phpBB 3 - autopost bot mod 0.1.3 Remote File Inclusion

phpBB 3 - autopost bot mod 0.1.3 Remote File Inclusion phpBB 3 autopost bot mod cachetime = 0; // not used in this mod $rss-itemslimit = $config'lastrssapitemslimit'; // default limit of items to post $rss-type = $config'lastrsstype'; // connection type fopen / curl...

phpBB 3 - 'autopost bot mod 0.1.3' Remote File Inclusion

phpBB 3 autopost bot mod cachetime = 0; // not used in this mod $rss-itemslimit = $config'lastrssapitemslimit'; // default limit of items to post $rss-type = $config'lastrsstype'; // connection type fopen / curl // init lastRSS autopost MOD ! // check if we have som...

DEBIAN-CVE-2009-0542

SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" percent character in the username, which introduces a "'" single quote character during variable substitution by modsql...

Directory traversal

Multiple directory traversal vulnerabilities in WebFrame 0.76 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 currentmod and 2 LANG parameters to mod/index.php...

CVE-2009-0514

Multiple directory traversal vulnerabilities in WebFrame 0.76 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 currentmod and 2 LANG parameters to mod/index.php...

CVE-2009-0514

CVE-2009-0514 affects WebFrame 0.76 with directory traversal in mod/index.php (parameters: currentmod, LANG). Exploitation enables remote inclusion and execution of arbitrary local files. Base CVSS 2.0 score 7.5 (HIGH); attack vector NETWORK, no authentication required. No remediation details pro...

webframe 0.76 Multiple File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ===================================================== webframe 0.76 Multiple File Inclusion Vulnerabilities ===================================================== ------------------Rfi/Lfi------------------ script:webframe 0.76...

w3bcms <= v3.5.0 Multiple Remote Vulnerabilities Exploit

Exploit for unknown platform in category web applications ======================================================== w3bcms = v3.5.0 Multiple Remote Vulnerabilities Exploit ======================================================== !/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwPOST;...

w3bcms 3.5.0 SQL Injection

!/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwPOST; use Getopt::Long; '/ -.- -------------------oOO------OOo------------------ | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Research Division // 2oo9 |...

webframe 0.76 - Multiple File Inclusions

webframe 0.76 - Multiple File Inclusions ------------------Rfi/Lfi------------------ script:webframe 0.76 ------------------------------------------------------------------ download from:http://downloads.sourceforge.net/phpwebframe/webframe-0.76-src.tar.gz?modtime=1155546760&bigmirror=0...

Sql injection

SQL injection vulnerability in modauthmysql.c in the mod-auth-mysql aka libapache2-mod-auth-mysql module for the Apache HTTP Server 2.x, when configured to use a multibyte character set that allows a \ backslash as part of the character encoding, allows remote attackers to execute arbitrary SQL...

CVE-2008-2384

SQL injection vulnerability in modauthmysql.c in the mod-auth-mysql aka libapache2-mod-auth-mysql module for the Apache HTTP Server 2.x, when configured to use a multibyte character set that allows a \ backslash as part of the character encoding, allows remote attackers to execute arbitrary SQL...

CVE-2008-2384

SQL injection vulnerability in modauthmysql.c in the mod-auth-mysql aka libapache2-mod-auth-mysql module for the Apache HTTP Server 2.x, when configured to use a multibyte character set that allows a \ backslash as part of the character encoding, allows remote attackers to execute arbitrary SQL...

CVE-2007-6720

libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service application...

Code injection

libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service application...

CVE-2007-6720

CVE-2007-6720 affects libmikmod versions 3.1.9–3.2.0 used by MikMod, SDL-mixer, and potentially other products. The issue is a logic flaw where playback calculations rely on the channel count of the last loaded song rather than the currently playing one, enabling a user-assisted attacker to cause...

PHP-Fusion Mod the_kroax (comment_id) SQL Injection Vulnerability

No description provided by source. PHP-Fusion Mod thekroax commentid SQL Injection Vulnerability ----------------------------------------------------------------------------------------------------------- +Author by : FasTWORM +home: Cyber-Warrior.Org +exploit:...

PHP-Fusion Mod vArcade 1.8 Sql Injection Vulnerability

---------------------------------------------------------------- Script : PHP-Fusion Mod vArcade 1.8 Type : Sql Injection Vulnerability Risk : High ---------------------------------------------------------------- Download From : http://venue.nu/...

PHP-Fusion Mod E-Cart Sql Injection

PHP-Fusion Mod E-Cart Sql Injection AUTHOR : Sina Yazdanmehr R3d.W0rm Discovered by : Sina Yazdanmehr R3d.W0rm Our Site : Http://IRCRASH.COM IRCRASH Team Members : Khashayar Fereidani - R3d.w0rm Sina Yazdanmehr - Hadi Kiamarsi Download :...

PHP-Fusion Mod the_kroax - SQL Injection

PHP-Fusion Mod thekroax - SQL Injection PHP-Fusion Mod thekroax commentid SQL Injection Vulnerability ----------------------------------------------------------------------------------------------------------- +Author by : FasTWORM +home: Cyber-Warrior.Org +exploit:...