CVE-2010-1957

CVE-2010-1957 affects Joomla! component Love Factory (com_lovefactory) 1.3.4. A directory traversal flaw allows remote attackers to read arbitrary files by injecting a .. in the controller parameter to index.php, resulting in potential unauthorized file access. The Nuclei template confirms this a...

CVE-2010-1957: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Love Factory comlovefactory component 1.3.4 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

Joomla Love Factory 1.3.4 Local File Inclusion

================================================================================================================= o Joomla Component Love Factory Local File Inclusion Vulnerability Software : comlovefactory version 1.3.4 Vendor : http://www.thefactory.ro/ Author : AntiSecurity NoGe Vrs-hCk OoNBoY...

Joomla! Component Love Factory 1.3.4 - Local File Inclusion

================================================================================================================= o Joomla Component Love Factory Local File Inclusion Vulnerability Software : comlovefactory version 1.3.4 Vendor : http://www.thefactory.ro/ Author : AntiSecurity NoGe Vrs-hCk OoNBoY...

Joomla! Component Love Factory 1.3.4 - Local File Inclusion

Joomla! Component Love Factory 1.3.4 - Local File Inclusion ================================================================================================================= o Joomla Component Love Factory Local File Inclusion Vulnerability Software : comlovefactory version 1.3.4 Vendor :...

InterTech Co 1.0 - SQL Injection

------------------------------------------------------ ./SEC-R1Z / / / / /\ ...

Amaya 11.1 - W3C Editor/Browser (defer) Stack Overflow (PoC)

"; $hnd = fopen"remotelove.html","w"; if$hnd fputs$hnd,$hello; fclose$hnd; echo"DONE !!\n"; else echo"Kupa !!\n"; ? milw0rm.com 2009-03-30...

PHPBB links.php Remote SQL Injection

No description provided by source. ?php PHPBB links.php Remote SQL Injection By Love Fly thanks Flyh4t,Spr1t3 [email protected] www.cnsst.org / www.sebug.net =phpBB 2.022 use LWP::UserAgent; use HTTP::Request::Common; use Time::HiRes; CONFIGURAZIONE EXPLOIT $sito =...

Unfixed XSS vulnerability at affiliates.i-love-mature.com

Security researcher TreX, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting affiliates.i-love-mature.com, which at the time of submission ranked 6738 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is...

phpBB Links MOD Remote Blind SQL Injection Exploit

No description provided by source. ?php / D:\usr\local\phpphp test.php http://www.skypebbs.com/ -id=2 ------------------------------------------------------------ phpBB Links MOD Remote Blind SQL Injection Exploit exploit by flyh4tcnsst.org bug found by Love Fly dork:Links MOD v1.2.2 by phpBB2...

Unfixed XSS vulnerability at www.lovebeyondborders.org

Security researcher Narcoticxs, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting www.lovebeyondborders.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/09/2007. It is...

Unfixed XSS vulnerability at internet-love-scams.org

Security researcher st@rext, has submitted on 22/08/2007 a cross-site-scripting XSS vulnerability affecting internet-love-scams.org, which at the time of submission ranked 1187641 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/08/2007. It i...

Internet cafe management software reproduction of vulnerability-vulnerability warning-the black bar safety net

Internet cafe management software is again exposed with the accounting loopholes, and this vulnerability than six months ago that the more concealed, by the operation, can achieve one hour of money for unlimited Internet access. Reported material said, in the stone floor of the bridge all the...

Light Blog Remote Multiple Vulnerabilities Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "\r\n"; echo "Light Blog Multiple Vulnerabilities Exploit\r\n"; echo "by BlackHawk [email protected]\r\n"; echo "Thanks to rgod for the php code and Marty for the Love\r\n\r\n"; if $argc4 echo "Usage: php ".$argv0."...