AJA Portal 1.2 - Local File Inclusion Vulnerabilities (win)

No description provided by source. -------------:multi local file include:------------ --------------- script:AJA 1.2 ------------------------------------------------------------------ download from:http://www.magtrb.com/en/modules.php?name=Downloads&op=getit&lid=6...

Joomla JE Auto Component (com_jeauto) LFI Vulnerability

Joomla JE Auto Component 支持Joomla1.5 Joomla1.6版本，view参数没做好处理，造成了包含漏洞，但是受到php版本的限制，php版本5.3.4以下。 1.漏洞分析 下载不到源码，推测漏洞的成因 php $view = $GET'view'; 然后不经过处理 直接包含了文件 include$view."inc.php"; 这种需要截断才能利用的LFI受到了php版本限制，在PHP 5.3.4以上中已经修复了%00截断的漏洞。 2.漏洞利用 http://host/jeauto/index.php?option=comjeauto&view=LFI%...

Joomla Component com_g2bridge LFI vulnerability

No description provided by source...

Joomla Component Preventive And Reservation LFI Vulnerability

No description provided by source...

PHPDirector Game Edition 0.1 - Multiple Vulnerabilities (LFI/SQLi/Xss)

No description provided by source. Exploit Title: PHPDirector Game Edition Multiple Vulnerabilities LFI/SQLi/Xss Date: 2010-01-05 Author: Zer0 Thunder Site : http://www.play-online.bzh.be/forum/ Version: v0.1 Tested on: Windows XP sp2 WampServer 2.0i / LinuxBox Ubuntu Server 9.10 CVE : Code : Loc...

w3blabor CMS 3.0.5 - Arbitrary File Upload & LFI Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwPOST; use Getopt::Long; '/ -.- ------------------oOO------OOo----------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Research...

NIBE heat pump LFI exploit

No description provided by source. !/usr/bin/python import socket,sys,os,base64 NIBE heat pump LFI exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Special thanks to Fredrik Nordberg Almroth and Mathias Karlsson for obtaining this information http://h.ackack.net/?p=274 whi...

AneCMS v.2e2c583 LFI exploit

No description provided by source. Exploit Title: AneCMS v.2e2c583 LFI exploit Date: 03.04.2012 Author: I2sec-PJH Software Link: https://github.com/AneGroup/AneCMS Version: v.2e2c583 ----------------------------------------------------- -Description vulnerabilities have been discovered in the ind...

gl-sh deaf forum <= 6.5.5 - Multiple Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: GL-SH Deaf Forum =6.5.5 Multiple Vulnerabilities Vendor: www.frank-karau.de Vulnerable Version: 6.5.5 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/46 1...

Factux LFI Vulnerability

No description provided by source. InformatioN Title : Factux LFI Vulnerability Author: altbta l9athotmail.com download : http://www.toocharger.com/telecharger/scripts/factux/3468.htm ExploiT dork: Factux le facturier libre V 1.1.5 includeonceinclude/language/$lang.php; Vulnerable File :...

siteman 2.x (exec/lfi/xss) Multiple Vulnerabilities

No description provided by source. Siteman 2.X 0Day Multiple Remote Vulnerabilities CODE EXECUTION/LFI/XSS AUTHOR : IRCRASH Dr.Crash Or Khashayar Fereidani Discovered by : IRCRASH Dr.Crash Or Khashayar Fereidani IRCRASH Team Members : Dr.Crash Or Khashayar Fereidani - Hadi Kiamarsi - Malc0de -...

Joomla Component JA Job Board Multiple LFI Vulnerability

No description provided by source. ======================================================================================================================= o Joomla Component JA Job Board Multiple Local File Inclusion Vulnerability Software : comjajobboard version 1.4.4 Vendor :...

ideacart 0.02 (lfi/sql) Multiple Vulnerabilities

No description provided by source. IdeaCart 0.02 LFI/SQL Multiple Remote Vulnerabilities Author: nuclear LFI: http://127.0.0.1/index.php?page=../../../../../../../../../etc/passwd%00 SQL: http://127.0.0.1/secure/index.php?cID=1%20union%20select%201,2,3,4,5,6,@@version,8%23 notes: get ur sql resul...

Joomla Captcha Plugin <= 4.5.1 - Local File Disclosure Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ posdubatgmail.com Joomla Captcha Plugin = 4.5.1 Local File Disclosure Vulnerability Script: Joomla Captcha plugin an...

dew-newphplinks 2.0 (lfi/xss) Multiple Vulnerabilities

No description provided by source. ------------------------------------------------------------------------------------------------ DEW-NEWphpLinks 2.0 LFI/XSS Multiple Remote Vulnerabilities http://www.dew-code.com...

Joomla Component com_jmsfileseller Local File Inclusion Vulnerability

No description provided by source. Exploit Title: Joomla Component comjmsfileseller Local File Inclusion Vulnerability Date: 28.05.2011 Author: Valentin Category: webapps/0day Version: 1.0 Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 ::::::::::::::::::::::::::::::::::::::...

PTCeffect 4.6 - LFI & SQL Injection Vulnerabilities

No description provided by source. Exploit Title: PTCeffect LFI & SQL Injection Vulnerabilities Google Dork: find it : Date: 2014-04-19 Exploit Author: Walidz Software Link: http://www.ptceffect.com/ Version: 4.6 Tested on: windows,linux,mac os CVE : N/A The LFI vulnerability is in index.php...

Phoenix View CMS <= Pre Alpha2 (SQL/LFI/XSS) Multiple Vulnerabilities

No description provided by source. Phoenix View CMS = Pre Alpha2 Multiple Vulnerabilities LFISQLIXSS Found by : tw8 Date : 8.05.2008 Website && Forum : http://rstzone.org && http://rstzone.org/forum/ Bug type : LFI, SQLI & XSS Affected software description: Application : Phoenix View CMS Version ...

pastelcms 0.8.0 (lfi/sql) Multiple Vulnerabilities

No description provided by source. + PastelCMS 0.8.0 LFI/SQL Multiple Remote Vulnerabilities + Discovered By SirGod + www.mortal-team.net + www.h4cky0u.org + Download : http://pastel.pri.ee/?id=58 + Local File Inclusion PoC : http://127.0.0.1/path/?setlng=../../../../../../BOOTSECT.BAK%00 + SQL...

myUPB <= 2.2.6 - Multiple Vulnerabilities

No description provided by source. =============== altbta ====================== Name: myUPB = v2.2.6 Multiple Vulnerabilities Download: http://sourceforge.net/projects/textmb/files/UPB/ Vulnerability: CSRF privilege escalation Tested on: 2.2.6 Author : altbta [email protected] Dork: Powered by myUP...