LoveCMS 1.6.2 Local File Inclusion

LoveCMS 1.6.2 Final Multiple Local File Inclusion Vulnerabilities found by cOndemned vendor: http://lovecms.org/ download: http://sourceforge.net/project/showfiles.php?groupid=168535 source of /system/admin/modules.php 13. ifisset$GET'install' 14. 15. $include = $GET'install'; 16. 17...

LoveCMS 1.6.2 Final - Multiple Local File Inclusions

LoveCMS 1.6.2 Final - Multiple Local File Inclusions LoveCMS 1.6.2 Final Multiple Local File Inclusion Vulnerabilities found by cOndemned vendor: http://lovecms.org/ download: http://sourceforge.net/project/showfiles.php?groupid=168535 source of /system/admin/modules.php 13. ifisset$GET'install'...

LoveCMS 1.6.2 Final - Multiple Local File Inclusions

LoveCMS 1.6.2 Final Multiple Local File Inclusion Vulnerabilities found by cOndemned vendor: http://lovecms.org/ download: http://sourceforge.net/project/showfiles.php?groupid=168535 source of /system/admin/modules.php 13. ifisset$GET'install' 14. 15. $include = $GET'install'; 16. 17...

CVE-2008-7062

Unrestricted file upload vulnerability in admin/index.php in Download Manager module 1.0 for LoveCMS 1.6.2 Final allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/...

Unrestricted file upload

Unrestricted file upload vulnerability in admin/index.php in Download Manager module 1.0 for LoveCMS 1.6.2 Final allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/...

CVE-2008-7062

Unrestricted file upload vulnerability in admin/index.php in Download Manager module 1.0 for LoveCMS 1.6.2 Final allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/...

CVE-2008-7062

The CVE-2008-7062 entry describes an Unrestricted file upload vulnerability in LoveCMS 1.6.2 Final, specifically in the Download Manager module 1.0’s admin/index.php. The issue allows remote attackers to execute arbitrary code by uploading a file with an executable extension and then requesting t...

Directory traversal

Directory traversal vulnerability in system/admin/images.php in LoveCMS 1.6.2 Final allows remote attackers to delete arbitrary files via a .. dot dot in the delete parameter...

CVE-2008-5794

Directory traversal vulnerability in system/admin/images.php in LoveCMS 1.6.2 Final allows remote attackers to delete arbitrary files via a .. dot dot in the delete parameter...

CVE-2008-5794

The CVE-2008-5794 entry pertains to LoveCMS 1.6.2 Final, where a directory traversal flaw in system/admin/images.php allows remote attackers to delete arbitrary files via ".." in the delete parameter. Reported impact is file deletion, with the vulnerability categorized as a network-accessible iss...

CVE-2008-5794

Directory traversal vulnerability in system/admin/images.php in LoveCMS 1.6.2 Final allows remote attackers to delete arbitrary files via a .. dot dot in the delete parameter...

CVE-2008-5308

The Simple Forum 3.1d module for LoveCMS 1.6.2 Final does not properly restrict access to administrator functions, which allows remote attackers to change the administrator password via a direct request to modules/simpleforum/admin/index.php...

CVE-2008-5308

The Simple Forum 3.1d module for LoveCMS 1.6.2 Final exposes a weak access control that lets remote attackers change the administrator password via a direct request to modules/simpleforum/admin/index.php. This CVE describes an access-persistence risk without detailing specific exploit vectors bey...

lovecms-upload.txt

\n", $argv0; printf" Ex.: php %s localhost/lovecms shell.php\n\n", $argv0; exit; list$script, $target, $file = $argv; $xpl = curlinit; curlsetopt$xpl, CURLOPTURL, $target . '/modules/downloadmanager/admin/index.php'; curlsetopt$xpl, CURLOPTRETURNTRANSFER, true; curlsetopt$xpl, CURLOPTPOST, true;...

LoveCMS 1.6.2 Final (Download Manager 1.0) File Upload Exploit

No description provided by source. ?php / LoveCMS 1.6.2 Final Download Manager v1.0 Arbitrary File Upload Exploit Discovered && Exploited by cOndemned Download: http://www.thethinkingman.net/modules/downloadmanager/?id=16 Description: This exploit allows attacker to upload any type of file no...

LoveCMS 1.6.2 Final (Download Manager 1.0) - Arbitrary File Upload

\n", $argv0; printf" Ex.: php %s localhost/lovecms shell.php\n\n", $argv0; exit; list$script, $target, $file = $argv; $xpl = curlinit; curlsetopt$xpl, CURLOPTURL, $target . '/modules/downloadmanager/admin/index.php'; curlsetopt$xpl, CURLOPTRETURNTRANSFER, true; curlsetopt$xpl, CURLOPTPOST, true;...

LoveCMS 1.6.2 Final (Download Manager 1.0) - Arbitrary File Upload

LoveCMS 1.6.2 Final Download Manager 1.0 - Arbitrary File Upload \n", $argv0; printf" Ex.: php %s localhost/lovecms shell.php\n\n", $argv0; exit; list$script, $target, $file = $argv; $xpl = curlinit; curlsetopt$xpl, CURLOPTURL, $target . '/modules/downloadmanager/admin/index.php'; curlsetopt$xpl,...

LoveCMS 1.6.2 Final (Download Manager 1.0) File Upload Exploit

Exploit for unknown platform in category web applications ============================================================== LoveCMS 1.6.2 Final Download Manager 1.0 File Upload Exploit ============================================================== \n", $argv0; printf" Ex.: php %s localhost/lovecms...

lovecms-password.txt

'en', 'forumWidth' = '500', 'forumAlign' = 'left', 'forumTitle' = 'Simple Forum', 'threadsPerPage' = '15', 'wordLength' = '50', 'autoDelete' = '12', 'adminPass' = $pass, 'allowHTML' = '1', 'allowURLs' = '1', 'allowUBBs' = '1', 'enableIDs' = '0', 'enableSignature' = '1', 'enableRefererCheck' = '0'...

LoveCMS 1.6.2 Final (Simple Forum 3.1d) - Change Admin Password

'en', 'forumWidth' = '500', 'forumAlign' = 'left', 'forumTitle' = 'Simple Forum', 'threadsPerPage' = '15', 'wordLength' = '50', 'autoDelete' = '12', 'adminPass' = $pass, 'allowHTML' = '1', 'allowURLs' = '1', 'allowUBBs' = '1', 'enableIDs' = '0', 'enableSignature' = '1', 'enableRefererCheck' = '0'...