eNdonesia CMS 8.4 - Local File Inclusion

eNdonesia CMS 8.4 - Local File Inclusion Endonesia 8.4 CMS Site: http://www.endonesia.org/ Download: http://sourceforge.net/projects/endonesia Bug: Local File Inclusion in mod.php file ! Author: s4r4d0 Mail: [email protected] Team: Fatal Error...

Endonesia CMS 8.4 local file inclusion

Exploit for unknown platform in category web applications ====================================== Endonesia CMS 8.4 local file inclusion ====================================== Endonesia 8.4 CMS Site: http://www.endonesia.org/ Download: http://sourceforge.net/projects/endonesia Bug: Local File...

CVE-2008-5787

The CVE-2008-5787 entry concerns Arab Portal 2.1 on Windows, where a directory traversal flaw in mod.php allows remote attackers to read arbitrary files by supplying a .. path in the file parameter together with a show action. Affected component: mod.php in Arab Portal 2.1. Root cause: improper v...

arabportal-disclose.txt

Arab Portal v2.1 Remote File Disclosure Win32 AUTHOR : IRCRASH R3d.W0rm Sina Yazdanmehr Discovered by : R3d.W0rm Sina Yazdanmehr Our Site : Http://IRCRASH.COM IRCRASH Team Members : Dr.Crash - R3d.w0rm Sina Yazdanmehr - Hadi Kiamarsi Download : www.arabportal.net DORK : Powered by: Arab Portal...

Sql injection

SQL injection vulnerability in the Calendar module in eNdonesia 8.4 allows remote attackers to execute arbitrary SQL commands via the locid parameter in a listevents action to mod.php...

eNdonesia 8.4 (Calendar Module) - SQL Injection

!/usr/bin/perl /-----------------------------------------------\ | /-----------------------------------------\ | | | Remote SQL Exploit | | | | eNdonesia 8.4 Remote SQL Exploit | | | | www.endonesia.org | | | | Calendar Module | | | -----------------------------------------/ | |...

CVE-2008-1553

Directory traversal vulnerability in mod.php of TopperMod 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the to parameter. CVSS2 base score 6.8 (MEDIUM); attack vector NETWORK, no authentication, no user interaction required; impacts partial confide...

toppermod10-lfi.txt

Author: GiReX mySite: girex.altervista.org CMS: TopperMod v1.0 Site: rtcw.ch/mio/index.php Bug: Local File Inclusion File: mod.php Var : $to Bug explanation - Vuln Code: if isset$GET'mod' $mod = stripslashes$GET'mod'; else header"location index.php"; Die; if isset$GET'to' $to =...

TopperMod 1.0 - mod.php Local File Inclusion

TopperMod 1.0 - mod.php Local File Inclusion Author: GiReX mySite: girex.altervista.org CMS: TopperMod v1.0 Site: rtcw.ch/mio/index.php Bug: Local File Inclusion File: mod.php Var : $to Bug explanation - Vuln Code: if isset$GET'mod' $mod = stripslashes$GET'mod'; else header"location index.php";...

TopperMod 1.0 (mod.php) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================== TopperMod 1.0 mod.php Local File Inclusion Vulnerability ========================================================== Author: GiReX CMS: TopperMod v1.0 Site: rtcw.ch/mio/index.php Bu...

TopperMod 1.0 (mod.php) Local File Inclusion Vulnerability

No description provided by source. Author: GiReX mySite: girex.altervista.org CMS: TopperMod v1.0 Site: rtcw.ch/mio/index.php Bug: Local File Inclusion File: mod.php Var : $to Bug explanation - Vuln Code: if isset$GET'mod' $mod = stripslashes$GET'mod'; else header"location index.php"; Die; if...

phpwebsitedownload-sql.txt

powered by phpWebSitedownload AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl:"mod.php?mod=download" DORK 2 : allinurl: EXPLOIT :...

phpwebsitedownloads-sql.txt

powered by phpWebSitedownloads AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAiL : [email protected] DORK 1 : allinurl:"mod.php?mod=downloads" EXPLOIT :...

Sql injection

Multiple SQL injection vulnerabilities in eNdonesia 8.4 allow remote attackers to execute arbitrary SQL commands via the 1 artid parameter to mod.php in a viewarticle action publisher mod and the 2 bid parameter to banners.php in a click action. NOTE: the mod.php viewdisk and viewlink vectors are...

eNdonesia 8.4 - mod.php?viewarticle Action artid SQL Injection

eNdonesia 8.4 - mod.php?viewarticle Action artid SQL Injection source: https://www.securityfocus.com/bid/24590/info eNdonesia is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal...

CVE-2004-2670

Affected software: eNdonesia 8.3 (publisher module) with mod.php. Vulnerable component/file: mod.php in the publisher module; issue stems from cross-site scripting (XSS) in two input vectors. Payload vectors: (1) mod parameter in a viewcat operation, (2) query parameter in a search operation. Imp...

CVE-2006-6873

CVE-2006-6873 describes multiple SQL injection vulnerabilities in mod.php of eNdonesia 8.4. The affected component is the mod.php file, with vulnerable vectors via (1) the did parameter in a viewdisk operation and (2) the cid parameter in viewlink (katalog mod) or viewcat (diskusi mod). The under...

CVE-2003-1316

mod.php in eNdonesia 8.2 allows remote attackers to obtain sensitive information via a ' quote value in the lng parameter, which reveals the path in an error message. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2003-1316

mod.php in eNdonesia 8.2 allows remote attackers to obtain sensitive information through a improper handling of the lng parameter, where a quote value triggers an error message that reveals the server path. This is an information disclosure vulnerability (path exposure) without details on exploit...

CVE-2004-2671

The CVE-2004-2671 entry corresponds to a vulnerability in mod.php of eNdonesia 8.3 where remote attackers can obtain sensitive information by issuing certain direct requests and requests with invalid parameter values. The error messages disclose local paths, demonstrated via the (1) mod and (2) c...