LoveCMS <= 1.6.2 Multiple LFI Vulnerabilities - Active Check

LoveCMS is prone to multiple local file include LFI vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

LFI in LightNEasy

Vulnerability ID: HTB22752 Reference: http://www.htbridge.ch/advisory/lfiinlightneasy.html Product: LightNEasy Vendor: Fernando Baptista http://www.lightneasy.org/ Vulnerable Version: 3.2.2 Vendor Notification: 15 December 2010 Vulnerability Type: LFI Status: Not Fixed, Vendor Alerted, Awaiting...

Fedora 13 : mantis-1.1.8-5.fc13 (2010-19070)

This update fixes multiple security issues recently found in Mantis. For more details about the issues in upstream bugs : http://www.mantisbt.org/bugs/view.php?id=12607 http://www.mantisbt.org/bugs/view.php?id=12309 Note that Tenable Network Security has extracted the preceding description block...

LightNEasy 3.2.2 Local File Inclusion / Disclosure / SQL Injection

==================================== Vulnerability ID: HTB22750 Reference: http://www.htbridge.ch/advisory/sqlinjectioninlightneasy.html Product: LightNEasy Vendor: Fernando Baptista http://www.lightneasy.org/ Vulnerable Version: 3.2.2 Vendor Notification: 15 December 2010 Vulnerability Type: SQL...

Ignition 1.3 (page.php) Local File Inclusion Vulnerability

Exploit for php platform in category web applications Ignition 1.3 page Local File Inclusion Vulnerability disclosed by cOndemned download: http://launchpad.net/ignition/trunk/1.3/+download/ignition-1.3.tar.gz note: 1. Magicquotesgpc should be turned off in order to exploit this vulnerability 2...

Ignition 1.3 Local File Inclusion

Ignition 1.3 page Local File Inclusion Vulnerability disclosed by cOndemned download: http://launchpad.net/ignition/trunk/1.3/+download/ignition-1.3.tar.gz note: 1. Magicquotesgpc should be turned off in order to exploit this vulnerability 2. LFI bugs found by me in previous version 1.2 are still...

LightNEasy 3.2.2 - Multiple Vulnerabilities

LightNEasy 3.2.2 - Multiple Vulnerabilities Vulnerability ID: HTB22750 Reference: http://www.htbridge.ch/advisory/sqlinjectioninlightneasy.html Product: LightNEasy Vendor: Fernando Baptista http://www.lightneasy.org/ Vulnerable Version: 3.2.2 Vendor Notification: 15 December 2010 Vulnerability...

iDevSpot iDevCart 1.10 - Multiple Local File Inclusions

iDevSpot iDevCart 1.10 - Multiple Local File Inclusions / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

Joomla XMovie 1.0 Local File Inclusion

Exploit Title: Joomla Component comxmovie 1.0 Local File Inclusion Vulnerability Author: KelvinX [email protected] Websites: http://xgroup.vn, http://kelvinx.net, http://facebook.com/kelvinxgr Date: December, 24-2010 Location: HCM City, Vietnam ------------------------ Application: comxmovie...

Hycus CMS Multiple Vulnerabilities

Exploit for php platform in category web applications Vulnerability ID: HTB22737 Reference: http://www.htbridge.ch/advisory/lfiinhycuscms.html Product: Hycus CMS Vendor: Hycus Web Development Team http://www.hycus.com/ Vulnerable Version: 1.0.3 Vendor Notification: 07 December 2010 Vulnerability...

Joomla Component Jotloader 2.2.1 (com_jotloader) LFI Vulnerability

Exploit for php platform in category web applications Author : v3n0m v3n0m666atlivedotcom Site : http://yogyacarderlink.web.id/ Date : December, 20-2010 Location : Jakarta, Indonesia Time Zone : GMT +7:00 Application : JotLoader License : GPLv2 Version : 2.2.1 Other versions may also be affected...

LFI in Hycus CMS

Vulnerability ID: HTB22737 Reference: http://www.htbridge.ch/advisory/lfiinhycuscms.html Product: Hycus CMS Vendor: Hycus Web Development Team http://www.hycus.com/ Vulnerable Version: 1.0.3 Vendor Notification: 07 December 2010 Vulnerability Type: LFI Status: Not Fixed, Vendor Alerted, Awaiting...

Hycus CMS - Multiple Vulnerabilities

Hycus CMS - Multiple Vulnerabilities Vulnerability ID: HTB22737 Reference: http://www.htbridge.ch/advisory/lfiinhycuscms.html Product: Hycus CMS Vendor: Hycus Web Development Team http://www.hycus.com/ Vulnerable Version: 1.0.3 Vendor Notification: 07 December 2010 Vulnerability Type: LFI Status:...

MaticMarket 2.02 for PHP Nuke LFI Vulnerability

Exploit for php platform in category web applications MaticMarket 2.02 for PHP Nuke LFI Vulnerability Url: http://sourceforge.net/projects/maticmarket Author: xer0x Expl: http://localhost/modules/maticmarket/deco/blanc/haut.php?modulename=../../../../../../../../../../../../../../etc/passwd%00...

Hycus CMS 1.0.3 Local File Inclusion

Vulnerability ID: HTB22737 Reference: http://www.htbridge.ch/advisory/lfiinhycuscms.html Product: Hycus CMS Vendor: Hycus Web Development Team http://www.hycus.com/ Vulnerable Version: 1.0.3 Vendor Notification: 07 December 2010 Vulnerability Type: LFI Status: Not Fixed, Vendor Alerted, Awaiting...

Hycus CMS - Multiple Vulnerabilities

Vulnerability ID: HTB22737 Reference: http://www.htbridge.ch/advisory/lfiinhycuscms.html Product: Hycus CMS Vendor: Hycus Web Development Team http://www.hycus.com/ Vulnerable Version: 1.0.3 Vendor Notification: 07 December 2010 Vulnerability Type: LFI Status: Not Fixed, Vendor Alerted, Awaiting...

Joomla JE Auto Component (com_jeauto) LFI Vulnerability

Exploit for php platform in category web applications Name : Joomla comjeauto LFI Vulnerability Date : Dec,7 2010 Vendor Url :http://joomlaextensions.co.in/jeauto Dork:inurl:comjeauto Author : Sid3^effects aKa HaRi Big hugs : Th3 RDX,Hananbutt, special thanks to : r0073r inj3ct0r.com,L0rd...

MaticMarket 2.02 Local File Inclusion

MaticMarket 2.02 for PHP Nuke LFI Vulnerability Url: http://sourceforge.net/projects/maticmarket Author: xer0x Expl: http://localhost/modules/maticmarket/deco/blanc/haut.php?modulename=../../../../../../../../../../../../../../etc/passwd%00...

PHP-Nuke MaticMarket 2.02 - Local File Inclusion

PHP-Nuke MaticMarket 2.02 - Local File Inclusion MaticMarket 2.02 for PHP Nuke LFI Vulnerability Url: http://sourceforge.net/projects/maticmarket Author: xer0x Expl: http://localhost/modules/maticmarket/deco/blanc/haut.php?modulename=../../../../../../../../../../../../../../etc/passwd%00...

Joomla JE Auto Local File Inclusion

Name : Joomla comjeauto LFI Vulnerability Date : Dec,7 2010 Vendor Url :http://joomlaextensions.co.in/jeauto Dork:inurl:comjeauto Author : Sid3^effects aKa HaRi Big hugs : Th3 RDX,Hananbutt, special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,SeeMe,MaYur,MA1201,KeDar,Sonic,gunslinger,Sn!pEr.S!...