LFI in eoCMS

Vulnerability ID: HTB22673 Reference: http://www.htbridge.ch/advisory/lfiineocms.html Product: eoCMS Vendor: eocms.com http://eocms.com Vulnerable Version: 0.9.04 Vendor Notification: 21 October 2010 Vulnerability Type: Local File Inclusion Status: Not Fixed, Vendor Alerted, Awaiting Vendor...

LFI in eoCMS

Vulnerability ID: HTB22676 Reference: http://www.htbridge.ch/advisory/lfiineocms1.html Product: eoCMS Vendor: eocms.com http://eocms.com Vulnerable Version: 0.9.04 Vendor Notification: 21 October 2010 Vulnerability Type: Local File Inclusion Status: Not Fixed, Vendor Alerted, Awaiting Vendor...

Joomla Component com_pms LFI Vulnerability

Exploit for php platform in category web applications ========================================== Joomla Component compms LFI Vulnerability ========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ ...

Joomla RSSReader Local File Inclusion

========================================================= Joomla Component comrssreader LFI Vulnerability ========================================================= +Title : Joomla Component comrssreader LFI Vulnerability +Software : comrssreader version 1.0 +Vendor : http://www.joomlashop.dk/...

Joomla Component com_uploadmusic LFI Vulnerability

Exploit for php platform in category web applications ================================================== Joomla Component comuploadmusic LFI Vulnerability ================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...

Joomla Xplorer 1.6.2 Remote File Inclusion

========================================================= Joomla Component joomlaXplorer RFI Vulnerability ========================================================= +Title : Joomla Component comjoomlaxplorer RFI Vulnerability +Software : joomlaXplorer 1.6.2 +Vendor : http://joomlacode.org/...

Dolphin 7.0.3 <= (poll) Modules LFI Vulnerability

Exploit for php platform in category web applications ================================================= Dolphin 7.0.3 Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm KnocKout membe...

Dolphin 7.0.3 <= (6) Modules LFI Vulnerabilities

Exploit for php platform in category web applications ================================================ Dolphin 7.0.3 Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm KnocKout member...

TFTgallery <= 0.13.1 Local File Inclusion Vulnerability

Exploit for php platform in category web applications ======================================================= TFTgallery gmailcom registerglobals=On Who said "what a useless vulnerability!" = "includeonce "language/" . $adminlangfile;" @thumbnailformpost.inc.php line 3 for the win ;...

eoCMS <= 0.9.04 LFI Vulnerability

eoCMS is prone to multiple input-validation vulnerabilities, including: - HTML injection - SQL injection - Multiple local file include LFI Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, exploit...

Joomla Projects Local File Inclusion / SQL Injection

========================================================= Joomla Component comprojects LFI & SQL Vulnerability ========================================================= +Title : Joomla Component comcalendrier RFI Vulnerability +Author : josalijoe +Contact : [email protected] +Home :...

Novaboard 1.1.4 - Local File Inclusion

Novaboard 1.1.4 - Local File Inclusion Vulnerability ID: HTB22657 Reference: http://www.htbridge.ch/advisory/lfiinnovaboard.html Product: Novaboard Vendor: Novaboard http://www.novaboard.net/ Vulnerable Version: 1.1.4 and probably prior versions Vendor Notification: 13 October 2010 Vulnerability...

W-Agora 'search.php' LFi and XSS Vulnerabilities

w-Agora is prone to a local file-include LFi vulnerability and a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Joomla Flash Fun Local File Inclusion

========================================================= Joomla Component comjoomlaflashfun LFI Vulnerability ========================================================= +Title : Joomla Component comjoomlaflashfun LFI Vulnerability +Author : josalijoe +Contact : [email protected] +Home :...

Exponent CMS v0.97 Multiple Vulnerabilities

Summary Open Source Content Management System PHP+MySQL. Description Exponent CMS suffers from multiple vulnerabilities: 1. Local File Inclusion / File Disclosure Vulnerability 2. Arbitrary File Upload / File Modify Vulnerability 3. Reflected Cross-Site Scripting Vulnerability 1 LFI/FD occurs whe...

Joomla JStore Local File Inclusion

=========================================================================== Archive : Joomla Component comjstore LFI Vulnerability Author : josalijoe [email protected] Homepage : http://www.indonesiancoder.com Date : 12 Oktober, 2010 Google Dork : inurl:index.php?option="comjstore"...

Exponent CMS 0.97 - Multiple Vulnerabilities

Exponent CMS v0.97 Multiple Vulnerabilities Vendor: OIC Group Inc. Product web page: http://www.exponentcms.org Affected version: 0.97 Summary: Open Source Content Management System PHP+MySQL. Desc: Exponent CMS suffers from multiple vulnerabilities: 1. Local File Inclusion / File Disclosure...

OrangeHRM <= 2.6.1 'uri' Parameter LFI Vulnerability

OrangeHRM is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Joomla Polix Local File Inclusion

=========================================== Joomla Component compollx LFI Vulnerability =========================================== + Author : josalijoe + Homepage : http://josalijoe.org/ & http://indonesiancoder.com/ + Mail : josalijoeatyahoodotcom + Date : oktober 09,2010 + Vendor : N/A + Dork ...

Joomla Community Builder Enhenced Component LFI/RCE Vulnerability

Exploit for php platform in category web applications ======================================================================= Joomla Community Builder Enhenced CBE Component LFI/RCE Vulnerability ======================================================================= Description: Joomla CBE suffe...