WP EasyCart Plugin for WordPress < 5.4.3 Local File Inclusions

The WordPress WP EasyCart Plugin installed on the remote host is affected by an flaw which permits authenticated admin users to perform local file inclusion LFI attacks against the host system. Note that the scanner has not tested for these issues but has instead relied only on the application's...

LFiFreak - An automated LFi Exploiter with Bind/Reverse Shells

LFiFreak is a tool for exploiting local file inclusions using PHP Input, PHP Filter and Data URI methods. Features Works with Windows, Linux and OS X Includes bind and reverse shell for both Windows and Linux Written in Python 2.7 Dependencies BeautifulSoup Download LFiFreak...

Bigware Shop 2.3.01 - Multiple Local File Inclusions

Title: Bigware Shop 2.3.01 Multiple Local File Inclusion Vulnerabilities Author: bd0rk eMail: bd0rkathackermail.com Twitter: twitter.com/bd0rk Tested on: Ubuntu-Linux Vendor: http://www.bigware.de Download: http://www.bigware.de/download/bigwaresoftware-vollversion/BigwareShop.zip...

MindTouch DekiWiki - Multiple LocalRemote File Inclusions

MindTouch DekiWiki - Multiple LocalRemote File Inclusions source: https://www.securityfocus.com/bid/54991/info MindTouch DekiWiki is prone to multiple remote and local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues...

RIPS 0.53 - Multiple Local File Inclusions

RIPS 0.53 - Multiple Local File Inclusions RIPS = 0.53 Multiple Local File Inclusion Vulnerabilities Google Dork: allintitle: "RIPS - A static source code analyser for vulnerabilities in PHP scripts" Althout this script is not intended to be accesible from internet, there are some websites that...

RIPS 0.53 - Multiple Local File Inclusions

RIPS = 0.53 Multiple Local File Inclusion Vulnerabilities Google Dork: allintitle: "RIPS - A static source code analyser for vulnerabilities in PHP scripts" Althout this script is not intended to be accesible from internet, there are some websites that host it. Download:...

Alsbtain Bulletin 1.51.6 - Multiple Local File Inclusions

Alsbtain Bulletin 1.51.6 - Multiple Local File Inclusions source: https://www.securityfocus.com/bid/50350/info Alsbtain Bulletin is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain...

Alsbtain Bulletin 1.5/1.6 - Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/50350/info Alsbtain Bulletin is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary...

awiki 20100125 - Multiple Local File Inclusions

awiki 20100125 - Multiple Local File Inclusions source: https://www.securityfocus.com/bid/49187/info awiki is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive...

awiki 20100125 - Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/49187/info awiki is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts ...

SyCtel Design - menu Multiple Local File Inclusions

SyCtel Design - menu Multiple Local File Inclusions source: https://www.securityfocus.com/bid/47526/info SyCtel Design is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain...

SyCtel Design - &#039;menu&#039; Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/47526/info SyCtel Design is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute arbitrary loc...

OpenCart 1.4.9 - Multiple Local File Inclusions

OpenCart 1.4.9 - Multiple Local File Inclusions Title : OpenCart 1.4.9 LFI Multiple Vulnerability Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Multi LFI Tested on : Windows XP sp3 FR Not...

OpenCart 1.4.9 - Multiple Local File Inclusions

Title : OpenCart 1.4.9 LFI Multiple Vulnerability Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Multi LFI Tested on : Windows XP sp3 FR Note : BAC 2011 Enchallah Me & BadR0 & Dr.Ride &...

osCSS 2.1 - Multiple Cross-Site Scripting Local File Inclusions

osCSS 2.1 - Multiple Cross-Site Scripting Local File Inclusions source: https://www.securityfocus.com/bid/47074/info osCSS is prone to a cross-site scripting vulnerability and multiple local file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied data. An...

LoveCMS 1.6.2 Final - Multiple Local File Inclusions

LoveCMS 1.6.2 Final - Multiple Local File Inclusions LoveCMS 1.6.2 Final Multiple Local File Inclusion Vulnerabilities found by cOndemned vendor: http://lovecms.org/ download: http://sourceforge.net/project/showfiles.php?groupid=168535 source of /system/admin/modules.php 13. ifisset$GET'install'...

Collaborative Passwords Manager 1.07 - Multiple Local File Inclusions

Collaborative Passwords Manager 1.07 - Multiple Local File Inclusions Collaborative Passwords Manager 1.07 Multiple Local Include Exploit Found by sh00t0ut Expl: Vendor: http://code.google.com/p/cpassman/downloads/list http://victim/?SESSIONuserlanguage=etc/passwd%00...

Collaborative Passwords Manager 1.07 - Multiple Local File Inclusions

Collaborative Passwords Manager 1.07 Multiple Local Include Exploit Found by sh00t0ut Expl: Vendor: http://code.google.com/p/cpassman/downloads/list http://victim/?SESSIONuserlanguage=etc/passwd%00 http://victim/sources/admin.queries.php?SESSIONuserlanguage=etc/passwd%00...

OvBB 0.16a - Multiple Local File Inclusions

OvBB v0.16a Multiple Local File Inclusion Vulnerabilities Found by cOndemned Tested on Linux Debian apache + php5 + mysql download at http://sourceforge.net/projects/ovbb/ source of /skins/default/addevent.tpl.php 1. ?php 2. // Header. 3. $strPageTitle = " :: Calendar :. New$strType Event"; 4...

AneCMS 1.0 - Multiple Local File Inclusions

AneCMS 1.0 - Multiple Local File Inclusions source: https://www.securityfocus.com/bid/39416/info AneCMS is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive...