MySQLDumper 1.24.4 LFI / XSS / CSRF / Code Execution / Traversal

================================================================================================ Vulnerable Software: MySQLDumper Version 1.24.4 Downloaded from: http://sourceforge.net/projects/mysqldumper/files/ MD5 SUM: b62357a0d5bbb43779d16427c30966a1 MySQLDumper1.24.4.zip...

MODx Revolution 2.0.2-pl LFI

Local file include vulnerability in MODx classkey parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

moziloCMS 1.11 LFI

Local file include vulnerability in moziloCMS page parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Hycus CMS 1.0.3 LFI

Local file include vulnerability in Hycus CMS site parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

OpenX 2.6.3 LFI

Local file include vulnerability in OpenX fc.php MAXtype parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

LotusCMS 3.0 LFI

Local file include vulnerability in LotusCMS system parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

CMS Made Simple 1.4.1 LFI

Local file include vulnerability in CMS Made Simple cmslanguage cookie parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

LionWiki 3.0.3 LFI

Local file include vulnerability in LionWiki lang parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

WebCalendar <= 1.2.4 Two Security Vulnerabilities

------------------------------------------------- WebCalendar = 1.2.4 Two Security Vulnerabilities ------------------------------------------------- author..........: Egidio Romano aka EgiX mail............: n0b0d13satgmaildotcom software link...: https://sourceforge.net/projects/webcalendar/ -...

CitrusDB 2.4.1 - LFI/SQLi Vulnerability

CitrusDB 2.4.1 - LFI/SQLi Vulnerability Author: Michal wacky Blaszczak WWW: blaszczakm.blogspot.com CitrusDB is an open source customer service and billing database. It can be used by customer service personnel to provide sales and support to customers, and by billing staff to bill customers for...

phppaleo LFI

LFI Vulnerability in lang paramter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

Joomla Component com_invest LFI Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

WordPress thecartpress plugin LFI Vulnerability

Exploit for php platform in category web applications +----------------------------------------------------------------------+ Exploit Title: wordpress thecartpress plugin local file inclusion LFI Google Dork: inurl:wp-content/plugins/thecartpress/widgets/ Date: 08/04/2012 Author: Tunisian spl01t...

WordPress annonces plugin LFI Vulnerability

Exploit for php platform in category web applications +----------------------------------------------------------------------+ Exploit Title: wordpress annonces plugin local file inclusion LFI Google Dork: inurl:wp-content/plugins/annonces Date: 08/04/2012 Author: Tunisian spl01t3r Greetz: Milw0r...

OpenCart 1.5.2.1 LFI / Shell Upload / Response Splitting

waraxe-2012-SA084 - Multiple Vulnerabilities in OpenCart 1.5.2.1 =============================================================================== Author: Janek Vind "waraxe" Date: 06. April 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-84.html Description of vulnerable software:...

Mantisbt < 1.2.4 LFI

LFI on admin/upgradeunattended.php via dbtype Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

CitrusDB 2.4.1 Local File Inclusion / SQL Injection

CitrusDB 2.4.1 - LFI/SQLi Vulnerability Author: Michal wacky Blaszczak WWW: blaszczakm.blogspot.com CitrusDB is an open source customer service and billing database. It can be used by customer service personnel to provide sales and support to customers, and by billing staff to bill customers for...

PhpGedView 4.2.3 LFI

Local file include vulnerability in PhpGedView pgvaction parameter Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

phpMoneyBooks LFI

LFI in index.php Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

asaanCart - Cross-Site Scripting Local File Inclusion

asaanCart - Cross-Site Scripting Local File Inclusion Exploit Title :asaanCart XSS/LFI Vulnerabilities Google Dork :intext:"smartyajax — AJAX-enabled Smarty plugins"Orinurl:"/smartyajax/" Date :14/03/2012 Author :Number 7 Twitter:@TunisianSeven Blog :http://tunisianseven.blogspot.com/ Tested on...