544 matches found
MTCMS 2.0 - adminadmin_settings.php Remote File Inclusion
MTCMS 2.0 - adminadminsettings.php Remote File Inclusion !/usr/bin/perl +------------------------------------------------------------------------------------------- + MTCMS + Requirements.......: registerglobals = on...
MTCMS <= 2.0 (admin/admin_settings.php) Remote File Include Exploit
Exploit for unknown platform in category web applications =================================================================== MTCMS \n"; print "-h, --host\ttarget host\texample.com\n"; print "-f, --file\tremote file\thttp://evilsite.com/shell.php\n"; print "-d, --dir\tinstall dir\t/mtcms\n"; exit...
MTCMS 2.0 - '/admin/admin_settings.php' Remote File Inclusion
!/usr/bin/perl +------------------------------------------------------------------------------------------- + MTCMS + Requirements.......: registerglobals = on +------------------------------------------------------------------------------------------- use Getopt::Long; use URI::Escape; use...
Php/Mysql Site Builder 0.0.2 (htm2php.php) File Disclosure Vulnerability
Exploit for unknown platform in category web applications ======================================================================== Php/Mysql Site Builder 0.0.2 htm2php.php File Disclosure Vulnerability ======================================================================== PHPBuilder v0.0.2 Remo...
Paristemi 0.8.3b - buycd.php Remote File Inclusion
Paristemi 0.8.3b - buycd.php Remote File Inclusion +------------------------------------------------------------------------------------------- + Paristemi 0.8.3b buycd.php Remote File Include Vulnerability +-----------------------------------------------------------------------------------------...
Paristemi 0.8.3b (buycd.php) Remote File Include Vulnerability
No description provided by source. +------------------------------------------------------------------------------------------- + Paristemi 0.8.3b buycd.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendor...
Paristemi 0.8.3b (buycd.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ============================================================== Paristemi 0.8.3b buycd.php Remote File Include Vulnerability ==============================================================...
Paristemi 0.8.3b - 'buycd.php' Remote File Inclusion
+------------------------------------------------------------------------------------------- + Paristemi 0.8.3b buycd.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendor ............: http://www.paristemi.com/...
Hot Links download backup authorized vulnerabilities (re-post with some edit)
Hot Links is web directory system provided by mrcgiguy.com contain PHP+MySQL version and Perl version and PHP withou MySQL. All version are vulnerabilities If admin backup database will store on server and attacker can download without authorized: http://domain.ext/path/dlback.php?dl=fullback for...
iWare Pro <= 5.0.4 (chat_panel.php) Remote Code Execution Vulnerability
+------------------------------------------------------------------------------------------- + iWare Pro = 5.0.4 chatpanel.php Remote Code Execution Vulnerability +------------------------------------------------------------------------------------------- + Affected Software .: iWare Professional...
iWare Pro 5.0.4 - chat_panel.php Remote Code Execution
iWare Pro 5.0.4 - chatpanel.php Remote Code Execution +------------------------------------------------------------------------------------------- + iWare Pro +------------------------------------------------------------------------------------------- + Details: + iWare...
[KAPDA::#60] Mambo V4.6.x vulnerabilities
KAPDA New advisory Vendor: http://www.mamboserver.com Vulnerable Versions: 4.6.x Bug: XSS, Html Injection, Sql Injection Exploitation: Remote with browser Description: -------------------- Mambo is a feature-rich dynamic portal engine/content management tool capable of building sites from several...
Multiple XSS Vulnerabilities in KnowledgeBank 1.01
Armorize Technologies Security Advisory Advisory No: Armorize-ADV-2006-0006 Status: Partial Date: 2006/10/19 Summary: Armorize-ADV-2006-0006 discloses multiple cross-site scripting vulnerabilities that are found in KnowledgeBank http://sourceforge.net/projects/knowledgebank/, which is a is a...
php security update
CentOS Errata and Security Advisory CESA-2006:0669 Updated PHP packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting...
modulebased.txt
+ModuleBased CMSMBCMS multiple remote file Inclusion +discripton:MBCMS ModuleBased CMS is a new CMS designed for ease of use and customability. It is designed +for PHP/MySQL and it is easy to write new modules or templates to suit a particular website. +version:alfa 1 +vendor...
Mafia Moblog <= 6 (pathtotemplate) Remote File Inclusion Vulnerability
------------------------------------------------------------------------ ------------------- Mafia Moblog pathtotemplate Remote File Inclusion ------------------------------------------------------------------------ ------------------- Author : Sh3ll Date : 2006/04/30 HomePage : http://www.sh3ll....
CVE-2006-3965
Banex PHP MySQL Banner Exchange 2.21 stores lib.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as database usernames and passwords...
CVE-2006-3965
Banex PHP MySQL Banner Exchange 2.21 stores lib.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as database usernames and passwords...
CVE-2006-3963
Multiple SQL injection vulnerabilities in Banex PHP MySQL Banner Exchange 2.21 allow remote attackers to execute arbitrary SQL commands via the 1 sitename parameter to a signup.php, and the 2 id, 3 deleteuserbanner, 4 viewmem, 5 viewmemunb, 6 viewunmem,or 7 deleteuser parameters to b admin.php...