Slooze PHP Web Photo Album 0.2.7 - Command Execution

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\Remote Command Execution Vulnerability 0 0 // 1 1 1 0 0 1 1 0 0 1 1 0 Sn!pEr Team 1 1 0...

Slooze PHP Web Photo Album v0.2.7 Command Execution Vulnerability

Exploit for php platform in category web applications ================================================================= Slooze PHP Web Photo Album v0.2.7 Command Execution Vulnerability ================================================================= + Site : www.v4-team.com/cc and...

Ve-EDIT 0.1.4 Local File Inclusion

------------------------------------------------------------------------------------- Ve-EDIT v 0.1.4 debugphp.php LFI Vulnerability ------------------------------------------------------------------------------------- Author: CoBRa21 Mail: uykucuatwindowslivedotcom Script Download:...

Shop Script Cross Site Scripting

® -SHOP-SCRIPT XSS Remote Vulnerabilities- Script : shop-script premium Language : php Web Site : http://www.shop-script.com Autor : u.f. Thanks to : Jason, bull, T0r3x, Clark, Meth0d and all members r1zen.org Exploit Info Vuln is : /index.php? http://www.localhost.com/index.php?searchstring=XSS...

Luxbum 0.5.5/stable - Authentication Bypass

/\ \ \ \ /'\ \ \ , auth bypass URL: http://www.luxbum.net/ Found by: knxone Greetings: Pirata from this famous irc server ; +=========+ | CONCEPT | +=========+ Luxbum allows authentification using dotclear username and password via MySQL, while the default auth mechanism uses a md5 hash of the...

X-BLC 0.2.0 - get_read.php?section SQL Injection

X-BLC 0.2.0 - getread.php?section SQL Injection !/usr/bin/perl -w :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl xblc = 0.2.0 SQL Injection Vulnerability Script: "X-BLC is a...

CVE-2008-4591

Multiple cross-site scripting XSS vulnerabilities in admin/include/isadmin.inc.php in PhpWebGallery 1.3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 langaccessforbiden and 2 langidenttitle parameters...

Directory traversal

Multiple directory traversal vulnerabilities in PHP Web Explorer 0.99b and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 refer parameter to main.php and the 2 file parameter to edit.php...

CVE-2008-4499

CVE-2008-4499 describes multiple directory traversal flaws in PHP Web Explorer 0.99b and earlier. The vulnerability allows remote attackers to cause local file inclusion and arbitrary code execution by supplying a .. (dot dot) sequence in the refer parameter to main.php or the file parameter to e...

CVE-2008-4499

Multiple directory traversal vulnerabilities in PHP Web Explorer 0.99b and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 refer parameter to main.php and the 2 file parameter to edit.php...

PHP Web Explorer 0.99b - edit.php?File Traversal Local File Inclusion

PHP Web Explorer 0.99b - edit.php?File Traversal Local File Inclusion source: https://www.securityfocus.com/bid/31595/info PHP Web Explorer is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these...

PHP Web Explorer 0.99b - 'main.php?refer' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/31595/info PHP Web Explorer is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to view local files and execute...

PHP Web Explorer 0.99b - main.php?refer Traversal Local File Inclusion

PHP Web Explorer 0.99b - main.php?refer Traversal Local File Inclusion source: https://www.securityfocus.com/bid/31595/info PHP Web Explorer is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these...

PHP Web Explorer 0.99b - 'edit.php?File' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/31595/info PHP Web Explorer is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities using directory-traversal strings to view local files and execute...

phpwebnews 'bukutamu.php' SQL注入漏洞

BUGTRAQ ID: 30080 CNCAN ID：CNCAN-2008070702 phpwebnews是一款基于PHP的WEB应用程序。 phpwebnews不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'bukutamu.php'脚本对用户提交给'det'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Surat kabar phpwebnews 0.2 Surat kabar phpwebnews 0.1 目前没有解决方案提供：...

[SECURITY] Fedora 8 Update: kronolith-2.1.8-1.fc8

Kronolith is the Horde calendar application. It provides repeating events, all-day events, custom fields, keywords, and managing multiple users through Horde Authentication. The calendar API that Kronolith uses is abstracted; MCAL and SQL drivers are currently provided. The Horde Project writes w...

Dynamic photo Gallery 1.02 - 'albumID' SQL Injection

Aria-Security Team http://Aria-Security.Net ---------------------------- Shoutz: Aura, imm02rtal, NULL, Kinglet And all our staff Vendor: http://www.phpwebscript.net/dynamicphotogallery/foto-gallery.php Original Link: http://forum.aria-security.net/showthread.php?p=1521 PoC:...

Particle Blogger Archives.PHP SQL注入漏洞

Particle Blogger是一款基于PHP的WEB应用程序。 Particle Blogger不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Archives.PHP'脚本对用户提交的'month'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 Particle Soft Particle Blogger 1.2.1 Particle Soft Particle Blogger 1.2 Particle Soft Particle Blogger 1.1.2 Particle Soft Particl...

PHP < 4.5.0 - Unserialize Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'PHP 4...

pwp-rfilfi.txt

php web portail remote file include & local file include download site: https://sourceforge.net/project/showfiles.php?groupid=178400 product:php web portail bug: remote file include & local file include risk : high local file include :...