Weathermap 0.97c (editor.php, mapname param) - Local File Inclusion

Exploit for php platform in category web applications I. VULNERABILITY ------------------------- Local File Inclusion in Weathermap = 0.97C II. BACKGROUND ------------------------- Network Weathermap is a network visualisation tool, to take data you already have and show you an overview of your...

Weathermap 0.97C Local File Inclusion

============================================= WEBERA ALERT ADVISORY 01 - Discovered by: Anthony Dubuissez - Severity: high - CVE Request - 03/06/2013 - CVE Assign - 03/06/2013 - CVE Number - CVE-2013-3739 - Vendor notification - 03/06/2013 - Vendor reply - No reply - Public disclosure - 10/06/201...

php LFI to read the php file source code as well as directly post webshell-vulnerability warning-the black bar safety net

Recently in the busy defcon topic training where a set of topics where there is a foreigner to write it is mentioned in the LFI, another tips The original text please refer to the PS: the skill is not a new technology bull God has certainly been with got bored, so when passing on the line =,= I...

Cisco Linksys E4200 - Multiple Vulnerabilities

Cisco Linksys E4200 - Multiple Vulnerabilities -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ============================================= XSS, LFI in Cisco, Linksys E4200 Firmware ============================================= URL:...

Cisco Linksys E4200 Firmware - XSS/LFI Vulnerabilities

Exploit for hardware platform in category web applications ============================================= XSS, LFI in Cisco, Linksys E4200 Firmware ============================================= URL: http://www.cloudscan.me/2013/05/xss-lfi-linksys-e4200-firmware-0d.html...

Cisco Linksys E4200 - Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ============================================= XSS, LFI in Cisco, Linksys E4200 Firmware ============================================= URL: http://www.cloudscan.me/2013/05/xss-lfi-linksys-e4200-firmware-0d.html...

Sulogu cookie based LFI and XSS vulnerabilities

Exploit for php platform in category web applications Exploit Title: Sulogu cookie based LFI and XSS vulnerabilities Google Dork: intext:"Powered by Su Logu - A free PHP blog by Fabiux version 0.6.2" Download Link:http://www.uploadmb.com/dw.php?id=1367006431 Version: 0.6.2 Tested on: Linux Bug...

phpMyAdmin 3.5.8 / 4.0.0-RC2 Code Execution / LFI / Overwrite

waraxe-2013-SA103 - Multiple Vulnerabilities in phpMyAdmin =============================================================================== Author: Janek Vind "waraxe" Date: 25. April 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-103.html Description of vulnerable software:...

IceWarp Software LFI / Arbitary File Upload Vulnerabilities

Exploit for php platform in category web applications This is private exploit. You can buy it at https://0day.today...

[Panoptic] Automates the process of search and retrieval of content for common log and config files through LFI vulnerability

Panoptic is an open source penetration testing tool that automates the process of search and retrieval of content for common log and config files through LFI vulnerability. Official introductionary post can be found here. Also, you can find a sample run here. Help Menu Usage: panoptic.py --url...

Open-Xchange 6 XSS / LFI / SSRF / Hashing

Multiple security issues for Open-Xchange Server have been discovered and fixed. The vendor has chosen responsible full disclosure to publish security issue details. Users of the software have already been provided with patched versions. Proof regarding authenticity can be obtained from the...

Cisco Video Surveillance Operations Manager 6.3.2 XSS / LFI / Bypass

Cisco Video Surveillance Operations Manager version 6.3.2 suffers from cross site scripting, access bypass, and local file inclusion vulnerabilities. Exploit Title:Cisco Video Surveillance Operations Manager Multiple vulnerabilities Google Dork: intitle:"Video Surveillance Operations Manager Logi...

PHP-Fusion 7.02.05 XSS / LFI / SQL Injection Vulnerabilities

PHP-Fusion version 7.02.05 suffers from insecure backup handling, cross site scripting, local file inclusion, and remote SQL injection vulnerabilities. Multiple Vulnerabilities in PHP-Fusion 7.02.05 ===================================================== Author: Janek Vind "waraxe" Date: 27. Februa...

MyFi Wireless Disk 1.2 CSRF / LFI / Code Execution

Title: ====== MyFi Wireless Disk 1.2 iPad iPhone - Multiple Vulnerabilities Date: ===== 2013-02-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=864 VL-ID: ===== 864 Common Vulnerability Scoring System: ==================================== 8.3 Introduction:...

Smoke Loader LFI / File Deletion Vulnerabilities

Smoke Loader Command and Control panel suffers from local file inclusion and file deletion vulnerabilities. Two other vulnerabilities I forgot to mention, lfi and file deletion via control.php. The user must be logged into the administrative panel. 1. LFI GET...

Smoke Loader LFI / File Deletion

Two other vulnerabilities I forgot to mention, lfi and file deletion via control.php. The user must be logged into the administrative panel. 1. LFI GET http://evilserver.net/control.php?act=dwnshell&file=../../../../etc/passwd Enter username for Who are you? at evilsite.net:80:eviladmin Password:...

Air Disk Wireless 1.9 LFI / Command Injection

Title: ====== Air Disk Wireless 1.9 iPad iPhone - Multiple Vulnerabilities Date: ===== 2013-02-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=850 VL-ID: ===== 850 Common Vulnerability Scoring System: ==================================== 8.3 Introduction: ===========...

ArrowChat 1.5.61 - Multiple Vulnerabilities

ArrowChat 1.5.61 - Multiple Vulnerabilities Exploit Title: ArrowChat ?do=" enctype="multipart/form-data" --------------------...

WordPress A Page Flip Book 2.3 LFI

Remote file include vulnerability in WordPress A Page Flip Book plugin Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Joomla Plugins Scanner

This module scans a Joomla install for plugins and potential vulnerabilities. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Joomla Plugins Scanner', 'Description' = %q This module scans a...