1232 matches found
axdcms-0.1.1 - Local File Include Vulnerbility
No description provided by source...
Nilson's Blogger 0.11 'comments.php' Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27559/info Nilson's Blogger is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to include...
Forum Rank System 6 - 'settings['locale']' Parameter Multiple Local File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/29077/info Forum Rank System is prone to local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to vie...
fuzzylime (cms) 3.01 'blog.php' Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30121/info 'fuzzylime cms' is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary local script code. This can allo...
phpMyAdmin 2.6 - Multiple Local File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/12645/info phpMyAdmin is affected by multiple local file include vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it in a PHP 'include',...
BanPro DMS 1.0 'index.php' Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27831/info BanPro DMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to include local...
Limbo CMS 1.0.4 .2 index.php _SERVER[REMOTE_ADDR] Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/15871/info Limbo CMS is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out cross-site scripting, SQL injection, and local file include attacks. Limbo CMS versions 1.0.4.2 and...
Simple one-file gallery gallery.php f Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/22700/info Simple one-file gallery is prone to multiple input-validation vulnerabilities, including a local file-include issue and a cross-site scripting issue. An attacker can exploit these issues to steal cookie-based...
CitrusDB 0.3.6 Arbitrary Local PHP File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12564/info CitrusDB is reportedly affected by a vulnerability that permits the inclusion of any local PHP file. This issue is due to the application failing to properly sanitize user-supplied input. This issue is reported...
Dokeos E-Learning System 1.8.5 - Local File Inclusion Vulnerability
No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-029 Application: Dokeos E-Learning System Versions Affected: 1.8.5 Vendor URL: http://dokeos.com/ Bug: Local File Include Exploits: YES Reported: 01.07.2008 Vendor response: 05.07.2008 Solution: YES Date ...
Pithcms 0.9.5 - Local File Include Vulnerability
No description provided by source. Pithcms 0.9.5 Local Include ExploitPithcms 0.9.5 Local Include Exploit Found by sh00t0ut Expl: http://victim/oldnewsreader.php?lang=etc/passwd%00...
Pagesetter 6.2/6.3.0 index.PHP Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22733/info Pagesetter is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts...
phpCOIN 1.2 auxpage.php page Parameter Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/12917/info Multiple remote input validation vulnerabilities affect phpCoin. Multiple SQL injection vulnerabilities have been reported. An attacker may leverage these issues to manipulate and view arbitrary database...
File Hub 1.9.1 iOS - Multiple Vulnerabilities
No description provided by source. Document Title: =============== File Hub v1.9.1 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1195 Release Date: ============= 2014-02-15 Vulnerability Laboratory ID VL-ID:...
LoveCMS 1.4 install/index.php step Parameter Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/22675/info LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue. An attacker ca...
Quick.Cart <= 2.0 (actions_client/gallery.php) Local File Include Exploit
No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...
CuteNews <= 1.4.1 (function.php) Local File Include Exploit
No description provided by source. ?php // Happy NEW Iranian year . // Happy Norouz PERSIAN celebration // CuteNews 1.4.1 CutePHP.com Hash password Finder // by Hamid Ebadi // http://hamid.ir // Bug Discovered and Exploited by Hamid Ebadi .: Hamid Network Security Team :. // run it from your...
Booby 1.0.1 - Multiple Remote File Inclusion Vulnerabilities
No description provided by source. software name: Booby version: 1.0.1 description: A Webbased Personal Information Manager PIM with support for bookmarks, calendar, contacts, notes, news and tasks. download:...
ATutor 1.x forum.inc.php Arbitrary Command Execution
No description provided by source. source: http://www.securityfocus.com/bid/15221/info ATutor is prone to multiple vulnerabilities. These issues can allow remote attackers to execute arbitrary PHP commands and carry out local file include and cross-site scripting attacks. ATutor 1.5.1-pl1 and pri...
FarsiNews 2.1/2.5 show_archives.php template Parameter Traversal Arbitrary File Access
No description provided by source. source: http://www.securityfocus.com/bid/16580/info FarsiNews is prone to directory-traversal and local file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit the...