MixedCMS 1.0b (LFI/SU/AB/FD) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ MixedCMS 1.0b LFI/SU/AB/FD Multiple Remote Vulnerabilities ============================================================...

PastelCMS 0.8.0 (LFI/SQL) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= PastelCMS 0.8.0 LFI/SQL Multiple Remote Vulnerabilities ========================================================= + PastelCMS 0.8.0 LFI/SQL Multiple Remote Vulnerabilities +...

FunGamez LFI / SQL Injection

---------------------------------------------------------------------- MULTIPLE REMOTE VULNERABILITIES FunGamez-release candidate 1 ---------------------------------------------------------------------- CMS INFORMATION: --WEB: http://sourceforge.net/projects/fg-gsm/ --DOWNLOAD:...

Multiple Remote Vulnerabilities--SQLi-(INSECURE-COOKIE-HANDLING)-LFI-->

---------------------------------------------------------------------- MULTIPLE REMOTE VULNERABILITIES FunGamez-release candidate 1 ---------------------------------------------------------------------- CMS INFORMATION: --WEB: http://sourceforge.net/projects/fg-gsm/ --DOWNLOAD:...

Job2C 4.2 (adtype) Local File Inclusion Vulnerability

No description provided by source. Job2C version 4.2 adtype MulTiple LFi Script: http://www.w2b.ru/download/Job2C.zip ---------------------------------------------------------- Discovered By: ZoRLu Date: 15.04.2009 Home: yildirimordulari.com / dafgamers.com / z0rlu.blogspot.com contact:...

Redaxscript <= 0.2.0 'language' Parameter LFI Vulnerability

Redaxscript is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

moziloCMS 1.11 - Local File Inclusion Full Path Disclosure Cross-Site Scripting

moziloCMS 1.11 - Local File Inclusion Full Path Disclosure Cross-Site Scripting + moziloCMS 1.11 LFI/PD/XSS Multiple Remote Vulnerabilites + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Local File Inclusion PoC 1 :...

iDB 0.2.5pa SVN 243 - 'skin' Local File Inclusion

!/usr/bin/env LOTFREE 2009 - lotfree.next-touch.com Local require vulnerability in iDB a PHP/MySQL BBS Test on version 0.2.5 Pre-Alpha SVN 243 released March 30, 2009 No checks are made on var "skin" in inc/profilemain.php before saving it to database this value is then required in mysql.php as...

webEdition CMS <= 6.0.0.4 LFI Vulnerability - Active Check

webEdition CMS is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

My Simple Forum 7.1 - Remote Command Execution

!/usr/bin/perl My Simple Forum v7.1 Remote Command Execution Exploit Apache Log Poisoning/Injection Local File Inclusion at /theme/default/index.template.php?action=lf%00 XSS at /theme/default/index.template.php?Name=XSS - This needs Register Globals ON Credits to Giovanni Buzzin, "Osirys"...

My Simple Forum 7.1 (LFI) Remote Command Execution Exploit

Exploit for unknown platform in category web applications ========================================================== My Simple Forum 7.1 LFI Remote Command Execution Exploit ========================================================== !/usr/bin/perl My Simple Forum v7.1 Remote Command Execution...

My Simple Forum 7.1 Command Execution

!/usr/bin/perl My Simple Forum v7.1 Remote Command Execution Exploit Apache Log Poisoning/Injection Local File Inclusion at /theme/default/index.template.php?action=lf%00 XSS at /theme/default/index.template.php?Name=XSS - This needs Register Globals ON Credits to Giovanni Buzzin, "Osirys"...

Jinzora Media Jukebox 2.8 Local File Inclusion

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Jinzora Media Jukebox = 2.8 Local File Inclusion Vulnerability Script site: http://jinzora.com/ ,...

SurfMyTV Script 1.0 SQL Injection

0x01 Informations: Name : Media Entertainment Script 1.0 Download : http://www.hotscripts.com/listings/jump/download/89424/ Vulnerability : Sql Injection To Lfi Author : x0r Contact : [email protected] Notes : Proud To Be Italian Greetz : // 0x02 Bug: Bugged file is /path/view.php code $id =...

SurfMyTV Script 1.0 (view.php id) SQL Injection Vulnerability

No description provided by source. 0x01 Informations: Name : Media Entertainment Script 1.0 Download : http://www.hotscripts.com/listings/jump/download/89424/ Vulnerability : Sql Injection To Lfi Author : x0r Contact : [email protected] Notes : Proud To Be Italian Greetz : // 0x02 Bug: Bugged...

PHPizabi v0.848b C1 HFP1-3 Remote Command Execution Exploit

No description provided by source. !/usr/bin/php ?php / Found this after getting my inet back and noticing this http://www.milw0rm.com/exploits/6085 . The only problem with the remote command execution there is that it actually requires registerglobals = on. I saw the GLOBAL keyword, and actually...

Syzygy CMS 0.3 LFI/SQL Command Injection Exploit

No description provided by source. !/usr/bin/perl Web App : Syzygy CMS 0.3 Link : http://sourceforge.net/project/downloading.php?groupid=103298&usemirror=heanet&filename=syzygycms-0.3.tar.gz&a=89932245 Remote Command Execution Exploit : Case 1: If LFI works, exploitation via Shell Injection + LFI...

Jinzora Media Jukebox 2.8 - name Local File Inclusion

Jinzora Media Jukebox 2.8 - name Local File Inclusion :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Jinzora Media Jukebox = 2.8 Local File Inclusion Vulnerability Script site:...

Syzygy CMS 0.3 LFI / SQL Injection

!/usr/bin/perl Web App : Syzygy CMS 0.3 Link : http://sourceforge.net/project/downloading.php?groupid=103298&usemirror=heanet&filename=syzygycms-0.3.tar.gz&a=89932245 Remote Command Execution Exploit : Case 1: If LFI works, exploitation via Shell Injection + LFI Case 2: Unless, exploitation via S...

SurfMyTV Script 1.0 (view.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= SurfMyTV Script 1.0 view.php id SQL Injection Vulnerability ============================================================= 0x01 Informations: Name : Media Entertainment Script 1....