1232 matches found
SchoolAlumni Portal 2.26 - mod.php?mod Traversal Local File Inclusion
SchoolAlumni Portal 2.26 - mod.php?mod Traversal Local File Inclusion source: https://www.securityfocus.com/bid/20673/info SchoolAlumni portal is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include a...
Power Phlogger 2.0.9 Remote|Local File Include Vulnerability
Power Phlogger 2.0.9 - Class: Remote|Local File Include Vulnerability Remote: Yes Local: No Type: High Site: http://www.comscripts.com/scripts/php.power-phlogger.211.html Author: xw0x Contact: [email protected] Vuln Code config.inc.php3: ?php include $relpath."functions.php3";//nothing here ?...
Lou Portail 1.4.1 Remote|Local File Include Vulnerability
Lou Portail 1.4.1 Class: Remote|Local File Include Vulnerability Patch: Unavailable Published 2006/10/18 Remote: Yes Local: No Type: High Site: http://louportail.free.fr/ Author: MP Contact: [email protected] Vuln Code admin/adminmodule.php: ?... include "$gadminrep/adminutils.$gext"; ...? Vuln 1...
phpMyAgenda <= 3.1 (templates/header.php3) Local File Include Exploit
No description provided by source. !/usr/bin/perl use IO::Socket; use LWP::Simple; print "\n"; print "\n"; print " \n"; print " phpMyAgenda 3.1 Multiple Remote Vulnerabilities Exploit \n"; print " Bug found By : Ashiyane Corporation \n"; print " Email: Nima Salehi nimaatashiyane.ir \n"; print " W...
phpMyAgenda <= 3.1 (templates/header.php3) Local File Include Exploit
Exploit for unknown platform in category web applications ===================================================================== phpMyAgenda "; $socket = IO::Socket::INET-newProto="tcp", PeerAddr="$host", PeerPort="80" or die " Could not connect to host.\n\n"; print $socket "GET ".$path.$CODE."...
PHProg 1.0 - index.php?album Cross-Site Scripting
PHProg 1.0 - index.php?album Cross-Site Scripting source: https://www.securityfocus.com/bid/19957/info PHProg is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site scripting and local...
PHProg 1.0 - index.php?lang Traversal Arbitrary File Access
PHProg 1.0 - index.php?lang Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/19957/info PHProg is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site scripting and loca...
PHProg 1.0 - 'index.php?lang' Traversal Arbitrary File Access
source: https://www.securityfocus.com/bid/19957/info PHProg is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site scripting and local file-include attacks. Version 1.0 of PHProg is reported...
PHProg 1.0 - 'index.php?album' Cross-Site Scripting
source: https://www.securityfocus.com/bid/19957/info PHProg is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data and may allow an attacker to carry out cross-site scripting and local file-include attacks. Version 1.0 of PHProg is reported...
PHP-Proxima 6.0 - BB_Smilies.php Local File Inclusion
PHP-Proxima 6.0 - BBSmilies.php Local File Inclusion source: https://www.securityfocus.com/bid/19840/info PHP-Proxima is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary local...
local file include in PHP-Nuke (autohtml.php)
local file include in PHP-Nuke autohtml.php Rish : High Class : Local Script : autohtml.php Thanks : www.lezr.com/vb & All kuwait hackers Link : http://www.lezr.com/vb/showthread.php?p=104324 Drkiz : allinurl:"autohtml.php" autohtml.php?op=modload&name=The-file-you-want-to-include Exampel :...
PHP-Nuke 2.0 AutoHTML Module - Local File Inclusion
PHP-Nuke 2.0 AutoHTML Module - Local File Inclusion source: https://www.securityfocus.com/bid/19525/info PHP-Nuke AutoHTML Module is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit may allow an attacker to execute arbitra...
phpMyAdmin import_blacklist Variable Overwriting
The version of phpMyAdmin installed on the remote host fails to properly protect the global 'importblacklist' variable, which is used in the 'libraries/grabglobals.lib.php' script to protect global variables in its registerglobals emulation layer. An unauthenticated attacker can exploit this flaw...
VisNetic Mail Server 8.3.5 - Multiple File Inclusions
VisNetic Mail Server 8.3.5 - Multiple File Inclusions source: https://www.securityfocus.com/bid/19002/info VisNetic Mail Server is prone to multiple local file-include vulnerabilities and a remote file includes vulnerability. These issues are due to a failure in the application to properly saniti...
Forum 5 - pm.php Local File Inclusion
Forum 5 - pm.php Local File Inclusion source: https://www.securityfocus.com/bid/18967/info Forum 5 is prone to a local file-include vulnerability. The application fails to sanitize user input when executing the script. In particular the script fails to check for the presence of a...
PHPMyDesktopArcade 1.0 - index.php Local File Inclusion
PHPMyDesktopArcade 1.0 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/18185/info phpMyDesktop|arcade is prone to a local file-include vulnerability. This may allow unauthorized users to view files and to execute local scripts. An attacker may also be able to execute...
tseekdir.cgi<--Local File Include
---------------------------------- foud by: BoNy-m Site: http://www.alshmokh.com E-mail: [email protected] ---------------------------------- Search: allinurl:tseekdir.cgi example: /tseekdir.cgi?location=/etc/passwd00 /tseekdir.cgi?id=1055&location=/etc/passwd00...
Blursoft Blur6ex 0.3.462 - index.php Local File Inclusion
Blursoft Blur6ex 0.3.462 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/17554/info Blur6ex is prone to a local file-include vulnerability that may allow an unauthorized user to view files and to execute local scripts...
Coppermine 1.4.4 - 'index.php' Local File Inclusion
source: https://www.securityfocus.com/bid/17570/info Coppermine is prone to a local file-include vulnerability. This may allow unauthorized users to view files and to execute local scripts. Version 1.4.4 is vulnerable to this issue; other versions may also be affected...
PAJAX < 0.5.2 Multiple Vulnerabilities
The remote host is running PAJAX, a PHP library for remote asynchronous objects in JavaScript. The version of PAJAX installed on the remote host fails to validate input to the 'pajax/pajaxcalldispatcher.php' script before using it in a PHP 'eval' function. An unauthenticated attacker can exploit...