Mantisbt < 1.2.4 LFI

LFI on admin/upgradeunattended.php via dbtype Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

CitrusDB 2.4.1 Local File Inclusion / SQL Injection

CitrusDB 2.4.1 - LFI/SQLi Vulnerability Author: Michal wacky Blaszczak WWW: blaszczakm.blogspot.com CitrusDB is an open source customer service and billing database. It can be used by customer service personnel to provide sales and support to customers, and by billing staff to bill customers for...

PhpGedView 4.2.3 LFI

Local file include vulnerability in PhpGedView pgvaction parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

phpMoneyBooks LFI

LFI in index.php Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

asaanCart - Cross-Site Scripting Local File Inclusion

asaanCart - Cross-Site Scripting Local File Inclusion Exploit Title :asaanCart XSS/LFI Vulnerabilities Google Dork :intext:"smartyajax — AJAX-enabled Smarty plugins"Orinurl:"/smartyajax/" Date :14/03/2012 Author :Number 7 Twitter:@TunisianSeven Blog :http://tunisianseven.blogspot.com/ Tested on...

Max Guestbook 1.0 - Multiple Vulnerabilities

Max Guestbook 1.0 - Multiple Vulnerabilities Exploit Title: Maxs Guestbook Google Dork: "Powered by PHP F1" Date: 14/03/2012 Author: n0tch aka andmuchmore Software Link: http://www.phpf1.com/download.html?dl=18 Version: 1.0 Tested on: Windows 7 / LinuxUbuntu +-- LFI --+...

Max Guestbook 1.0 - Multiple Vulnerabilities

Exploit Title: Maxs Guestbook Google Dork: "Powered by PHP F1" Date: 14/03/2012 Author: n0tch aka andmuchmore Software Link: http://www.phpf1.com/download.html?dl=18 Version: 1.0 Tested on: Windows 7 / LinuxUbuntu +-- LFI --+...

ModX 2.2.0 - Multiple Vulnerabilities

Exploit Title: Modx 2.2.0 LFI and Full Path Disclosure Google Dork: if relevant we will automatically add these to the GHDB Date: 13/03/2012 Author: n0tch aka andmuchmore Software Link: http://modx.com/download/ Version: 2.2.0 Tested on: Windows XP/ Windows 7 / Ubuntu +-- LFI --+...

asaanCart - Cross-Site Scripting / Local File Inclusion

Exploit Title :asaanCart XSS/LFI Vulnerabilities Google Dork :intext:"smartyajax — AJAX-enabled Smarty plugins"Orinurl:"/smartyajax/" Date :14/03/2012 Author :Number 7 Twitter:@TunisianSeven Blog :http://tunisianseven.blogspot.com/ Tested on :Linux Software Link :http://asaancart.wordpress.com/...

AsaanCart Cross Site Scripting / Local File Inclusion

Exploit Title :asaanCart XSS/LFI Vulnerabilities Google Dork :intext:"smartyajax — AJAX-enabled Smarty plugins"Orinurl:"/smartyajax/" Date :14/03/2012 Author :Number 7 Twitter:@TunisianSeven Blog :http://tunisianseven.blogspot.com/ Tested on :Linux Software Link :http://asaancart.wordpress.com/...

Simple Posting System - Multiple Vulnerabilities

Exploit Title: Simple Posting System Multple Google Dork: inurl:sps.php?old= or inurl:sps.php " Date: 14/03/2012 Author: n0tch aka andmuchmore Software Link: http://realize.be/files/sps.tar.gz Version: 1.0 Final Tested on: Windows 7 / LinuxUbuntu +-- LFI --+...

asaanCart XSS/LFI Vulnerabilities

Exploit for php platform in category web applications Exploit Title :asaanCart Multiple Vulnerabilities Google Dork :intext:"smartyajax — AJAX-enabled Smarty plugins"Orinurl:"/smartyajax/" Date :14/03/2012 Author :Number 7 Twitter:@TunisianSeven Blog :http://tunisianseven.blogspot.com/ Tested on...

Simple Posting System - Multiple Vulnerabilities

Simple Posting System - Multiple Vulnerabilities Exploit Title: Simple Posting System Multple Google Dork: inurl:sps.php?old= or inurl:sps.php " Date: 14/03/2012 Author: n0tch aka andmuchmore Software Link: http://realize.be/files/sps.tar.gz Version: 1.0 Final Tested on: Windows 7 / LinuxUbuntu +...

Max's Photo Gallery 1.0 Local File Inclusion

Exploit Title: Maxs Photo Gallery Google Dork: "Powered by PHP F1" Date: 14/03/2012 Author: n0tch aka andmuchmore Software Link: http://www.phpf1.com/download.html?dl=18 Version: 1.0 Tested on: Windows 7 / LinuxUbuntu +-- LFI --+...

Max's Guestbook 1.0 Local File Inclusion / Path Disclosure

Exploit Title: Maxs Guestbook Google Dork: "Powered by PHP F1" Date: 14/03/2012 Author: n0tch aka andmuchmore Software Link: http://www.phpf1.com/download.html?dl=18 Version: 1.0 Tested on: Windows 7 / LinuxUbuntu +-- LFI --+...

Saman Portal - Local File Inclusion

=========================================================== + Title: Iranian Saman portal LFI + Date: 2/28/12 + Author: TMT + Mail: taktazm2800a.tyahoo.com + Type: PHP + Vendor or Software Link: http://www.sis-eg.com + Customers: http://sis-eg.com/services/customers/ + Google dork:...

Saman Portal - Local File Inclusion

Saman Portal - Local File Inclusion =========================================================== + Title: Iranian Saman portal LFI + Date: 2/28/12 + Author: TMT + Mail: taktazm2800a.tyahoo.com + Type: PHP + Vendor or Software Link: http://www.sis-eg.com + Customers:...

AneCMS v. 2e2c583 local file containing the defect and repair-vulnerability warning-the black bar safety net

Title: AneCMS v. 2e2c583 LFI exploit Author Author: I2sec-PJH Software development website: https://github.com/AneGroup/AneCMS Affected version: v. 2e2c583 Overview source of index. php page the presence of defects Code analysis is as follows 1. ifisset$GET'p' 2. include './ pages/'.$ GET'p'.'...

Saman Portal Local File Inclusion

=========================================================== + Title: Iranian Saman portal LFI + Date: 2/28/12 + Author: TMT + Mail: taktazm2800a.tyahoo.com + Type: PHP + Vendor or Software Link: http://www.sis-eg.com + Customers: http://sis-eg.com/services/customers/ + Google dork:...

AneCMS v.2e2c583 LFI exploit

Exploit for php platform in category web applications Exploit Title: AneCMS v.2e2c583 LFI exploit Date: 03.04.2012 Author: I2sec-PJH Software Link: https://github.com/AneGroup/AneCMS Version: v.2e2c583 ----------------------------------------------------- -Description vulnerabilities have been...