Pandora FMS Monitoring - Local File Include Vulnerability

Document Title: =============== Pandora FMS Monitoring - Local File Include Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/438.wmv View: http://www.youtube.com/watch?v=WAkW1xgSCw Release Date: ============= 2012-02-16 Vulnerability Laboratory ID...

LEPTON 1.1.3 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/52026/info LEPTON is prone to multiple input-validation vulnerabilities, including: 1. A cross-site scripting vulnerability 2. An SQL-injection vulnerability 3. A local file-include vulnerability 4. Multiple HTML-injection vulnerabilities Exploiting these...

Vespa 0.8.6 - getid3.php Local File Inclusion

Vespa 0.8.6 - getid3.php Local File Inclusion source: https://www.securityfocus.com/bid/51878/info Vespa is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in...

OpenEMR 4.1.0 LFI and Command Injection Vulnerabilities - Active Check

OpenEMR is prone to local file include LFI and command injection vulnerabilities because it fails to properly sanitize user supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

OpenEMR 4.1 - Interfacepatient_fileencountertrend_form.php?formname Traversal Local File Inclusion

OpenEMR 4.1 - Interfacepatientfileencountertrendform.php?formname Traversal Local File Inclusion source: https://www.securityfocus.com/bid/51788/info OpenEMR is prone to local file-include and command-injection vulnerabilities because it fails to properly sanitize user-supplied input. A remote...

DSquare Exploit Pack: D2SEC_WPTHEMETUNER

Name| d2secwpthemetuner ---|--- CVE| CVE-2012-0934 Exploit Pack| D2ExploitPack Description| Wordpress Theme Tuner 0.7 Local File Include Vulnerability Notes|...

Joomla! Component com_visa - Local File Inclusion / SQL Injection

source: https://www.securityfocus.com/bid/51726/info The 'comvisa' component for Joomla! is prone to a local file-include vulnerability and multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit the local file-include vulnerabilit...

Joomla! 'com_kp' Component 'controller' Parameter Local File Include Vulnerability

The 'comkp' component for Joomla! is prone to a local file- include vulnerability because it fails to properly sanitize user- supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver...

Joomla! 'com_kp' Component LFI Vulnerability (Jan 2012) - Active Check

The SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; if description scriptoid"1.3.6.1.4.1.25623.1.0.103398";...

Joomla! Component com_kp - Controller Local File Inclusion

Joomla! Component comkp - Controller Local File Inclusion source: https://www.securityfocus.com/bid/51623/info The 'comkp' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to...

Joomla! Component com_kp - 'Controller' Local File Inclusion

source: https://www.securityfocus.com/bid/51623/info The 'comkp' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute...

w-CMS HTML Injection and Local File Include Vulnerabilities

w-CMS is prone to multiple HTML-injection vulnerabilities and a local file-include vulnerability. Exploiting these issues could allow an attacker to execute arbitrary HTML and script code in the context of the affected browser, steal cookie-based authentication credentials, and execute arbitrary...

w-CMS <= 2.0.1 Multiple Vulnerabilities - Active Check

w-CMS is prone to multiple HTML-injection vulnerabilities and a local file include LFI vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Vietsunit Script <= (index.php) Local File Include Vulnerability

Exploit for php platform in category web applications ---------------------------------------------------------------- Vietsunit Script True Reference: 1 For more information about this vulnerability URL: http://www.hakipedia.com/index.php/LocalFileInclusion Important Notes: - Vendor did not...

TA.CMS Local File Include and SQL Injection Vulnerabilities

TA.CMS is prone to multiple local file-include and SQL-injection vulnerabilities. An attacker can exploit these issues to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, and view and execute arbitrary local files within the context of...

osCommerce Multiple Local File Include Vulnerabilities

osCommerce is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the webserver process. This ma...

TA.CMS (TeachArabia) - index.php?id SQL Injection

TA.CMS TeachArabia - index.php?id SQL Injection source: https://www.securityfocus.com/bid/50773/info TA.CMS is prone to multiple local file-include and SQL-injection vulnerabilities. An attacker can exploit these issues to compromise the application, access or modify data, exploit latent...

TA.CMS (TeachArabia) - 'index.php?id' SQL Injection

source: https://www.securityfocus.com/bid/50773/info TA.CMS is prone to multiple local file-include and SQL-injection vulnerabilities. An attacker can exploit these issues to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, and view and...

CaupoShop 'template' Parameter Local File Include Vulnerability

CaupoShop is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the context of the Web server process. This may all...

WHMCompleteSolution 3.x/4.x - Multiple Vulnerabilities

$b0x WHMCS WHMCompleteSolution 3.x / 4.x Multiple Vulnerability ! $b0x ZxH-Labs $b0x 1st-NOV-11 $b0x Www.Sec4ever.coM $b0x WH-03 On Windows IIS 6.0 ======================================================== b0x@1337b0x:/b0x/Exploits/WebAPP whoami ZxH-Labs | Www.Sec4ever.coM...