Urban City - download.php Local File Inclusion (LFI)

The urbancity WordPress theme was affected by a download.php Local File Inclusion LFI security vulnerability...

OPS Old Post Spinner 2.2.1 - LFI

The OPS Old Post Spinner WordPress plugin was affected by a LFI security vulnerability...

FuckShitUp - Multi Vulnerabilities Scanner written in PHP

Basically, FSU is bunch of tools written in PHP-CLI. Using build-in functions, you are able to grab url's using search engines - and so, dork for interesting files and full path disclosures. Using list of url's, scanner will look for Cross Site Scripting, Remote File Inclusion, SQL Injection and...

WP Custom Pages 0.5.0.1 - LFI

The wp-custom-pages WordPress plugin was affected by a LFI security vulnerability...

Aerohive HiveOS 5.1r5 - 6.1r5 - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Aerohive HiveOS XSS and limited LFI Date: 11-07-2014 Exploit Author: Rik van Duijn - DearBytes dearbytes.com Vendor Homepage: http://www.aerohive.com/products/overview.html Version: 5.1r5 - 6.1r5 possibly earlier versions...

Netsparker v3.5 - Web Application Security Scanner

Netsparker Web Application Security Scanner can find and report web application vulnerabilities such as SQL Injection and Cross-site Scripting XSS and security issues on all web applications and websites regardless of the platform and the technology they are built on. Netsparker is very easy to u...

Aerohive HiveOS 5.1r5 6.1r5 - Multiple Vulnerabilities

Aerohive HiveOS 5.1r5 6.1r5 - Multiple Vulnerabilities Exploit Title: Aerohive HiveOS XSS and limited LFI Date: 11-07-2014 Exploit Author: Rik van Duijn - DearBytes dearbytes.com Vendor Homepage: http://www.aerohive.com/products/overview.html Version: 5.1r5 - 6.1r5 possibly earlier versions...

Aerohive HiveOS 5.1r5 < 6.1r5 - Multiple Vulnerabilities

Exploit Title: Aerohive HiveOS XSS and limited LFI Date: 11-07-2014 Exploit Author: Rik van Duijn - DearBytes dearbytes.com Vendor Homepage: http://www.aerohive.com/products/overview.html Version: 5.1r5 - 6.1r5 possibly earlier versions Description ================ Aerohive version 5.1r5 through...

Joomla Component Preventive And Reservation LFI Vulnerability

No description provided by source...

Joomla JE Auto Component (com_jeauto) LFI Vulnerability

Joomla JE Auto Component 支持Joomla1.5 Joomla1.6版本，view参数没做好处理，造成了包含漏洞，但是受到php版本的限制，php版本5.3.4以下。 1.漏洞分析 下载不到源码，推测漏洞的成因 php $view = $GET'view'; 然后不经过处理 直接包含了文件 include$view."inc.php"; 这种需要截断才能利用的LFI受到了php版本限制，在PHP 5.3.4以上中已经修复了%00截断的漏洞。 2.漏洞利用 http://host/jeauto/index.php?option=comjeauto&view=LFI%...

Joomla Component com_ckforms Multiple Vulnerabilities

No description provided by source. Author : altbta [email protected]:[email protected] Home : www.v4-team.com/cchttp://www.v4-team.com/cc Script : Joomla Component comckforms Bug Type : Multiple Vulnerabilities Dork : inurl:comckforms === Exploit === LFI...

PHPDirector Game Edition 0.1 - Multiple Vulnerabilities (LFI/SQLi/Xss)

No description provided by source. Exploit Title: PHPDirector Game Edition Multiple Vulnerabilities LFI/SQLi/Xss Date: 2010-01-05 Author: Zer0 Thunder Site : http://www.play-online.bzh.be/forum/ Version: v0.1 Tested on: Windows XP sp2 WampServer 2.0i / LinuxBox Ubuntu Server 9.10 CVE : Code : Loc...

openEngine 2.0 100226 LFI and XSS Vulnerabilities

No description provided by source. SecPod Technologies www.secpod.com Title : openEngine Local File Inclusion and XSS Vulnerabilities Vendor : http://www.openengine.de Advisory : http://secpod.org/blog/?p=152 http://secpod.org/advisories/SECPODOpenengineLFIXSSVuln.txt Version : openEngine 2.0...

ZeusCMS 0.2 - (DBD/LFI) Multiple Vulnerabilities

No description provided by source...

SourceBans <= 1.4.8 SQL/LFI Injection

No description provided by source...

Joomla Magic Updater (com_joomlaupdater) LFI Vulnerability

No description provided by source. ================================================================================================ Title : Joomla Magic Updater comjoomlaupdater LFI Vulnerability Date : Monday, 05 April 2010 Indonesia Author : Vrs-hCk Contact : anderatantisecurity.org Blog :...

syndeo cms 2.6.0 (lfi/xss) Multiple Vulnerabilities

No description provided by source. =========================================================== SyndeoCMS 2.6.0 LFI/XSS Multiple Remote Vulnerabilities =========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...

ProfitCode Shopping Cart Multiple LFI/RFI Vulnerabilities

No description provided by source. Author: Zer0 Thunder Site : http://www.profitcode.net/ - http://profbiz-cart.sourceforge.net/ Tested on: Windows XP sp2 WampServer 2.0i - There are Cople of pages that has the LFI vuln Vuln c0de : dl-authcontent.php $returlvar = dloads; include $docroot...

shopmaker cms 2.0 (bsql/ lfi) Multiple Vulnerabilities

No description provided by source. Shopmaker CMS bSQL/LFI Multiple Remote Vulnerabilities ============================================================================== Software : Shopmaker Asp version : version 2.0 Vendor : http://www.shopmaker.dk/ Author : Platen mail: platen.secureatgmail.com...

tsep <= 0.942.02 Multiple Vulnerabilities

No description provided by source. TSEP =0.942.02 Vulnerabilities http://tsep.sourceforge.net Dork: powered by TSEP - The Search Engine Project ceLwaux 30.06.2009, uasc.org.ua Blind SQL-Inj /admin/rankform.php ----------------------------------------------------------------------------- 23: //...