Loggix Project 9.4.5 (refer_id) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= Loggix Project 9.4.5 referid Blind SQL Injection Vulnerability ================================================================= Salvatore "drosophila" Fresta + Application:...

PT-2009-3647 · Pixie · Pixie Cms

Name of the Vulnerable Software and Affected Versions: Pixie CMS version 1.01a Description: The issue allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header in a request, specifically in the referral function in admin/lib/lib logs.php. Recommendations: For Pixie CMS...

Free Arcade Script 1.0 SQL Injection / Shell Upload

.--------------------------------------------------------------------------. | Web Application : Free Arcade Script 1.0 | | Homepage : http://www.freearcadescript.net | |--------------------------------------------------------------------------| | Vulnerability : SQL Injection + Remote PHP file...

Free Arcade Script 1.0 - Authentication Bypass / Arbitrary File Upload

.--------------------------------------------------------------------------. | Web Application : Free Arcade Script 1.0 | | Homepage : http://www.freearcadescript.net | |--------------------------------------------------------------------------| | Vulnerability : SQL Injection + Remote PHP file...

Free Arcade Script 1.0 - Authentication Bypass Arbitrary File Upload

Free Arcade Script 1.0 - Authentication Bypass Arbitrary File Upload .--------------------------------------------------------------------------. | Web Application : Free Arcade Script 1.0 | | Homepage : http://www.freearcadescript.net |...

CVE-2008-6490

function/updatexml.php in FLABER 1.1 and earlier allows remote attackers to overwrite arbitrary files by specifying the target filename in the targetfile parameter. NOTE: this can be leveraged for code execution by overwriting a PHP file, as demonstrated using function/uploadfile.php...

Design/Logic Flaw

function/updatexml.php in FLABER 1.1 and earlier allows remote attackers to overwrite arbitrary files by specifying the target filename in the targetfile parameter. NOTE: this can be leveraged for code execution by overwriting a PHP file, as demonstrated using function/uploadfile.php...

Libra PHP File Manager 2.0 Local File Inclusion

! /usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Libra PHP File Manager eNYe-Sec - www.enye-sec.org You can scale directories and read any file that you have permissions use LWP::UserAgent; $ua = LWP::UserAgent-new; print "\e2J"; system$^O eq 'MSWin32' ? 'cls' :...

WikkiTikkiTavi 'upload.php'任意文件上传漏洞

BUGTRAQ ID: 33647 CNCAN ID：CNCAN-2009020702 WikkiTikkiTavi是一款Wiki引擎。 WikkiTikkiTavi 'upload.php'脚本存在漏洞，远程攻击者可以利用漏洞上传任意PHP文件。 攻击者通过上传恶意PHP文件，可导致以WEB权限执行任意命令。 WikkiTikkiTavi 1.11 厂商解决方案 目前供应商没有提供补丁信息： http://tavi.sourceforge.net/...

Traidnt UP 1.0 - Arbitrary File Upload

Traidnt UP 1.0 - Arbitrary File Upload ================================================================================================ ================================================================================================ Traidnt UP Version 1.0. remote file upload vulnerability...

Traidnt UP Version 1.0 Remote File Upload Vulnerability

No description provided by source. ================================================================================================ ================================================================================================ Traidnt UP Version 1.0. remote file upload vulnerability...

Coppermine Photo Gallery 1.4.19 Remote PHP File Upload Vulnerability

No description provided by source. Written By Michael Brooks Special thanks to str0ke! Coppermine Photo gallery - Remote PHP File Upload Affects: v1.4.19 Homepage: http://coppermine-gallery.net/ 5,239,057 downloads from sf.net! For this attack we need registerglobals=on . The problem is that the...

Coppermine Photo Gallery 1.4.19 Remote PHP File Upload Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Coppermine Photo Gallery 1.4.19 Remote PHP File Upload Vulnerability ==================================================================== Written By Michael Brooks...

CVE-2008-5938

PHP remote file inclusion vulnerability in assets/snippets/reflect/snippet.reflect.php in MODx CMS 0.9.6.2 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the reflectbase parameter...

Memberkit 1.0 Remote PHP File Upload Vulnerability

Exploit for unknown platform in category web applications ================================================== Memberkit 1.0 Remote PHP File Upload Vulnerability ================================================== =================================================================...

ThePortal 2.2 Arbitrary Remote File Upload Exploit

Exploit for unknown platform in category web applications ================================================== ThePortal 2.2 Arbitrary Remote File Upload Exploit ================================================== theportal2 v2.2 Auth bypass file upload -------------------- You need curl to run it...

Mini File Host 1.x Arbitrary PHP File Upload Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: Mini File Host Version: All version Vendor : http://www.galaxyscripts.com Dork: inurl:index.php?page=img Powered By Mini File Host Author : PouyaServer , [email protected] Vulnerability ...

Mini File Host 1.x Arbitrary PHP File Upload Vulnerability

Exploit for unknown platform in category web applications ========================================================== Mini File Host 1.x Arbitrary PHP File Upload Vulnerability ========================================================== --------------------------------------------------------- Port...

senditpro-upload.txt

AlstraSoft SendIt Pro Remote File Upload ---------------------------------------------------------- Discovered By: ZoRLu Date: 12.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : dork: "Powered by AlstraSoft SendIt Pro" my bug...

e107fmpro-upload.txt

| | | \ \ \ / / / \ / | / | / | | | | | | \ V / / \ | | | | | | | | | | | / \ | || | | | | | || || \ || // \ | | | e107 Plugin fm pro v1 Multiple Remote Vulnerabilities I- Remote File Disclosure / Write File /e107plugins/fmprov1/fmp.php?fmdir=&fmaction=confirmeditfile&fmfilename=File II-...