Quate CMS 0.3.4 - Multiple Vulnerabilities

Digital Security Research Group DSecRG Advisory DSECRG-08-030 Application: Quate CMS Versions Affected: 0.3.4 Vendor URL: http://www.quate.net/ Bugs: RFI, Multiple LFI, Directory traversal, Multiple XSS Exploits: YES Reported: 18.03.2008 Second report: 25.03.2008 Vendor response: NONE Solution:...

OneCMS 2.5 (install_mod.php) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== OneCMS 2.5 installmod.php Local File Inclusion Vulnerability =============================================================== Digital Security Research Group DSecRG Advisory...

Smeego CMS vulnerability

Smeego CMS Local File Include Exploit by 0in from Dark-Coders Programming & Security Group http://dark-coders.4rh.eu -------------------------------------------------------- Contact: 0indotemailatgmaildotcom -------------------------------------------------------- Greetings to:...

ajaxframe-lfi.txt

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.eu Ajax framework by www.zapatec.com Local File Include Vulnerability Script site: http://www.zapatec.com/ Vuln:...

smeego-lfi.txt

Smeego CMS Local File Include Exploit by 0in from Dark-Coders Programming & Security Group http://dark-coders.4rh.eu File: mainfile.php if $displayerrors == 1 // We don't se any errors ; @iniset'displayerrors', 1; else @iniset'displayerrors', 0; if isset$newlang if...

Digital Hive 2.0 - 'base_include.php' Local File Inclusion

source: https://www.securityfocus.com/bid/29255/info Digital Hive is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to view local files in the context of the...

Forum Rank System 6 - 'settings['locale']' Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/29077/info Forum Rank System is prone to local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to view files local scripts in the conte...

Siteman 2.0.x2 - 'module' Cross-Site Scripting / Local File Inclusion

source: https://www.securityfocus.com/bid/28943/info Siteman is prone to a local file-include vulnerability and a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this as a cross-site scripting issue to execute...

ksemail-lfi.txt

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discoverd by dun \ dunatstrcpy.eu Ksemail Local File Include Vulnerability Script site: http://www.ksemail.com/, http://mail.ksemail.com Vuln:...

Terracotta - index.php Local File Inclusion

Terracotta - index.php Local File Inclusion source: https://www.securityfocus.com/bid/28550/info Terracotta is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to vie...

kisgb-lfi.txt

KISGB Keep It Simple Guest Book : Local FiLe Include's tmptheme Version : All Versions Download : http://sourceforge.net/project/showfiles.php?groupid=38585 ---------------------------------------------------------- Exploit coded and founded by Cr@zyKing Date: 30.03.2008 [email protected]...

jshop-lfi.txt

JShop 1.x-2.x local file include --------------------------------------------------------------------------------------------------------------------- + scripts: Jshop Server 1.x-2.x + + Discovered By : v0l4arrra + + url: www.jshop.co.uk + + dork: "powered by jshop" and also usefull one...

pjirc-lfi.txt

/ PJIRC mod phpBB Local File Include Discrovered by: 0in from DaRk-CodeRs Programming & Security Group! Contact: 0indotemailatgmaildotcom Description: This is a simply irc applet to phpbb. Download: http://www.hotscripts.pl/produkt-1998.html HTTP://Dark-Coders.4rh.eu Greetz to: All DaRk-CodeRs Te...

DSECRG-08-022.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-022 Application: BolinOS Versions Affected: 4.6.1 Vendor URL: http://www.bolinos.com Bugs: Local File Include,Multiple XSS, System information disclosure Exploits: YES Reported: 13.03.2008 Second report: 18.03.2008 Vendor response: none...

BolinOS 4.6.1 (LFI/XSS) Multiple Security Vulnerabilities

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-022 Application: BolinOS Versions Affected: 4.6.1 Vendor URL: http://www.bolinos.com Bugs: Local File Include,Multiple XSS, System information disclosure Exploits: YES Reported: 13.03.2008 Second report:...

PowerBook 1.21 (index.php page) Local File Inclusion Vulnerability

No description provided by source. DSECRG-08-019 Digital Security Research Group DSecRG Advisory Application: PowerBook Versions Affected: 1.21 Vendor URL: http://www.powerscripts.org/ Bug: Local File Include Exploits: YES Reported: 01.02.2008 Vendor Response: none Solution: none Date of Public...

Custom Pages for Joomla! 'cpage' Parameter Local File Include

The version of the Custom Pages component for Joomla! running on the remote host is affected by a local file include vulnerability due to improper sanitization of user-supplied input to the 'cpage' parameter before using it in the custompages.php script to include PHP code. Regardless of the PHP...

PowerPHPBoard 1.00b Multiple Local File Inclusion Vulnerabilities

No description provided by source. DSECRG-08-021 Digital Security Research Group DSecRG Advisory Application: PowerPHPBoard Versions Affected: 1.00b Vendor URL: http://www.powerscripts.org/ Bug: Multiple Local File Include Exploits: YES Reported: 01.02.2008 Vendor Response: none Solution: none Da...

[DSECRG-08-022] Multiple Security Vulnerabilities in Bolinos 4.6.1

Digital Security Research Group DSecRG Advisory DSECRG-08-022 Application: BolinOS Versions Affected: 4.6.1 Vendor URL: http://www.bolinos.com Bugs: Local File Include,Multiple XSS, System information disclosure Exploits: YES Reported: 13.03.2008 Second report: 18.03.2008 Vendor response: none...

BolinOS 4.6.1 (LFI/XSS) Multiple Security Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= BolinOS 4.6.1 LFI/XSS Multiple Security Vulnerabilities ========================================================= Digital Security Research Group DSecRG Advisory DSECRG-08-022...