summary: Open your own online shop today with Cart Engine! The small, yet powerful and don't forget, FREE...

Cart Engine 3.0.0 (task.php) Local File Inclusion

Cart Engine 3.0.0 task.php Local File Inclusion Vulnerability Vendor: C97net Product web page: http://www.c97.net Affected version: 3.0.0 Summary: Open your own online shop today with Cart Engine! The small, yet powerful and don't forget, FREE shopping cart based on PHP & MySQL. Unique features...

Kemana Directory 1.5.6 - 'task.php' Local File Inclusion

Kemana Directory 1.5.6 run param Local File Inclusion Vulnerability Vendor: C97net Product web page: http://www.c97.net Affected version: 1.5.6 Summary: Experience the ultimate directory script solution with Kemana. Create your own Yahoo or Dmoz easily with Kemana. Unique Kemana's features...

[Netsparker v3.2] Web Application Security Scanner

Netsparker can crawl, attack and identify vulnerabilities in all custom web applications regardless of the platform and the technology they are built on, just like an actual attacker. It can identify web application vulnerabilities like SQL Injection, Cross-site Scripting XSS, Remote Code Executi...

Zimbra Collaboration Server LFI Vulnerability

This Metasploit module exploits a local file inclusion on Zimbra 8.0.2 and 7.2.2. The vulnerability allows an attacker to get the LDAP credentials from the localconfig.xml file. The stolen credentials allow the attacker to make requests to the service/admin/soap API. This can then be used to crea...

GLPI v0.83.7 (itemtype) Parameter Traversal Arbitrary File Access Exploit

Summary GLPI, an initialism for Gestionnaire libre de parc informatique Free Management of Computer Equipment, was designed by Indepnet Association a non profit organisation in 2003. GLPI is a free asset and IT management software package, it also offers functionalities like servicedesk ITIL or...

Weathermap 0.97c (editor.php, mapname param) - Local File Inclusion

Exploit for php platform in category web applications I. VULNERABILITY ------------------------- Local File Inclusion in Weathermap = 0.97C II. BACKGROUND ------------------------- Network Weathermap is a network visualisation tool, to take data you already have and show you an overview of your...

[Panoptic] Automates the process of search and retrieval of content for common log and config files through LFI vulnerability

Panoptic is an open source penetration testing tool that automates the process of search and retrieval of content for common log and config files through LFI vulnerability. Official introductionary post can be found here. Also, you can find a sample run here. Help Menu Usage: panoptic.py --url...

TP-LINK TL-WR841N Router LFI Vulnerability (Oct 2012) - Active Check

TP-LINK TL-WR841N router is prone to a local file include LFI vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Hacker leaks source code of NASA website belongs to US Government computer

A Hacker going by name - "LegitHacker97" claiming that he successfully access a NASA subdomain website , that actually belongs to a US Government computer, as mentioned on homepage. WARNING This is a US Government computer Hacker also dump a 82.51 MB compressed or 337 MB uncompressed Archive five...

53KF企业在线平台LFI一枚

简要描述： http://chat.53kf.com/ LFI一枚 配合 http://chat.53kf.com/test.php 的phpinfo信息...导致xxoo.. 详细说明： http://chat.53kf.com/login.php/ 修改请求 Cookie: customerservicelanguage=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00 结果： 加上phpinfo提供的信息： 未经授权....不进一步了。。 漏洞证明：...

Ad Manager Pro v. 4 LFI Vulnerability

Exploit for php platform in category web applications -=--------------------ADVISORY-------------------=- Ad Manager Pro v. 4 Author: Corrado Liotta Aka CorryL email protected -=-----------------------------------------------=- -=+ Application: Ad Manager Pro -=+ Version: 4 -=+ Vendor's URL:...

Symantec Web Gateway 5.0.3.18 LFI / Command Execution

!/usr/bin/python ''' The original patch for the Symantec Web Gateway 5.0.2 LFI vulnerability removed the /tmp/networkScript file but left the entry in /etc/sudoers, allowing us to simply recreate the file and obtain a root shell using a different LFI vulnerability. Timeline: 06 Jun 2012:...

vtiger CRM 5.2.0 LFI

Local file include vulnerability in vtiger CRM include/utils/utils.php Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

WordPress annonces plugin LFI Vulnerability

Exploit for php platform in category web applications +----------------------------------------------------------------------+ Exploit Title: wordpress annonces plugin local file inclusion LFI Google Dork: inurl:wp-content/plugins/annonces Date: 08/04/2012 Author: Tunisian spl01t3r Greetz: Milw0r...

Bitweaver v2.81 Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: Bitweaver v2.81 LFI exploit Date: 27.02.2012 Author: I2sec-PJH Software Link: http://sourceforge.net/projects/bitweaver/files/bitweaver2.x/bitweaver2.8.1.zip/download Version: v2.81 Tested on: windows xp...

Joomla Component com_foobla_suggestions 1.5.1.2 LFI

A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Joomla Component com_rule LFI Vulnerability

No description provided by source. Joomla Component comrule LFI Vulnerability x Author : thecybernuxbie x Home : www.thecybernuxbie.com x E-mail : [email protected] x Found : 24 January 2012. x Tested : Windows 7 Ultimate. x Dork : inurl:"/index.php?option=comrule" x Vuln Exploit Report:...

osCSS2 2.1.0 Local File Inclusion

Advisory: osCSS2 "ID" parameter Local file inclusion Advisory ID: SSCHADV2011-034 Author: Stefan Schurtz Affected Software: Successfully tested on osCSS2 2.1.0 latest version Vendor URL: http://oscss.org/ Vendor Status: Fixed in svn branche 2.1.0 and reported in develop version 2.1.1...

ea-gBook <= 0.1.4 LFI Vulnerability - Active Check

ea-gBook is prone to local file inclusion LFI vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...