Text Exchange Pro (index.php page) Local File Inclusion

No description provided by source. ----------------------------------------------------------- Text Exchange Pro index.php page Local file inclusion Bug discovered by Yakir Wizman Date 24/08/2012 Vendor Homepage - http://www.phpwebscripts.com/text-exchange-pro/ Demo -...

AB Banner Exchange (index.php page) Local File Inclusion

No description provided by source. ----------------------------------------------------------- AB Banner Exchange index.php page Local file inclusion Bug discovered by Yakir Wizman Date 24/08/2012 Vendor Homepage - http://www.abscripts.com/ab-banner-exchange/ Demo -...

Easy Banner Pro (index.php page) Local File Inclusion

No description provided by source. ----------------------------------------------------------- Easy Banner Pro index.php page Local file inclusion Bug discovered by Yakir Wizman Date 24/08/2012 Vendor Homepage - http://www.phpwebscripts.com/easybannerpro/ Demo -...

Ultimate Uploader 1.3 - Remote File Upload Vulnerability

No description provided by source. ========================================================================== Script Name : Ultimate Uploader 1.3 Language : php Vendor : http://www.element-it.com Author : Master Mind Home : www.shdowskill.com , www.vbspiders.com...

Benjamin Lefevre Dobermann Forum 0.x newtopic.php subpath Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/6057/info Dobermann Forum is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. This issue is present in several PHP script files provided with Dobermann. An attacker...

Benjamin Lefevre Dobermann Forum 0.x index.php subpath Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/6057/info Dobermann Forum is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. This issue is present in several PHP script files provided with Dobermann. An attacker...

Laurent Adda Les Commentaires 2.0 PHP Script derniers_commentaires.php Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/9536/info It has been reported that Les Commentaires may be prone to a file include vulnerability in various modules, that may allow an attacker to include malicious external files containing arbitrary PHP code to be...

Easy-Clanpage <= 2.1 - SQL Injection Exploit

No description provided by source. /----------------------------Information------------------------------------------------ +Name : Easy-Clanpage = v2.1 SQL Injection Exploit +Author : Easy Laster +Date : 30.03.2010 +Script Easy-Clanpage = v2.1 +Download : Update Version 2.01-2.1...

Invision Power Board <= 2.3.5 - Multiple Vulnerabilities Exploit (revised)

No description provided by source. !/usr/bin/php -q ?php errorreportingEALL ^ ENOTICE; yeah ... it rox : class ipbspl var $web; function main $this-mhead; Gimme your args $this-pattack = $this-getp'attack', true; $this-pprox = $this-getp'proxhost'; $this-pproxa = $this-getp'proxauth';...

PayPal Store Front 3.0 'index.php' Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8791/info PayPal Store Front is prone to a remote file include vulnerability. It may be possible for a remote attacker to influence the include path for an external page to point to an attacker-specified location. This...

Sugar Suite Open Source <= 4.2 (OptimisticLock) Remote Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Sugar Suite Open Source = 4.2 \OptimisticLock!\ arbitrary remote inclusion exploit\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo this is called the \five claws of...

MagicScripts E-Store Kit-2 PayPal Edition Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12910/info MagicScripts E-Store Kit-2 PayPal Edition is prone to a remote file include vulnerability. Remote attackers could potentially exploit this issue to include a remote malicious PHP script. If the attacker is able...

JV2 Folder Gallery 3.0 0 - (download.php) Remote File Disclosure Exploit

No description provided by source. / Script Name :JV2 Folder Gallery Script site :www.jv2.net Discovered by :SaO Exploit Coded by :PeTrO Credits To soulreaver,Kuz3y Compile: Visual C++ or DevC++ / include stdio.h include string.h include winsock.h pragma commentlib,ws232.lib int mainint argc, cha...

PHPOutsourcing Zorum 3.x Remote Include Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6669/info It has been reported that Zorum may allow remote users to influence to location of PHP includes. Because of this, it is possible for a remote user to include an external arbitrary PHP script containing commands...

All Enthusiast PhotoPost PHP Pro 5.0 adm-photo.php Arbitrary Image Manipulation

No description provided by source. source: http://www.securityfocus.com/bid/12779/info PhotoPost PHP Pro is a web-based image gallery application written in PHP. It can be implemented on any platform that supports PHP script execution. Multiple remote vulnerabilities affect All Enthusiast PhotoPo...

creLoaded <= 6.15 (HTMLAREA) Automated Perl Exploit

No description provided by source. !/usr/bin/perl creLoaded = 6.15 HTMLAREA automated perl exploit hacked up by kaneda [email protected] Rather simple exploit, but still an exploit nonetheless. Attempts to upload php script and utilise that to execute commands, and show off a fake shell. C...

Web Server Creator Web Portal 0.1 - Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6251/info The Web Server Creator Web Portal is prone to an issue which may allow attackers to include arbitrary files from a remote server. It is possible for remote attackers to influence the include path for the...

Mnews <= 1.1 (view.php) SQL Injection

No description provided by source. ??php / Exploit Title: Mnews = 1.1 SQL Injection Google Dork: inurl:mnews/view.php Google Dork: intitle:Mnews sistena de news Date: 03rd 06 2012 Software Link: http://phpbrasil.com/script/eo4aWVVzFd/mnews-sistema-de-noticias Version: 1.1 Tested on: Debian...

AWStats Totals <= 1.14 multisort - Remote Command Execution

No description provided by source. $Id: awstatstotalsmultisort.rb 12715 2011-05-25 10:45:36Z patrickw $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing an...

Zomplog <= 3.8.1 upload_files.php Arbitrary File Upload Exploit

No description provided by source. ?php Zomplog = 3.8.1 Arbitrary File Upload Exploit by InATeam http://inattack.ru/ tested on versions 3.8.1 with security patch, 3.8.1, 3.8, 3.7.5 echo ------------------------------------------------------------\n; echo Zomplog = 3.8.1 Arbitrary File Upload...