Zen Cart 1.3.9f - 'typefilter' Local File Inclusion

Zen Cart v1.3.9f typefilter Local File Inclusion Vulnerability Vendor: Zen Ventures, LLC Product web page: http://www.zen-cart.com Version affected: 1.3.9f Summary: Zen Cart is an online store management system. It is PHP-based, using a MySQL database and HTML components. Support is provided for...

Zen Cart 1.3.9f - typefilter Local File Inclusion

Zen Cart 1.3.9f - typefilter Local File Inclusion Zen Cart v1.3.9f typefilter Local File Inclusion Vulnerability Vendor: Zen Ventures, LLC Product web page: http://www.zen-cart.com Version affected: 1.3.9f Summary: Zen Cart is an online store management system. It is PHP-based, using a MySQL...

Joomla Component com_ticket LFI vulnerability

Exploit for php platform in category web applications ============================================= Joomla Component comticket LFI vulnerability ============================================= Exploit Title : Joomla Component comticket LFI vulnerability Author : S4n470n Contact : email protected ,...

Joomla Restaurant Guide Cross Site Scripting / Local File Inclusion / SQL Injection

Exploit Title: Joomla Component comrestaurantguide Multiple Vulnerabilities Date: 18.09.2010 Author: Valentin Category: webapps/0day Version: 1.0.0 Tested on: Debian lenny, Apache2, MySQL 5, Joomla 1.5.x CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::...

CMScout IBrowser TinyMCE Plugin LFI Vulnerability - Active Check

CMScout is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Month Of Abysssec Undisclosed Bugs - FestOS CMS 2.3b

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | query$query; poc: in admin.php page: username: admin' or '1'='1 password: admin' or '1'='1 1.2- in festoszdologin.php: $query = "SELECT vendorID FROM ".$config'dbprefix'."vendors WHERE LCASEemail =...

Joomla! Component Jphone 1.0 Alpha 3 - Local File Inclusion

JPhone 1.0 Alpha 3 Component Joomla Local File Inclusion ========================================================================================= - Discovered by : Chip D3 Bi0s - Email : chipdebiosatgmaildotcom - Group : LatinHackTeam - Date : 2010-09-10 - Where : From Remote...

Joomla Component (com_jphone) Local File Inclusion Vulnerability

Exploit for php platform in category web applications ================================================================ Joomla Component comjphone Local File Inclusion Vulnerability ================================================================ - Discovered by : Chip D3 Bi0s - Email :...

ES Simple Download v 1.0. Local File Inclusion Vulnerability

Exploit for php platform in category web applications ============================================================ ES Simple Download v 1.0. Local File Inclusion Vulnerability ============================================================...

phpcrs <= 3.Za / Local File Inclusion Vulnerability

Exploit for php platform in category web applications =================================================== phpcrs Software Link: http://sourceforge.net/projects/phpcrs/ Version: eNYe-Sec - www.enye-sec.org --Bug -- 123. elseif isset$POST'btnStartImport' 124...

SyndeoCMS <= 2.8.02 Multiple Vulnerabilities

SyndeoCMS is prone to a local file include LFI, a cross-site scripting XSS and an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and...

Month Of Abysssec Undisclosed Bugs - Syndeo CMS 2.8.02

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | FCKEditor Plain text Editor . . . input type="radio" name="macces...

syndeocms 2.8.02 Multiple Vulnerabilities

Exploit for php platform in category web applications ========================================= syndeocms 2.8.02 Multiple Vulnerabilities ========================================= Title : syndeocms 2.8.02 Multiple Vulnerabilities Affected Version : syndeocms FCKEditor Plain text Editor...

SyndeoCMS 2.8.02 - Multiple Vulnerabilities (1)

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | FCKEditor Plain text Editor . . . . . . input type="radio"...

SyndeoCMS 2.8.02 - Multiple Vulnerabilities (1)

SyndeoCMS 2.8.02 - Multiple Vulnerabilities 1 ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | FCKEditor Plain text Editor . . . input type="ra...

Visinia 1.3 Multiple Vulnerabilities

Exploit for asp platform in category web applications ==================================== Visinia 1.3 Multiple Vulnerabilities ==================================== Title : Visinia Multiple Vulnerabilities Affected Version : Visinia 1.3 Discovery : www.abysssec.com Vendor : http://www.visinia.com...

visinia 1.3 - Multiple Vulnerabilities

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | |...

visinia 1.3 - Multiple Vulnerabilities

visinia 1.3 - Multiple Vulnerabilities ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 3 0day | | | | || / \ || | | | || ||// \/|/ ''' Abysssec Inc Public Advisory Title : Visinia Multiple Vulnerabilities Affected Version : Visinia 1.3 Discovery :...

Month Of Abysssec Undisclosed Bugs - Visinia 1.3 XSRF / LFI

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Wellcome to My Site!...

Gawker Local File Inclusion

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Thought I'd share this...found an LFI on gawker which is on the same server as Kotaku and other sites part of their 'network' http://kotaku.com/assets/minify.php?fsid=dfdsf&type=sads&sb=../../.. /../../../../../../../etc/passwd%00 ^ works for gawker a...