Code injection

The CDN module 6.x-2.2 and 7.x-2.2 for Drupal, when running in Origin Pull mode with the "Far Future expiration" option enabled, allows remote attackers to read arbitrary PHP files via unspecified vectors, as demonstrated by reading settings.php...

CVE-2012-1645

The CDN module 6.x-2.2 and 7.x-2.2 for Drupal, when running in Origin Pull mode with the "Far Future expiration" option enabled, allows remote attackers to read arbitrary PHP files via unspecified vectors, as demonstrated by reading settings.php...

CVE-2012-1645

The Drupal CDN module (versions 6.x-2.2 and 7.x-2.2) is affected when used in Origin Pull mode with the Far Future expiration option. The vulnerability allows remote attackers to read arbitrary PHP files from the site (demonstrated by reading settings.php) via unspecified vectors, due to how the ...

Information disclosure

SilverStripe 2.3.x before 2.3.8 and 2.4.x before 2.4.1, when running on servers with certain configurations, allows remote attackers to obtain sensitive information via a direct request to PHP files in the 1 sapphire, 2 cms, or 3 mysite folders, which reveals the installation path in an error...

http-phpself-xss NSE Script

Crawls a web server and attempts to find PHP files vulnerable to reflected cross site scripting via the variable $SERVER"PHPSELF". This script crawls the webserver to create a list of PHP files and then sends an attack vector/probe to identify PHPSELF cross site scripting vulnerabilities. PHPSELF...

Kerio WinRoute Firewall Web Server Remote Source Code Disclosure

By sending specially crafted requests with a NULL byte followed by an extension such as '.txt', an unauthenticated, remote attacker can obtain the source code of PHP files available through the version of Kerio WinRoute Firewall installed on the remote host. %NASLMINLEVEL 70300 C Tenable Network...

EAFlashUpload Remote File Upload Vulnerability

Exploit for php platform in category web applications -------------------------------------------------------------------+ Exploit Title : EAFlashUpload Remote File Upload Date : 27-5-2012 Author : Dr.SiLnT HilL Version : 2.6 Dork : inurl:"EAFlashUpload" Download :...

Web2bizz Remote File UPLOAD

Exploit for php platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Web2bizz Pvt. Ltd. RFUPLOAD Date : 20-04-2012 Author : TeaM MosTa Version : /N/ Dork : "Powered ...

CVE-2012-2269

Multiple cross-site scripting XSS vulnerabilities in ownCloud before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 an arbitrary field to apps/contacts/ajax/addcard.php, 2 the parameter parameter to apps/contacts/ajax/addproperty.php, 3 the name parameter to...

Supernet CMS Blind SQL injection

Exploit for php platform in category web applications Exploit Title: Supernet CMS BlindSQLi Date: 22.03.2012 Google Dork/s: Greetz: Inj3ct0r 1337day Exploit DataBase 1337day.com allintext:"Vse pravice pridržane | © 2006 Supernet.si" site:.si allintext:"Vse pravice pridržane | © 2007 Supernet.si"...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in include/functions.php in PunBB before 1.3.6 allow remote attackers to inject arbitrary web script or HTML via the 1 id, 2 formsent, 3 csrftoken, 4 reqconfirm, or 5 delete parameter to delete.php, the 6 id, 7 formsent, 8 csrftoken, 9 reqmessage,...

Feng Office '.php' Files Information Disclosure Vulnerability

Feng Office is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ExoPHPDesk '.php' Files Information Disclosure Vulnerability

ExoPHPDesk is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

eyeOS '.php' Files Information Disclosure Vulnerability

eyeOS is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

e107 Multiple PHP Files Information Disclosure Vulnerability

e107 is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:e107:e107"; ifdescripti...

DokuWiki '.php' Files Information Disclosure Vulnerability

DokuWiki is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:dokuwiki:dokuwiki";...

WordPress '.php' Files Information Disclosure Vulnerability

WordPress is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Dolphin <= 7.0.4 Information Disclosure Vulnerability

Dolphin is prone to an information disclosure vulnerability. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

CVE-2011-3699

John Lim ADOdb Library for PHP 5.11 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tests/test-active-record.php and certain other files...

Information disclosure

CubeCart 4.4.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/shipping/USPS/calc.php and certain other files...