otmanager cms 24a (lfi/xss) Multiple Vulnerabilities

No description provided by source. =========================================================== OTManager CMS LFI/XSS Multiple Remote Vulnerabilities =========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...

Joomla Component simpledownload 0.9.5 - LFI Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '68620' ssvid version = '1.0' author = 'kikay' vulDate = '2010-06-01' createDate ...

Chaton <= 1.5.2 - Local File Include Vulnerability

No description provided by source. + Chaton = 1.5.2 Local File Include Vulnerability + Discovered By: cr4wl3r + Download: Donwload: http://easy-script.com/scripts-dl/chaton-1.5.2.zip + Greetz: opt!x hacker, xoron, cyberlog, mywisdom, irvian, EA ngel, bL4Ck3n91n3, xharu, zvtral, and all my friend ...

CMS little (index.php template) 0.0.1 - Local File Inclusion Vulnerability

No description provided by source. ====================================================================== CMS little index.php template Local File Inclusion Vulnerability ====================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

gf-3xplorer 2.4 (xss/lfi/etc.) Multiple Vulnerabilities

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org...

Joomla Component com_event Multiple Vulnerabilities

No description provided by source. Author : altbta [email protected] Home : v4-team.com.xp10.me Script : Joomla Component comevent Bug Type : Multiple Vulnerabilities Dork : inurl:comevent === Exploit === LFI http://site/index.php?option=comevent&view=LFI...

Joomla Component wmi (com_wmi) LFI Vulnerability

No description provided by source. ================================================================================================ Title : Joomla Component wmi comwmi LFI Vulnerability Vendor : http://www.paysyspro.com/ Download : http://www.paysyspro.com/jotloader/files.download/3 Date : Sunday...

Joomla JE Auto Component (com_jeauto) LFI Vulnerability

Joomla JE Auto Component 支持Joomla1.5 Joomla1.6版本，view参数没做好处理，造成了包含漏洞，但是受到php版本的限制，php版本5.3.4以下。 1.漏洞分析 下载不到源码，推测漏洞的成因 php $view = $GET'view'; 然后不经过处理 直接包含了文件 include$view."inc.php"; 这种需要截断才能利用的LFI受到了php版本限制，在PHP 5.3.4以上中已经修复了%00截断的漏洞。 2.漏洞利用 http://host/jeauto/index.php?option=comjeauto&view=LFI%...

Cart Engine 3.0.0 (task.php) Local File Inclusion Vulnerability

No description provided by source. ? Cart Engine 3.0.0 task.php Local File Inclusion Vulnerability Vendor: C97net Product web page: http://www.c97.net Affected version: 3.0.0 Summary: Open your own online shop today with Cart Engine! The small, yet powerful and don't forget, FREE shopping cart...

phpTournois <= G4 Remote File Upload/Code Execution Exploit

No description provided by source. ?php / Name: phpTournois = G4 Remote File Upload/Code Execution Exploit Credits: Charles real F. charlesfolathotmail.fr Date: 04-06-08 - Remote Code Execution - Remote File Upload When testing if we are admin, phpTournois checks if $grade'a'=='a'. But when we ar...

OneOrZero Helpdesk <= 1.6.5.7 - Local File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl OneOrZero Helpdesk = 1.6.5.7 Local File Inclusion Vulnerability Script: OneOrZero Helpdesk and Task...

Joomla Component com_dailymeals LFI Vulnerability

No description provided by source. @=======================================@ @=Script : Joomla Component comdailymeals @=Author : FL0RiX @=Greez : Deep-Power ,Pyske,Wretch-x & All Friends @=Home : www.oltan.org @=Bug Type : Local File InlusionLFI @=Dork : inurl:comdailymeals @=Note : Finished My...

XCMS <= 1.82 Remote Local File Inclusion Vulnerability

No description provided by source. | ' \ / \ / / \ ' \ | | | | / / | | | || ||//\|| || XCMS = 1.82 LFI & RCE Xpl Nexen rocked this one ; LFIs http://127.0.0.1/xcms/index.php?pg=admin&s=../../../../../etc/passwd\0 http://127.0.0.1/xcms/index.php?mod=existing module&pg=../../../../../etc/passwd\0...

Joomla Component com_biblestudy LFI Vulnerability

No description provided by source. @=======================================@ @=Script : Joomla Component combiblestudy @=Author : FL0RiX @=Greez : Deep-Power ,Pyske,Wretch-x & All Friends @=Bug Type : Local File Inlusion @=Dork : inurl:combiblestudy @=======================================@ @=Vul...

Joomla Component com_jmsfileseller Local File Inclusion Vulnerability

No description provided by source. Exploit Title: Joomla Component comjmsfileseller Local File Inclusion Vulnerability Date: 28.05.2011 Author: Valentin Category: webapps/0day Version: 1.0 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::...

Joomla Component com_cartweberp LFI Vulnerability

No description provided by source...

S-CMS <= 2.0b3 Multiple Local File Inclusion Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------...

Joomla Component JE Section Finder LFI Vulnerability

No description provided by source. Name : Joomla jesectionfinder LFI Vulnerability Date : june, 26 2010 Critical Level : HIGH Vendor Url : http://joomlaextensions.co.in/component/awdsong/ Google Dork: inurl:/component/jesectionfinder/ Price:$25.00 Author : Sid3^effects aKa HaRi shellc99atyahoo.co...

nullam blog 0.1.2 (lfi/fd/sql/xss) Multiple Vulnerabilities

No description provided by source. -- Salvatore Fresta aka drosophila CWNP444351 Salvatore drosophila Fresta + Application: Nullam Blog + Version: 0.1.2 + Website: http://nullam.net/ + Bugs: A Local File Inclusion B File Disclosure C Multiple Blind SQL Injection D SQL Injection E Reflected XSS +...

Openfoncier 2.00 (RFI/LFI) Multiple File Include Vulnerability

No description provided by source. ============================================================== Openfoncier 2.00 RFI/LFI Multiple File Include Vulnerability ============================================================== + Openfoncier 2.00 RFI/LFI Multiple File Include Vulnerability...