CVE-2008-3400: Exposure of Sensitive Information to an Unauthorized Actor

XRMS CRM 1.99.2 allows remote attackers to obtain configuration information via a direct request to tests/info.php, which calls the phpinfo function...

XRms 1.99.2 - Remote File Inclusion / Cross-Site Scripting / Information Gathering

XMRS Multiple Vulnerabilities ZeroDay at 25-07-2008 Author: AzzCoder [email protected] Product: http://www.xrms.org/ Product Type: CRM Thanks: coresecurity.com Remote File Inclusion File: activities/workflow-activities.php Variable: $includedirectory Required registerglobals: Yes XSS Multiple...

xrms-rfixss.txt

XMRS Multiple Vulnerabilities ZeroDay at 25-07-2008 Author: AzzCoder [email protected] Product: http://www.xrms.org/ Product Type: CRM Thanks: coresecurity.com Remote File Inclusion File: activities/workflow-activities.php Variable: $includedirectory Required registerglobals: Yes XSS Multiple...

Xpoz SQL-INJECTION, XSS.

Xpoz SQL-INJECTION, XSS. Application: Xpoz PRO Expoze Photo Store ------------ Website: http://xpoze.org -------- Version: Allcurrent 1.0 -------- About: ------ Xpoze is a photo store very easy to use, yet having lots of features to help buyers and sellers to find or sell images after their needs...

vBulletin 3.7.1 PL1 and lower, vBulletin 3.6.10 PL1: XSS in modcp index

====================================================================== Advisory : XSS in modcp index Release Date : June 17th 2008 Application : vBulletin Version : vBulletin 3.7.1 PL1 and lower, vBulletin 3.6.10 PL1 and lower Platform : PHP Vendor URL : http://www.vbulletin.com/ Authors : Jessic...

Exploit for vBulletin "obscure" XSS (3.7.1 & 3.6.10)

====================================================================== Advisory : Exploit for vBulletin "obscure" XSS Release Date : June 13th 2008 Application : vBulletin Version : vBulletin 3.7.1 and lower, vBulletin 3.6.10 and lower Platform : PHP Vendor URL : http://www.vbulletin.com/ Authors...

phpinfo跨站脚本漏洞

php是一款被广泛使用的编程语言，可以被嵌套在html里用做web程序开发。phpinfo是用来显示当前php环境的一个函数，许多站点和程序都会将phpinfo放在自己的站点上或者在程序里显示，但是phpinfo里存在一些安全问题，导致精心构造数据就可以产生一个跨站脚本漏洞，可以被用来进行攻击。 影响所有版本的php和浏览器IE7 建议暂时删除站点的phpinfo页面避免被人利用。 html head META HTTP-EQUIV="CONTENT-TYPE" CONTENT="text/html; charset=UTF-7" /head body iframe...

PHPInv 0.8.0 (LFI/XSS) Multiple Remote Vulnerabilities

No description provided by source. ========================================================= PHPInv 0.8.0 LFI/XSS Multiple Remote Vulnerabilities ========================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hackin...

PHPInv 0.8.0 (LFI/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ====================================================== PHPInv 0.8.0 LFI/XSS Multiple Remote Vulnerabilities ====================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

phpinv 0.8.0 - Local File Inclusion / Cross-Site Scripting

========================================================= PHPInv 0.8.0 LFI/XSS Multiple Remote Vulnerabilities ========================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

CVE-2005-4875

TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the phpinfo function and prints values of unspecified environment variables...

CVE-2005-4875: Exposure of Sensitive Information to an Unauthorized Actor

TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the phpinfo function and prints values of unspecified environment variables...

Newsmanager 2.0 (RFI/RFD/SQL/PB) Multiple Remote Vulnerabilities

No description provided by source. News Manager 2.0 Multiple Vulnerabilities Script : http://superb-east.dl.sourceforge.net/sourceforge/newsrssmanager/newsmanager2.0.zip Dork : "Copyrights 2005 Belgische Federale Overheidsdiensten" 1- Remote File Include Vulnerability...

newsmanager-rfisql.txt

News Manager 2.0 Multiple Vulnerabilities Script : http://superb-east.dl.sourceforge.net/sourceforge/newsrssmanager/newsmanager2.0.zip Dork : "Copyrights © 2005 Belgische Federale Overheidsdiensten" 1- Remote File Include Vulnerability /chreadalso.php?readxmlinclude=http://localhost/020.txt 2-...

newsmanager 2.0 - Remote File Inclusion File Disclosure SQL Injection

newsmanager 2.0 - Remote File Inclusion File Disclosure SQL Injection News Manager 2.0 Multiple Vulnerabilities Script : http://superb-east.dl.sourceforge.net/sourceforge/newsrssmanager/newsmanager2.0.zip Dork : "Copyrights © 2005 Belgische Federale Overheidsdiensten" 1- Remote File Include...

Newsmanager 2.0 (RFI/RFD/SQL/PB) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ Newsmanager 2.0 RFI/RFD/SQL/PB Multiple Remote Vulnerabilities ================================================================ News Manager 2.0 Multiple Vulnerabilities Scri...

newsmanager 2.0 - Remote File Inclusion / File Disclosure / SQL Injection

News Manager 2.0 Multiple Vulnerabilities Script : http://superb-east.dl.sourceforge.net/sourceforge/newsrssmanager/newsmanager2.0.zip Dork : "Copyrights © 2005 Belgische Federale Overheidsdiensten" 1- Remote File Include Vulnerability /chreadalso.php?readxmlinclude=http://localhost/020.txt 2-...

Content Management System for Phprojekt 0.6.1 File Disclosure Vuln

No description provided by source. -------------------------------------------------------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo ---------------------------------------------------------...

Content Management System for Phprojekt 0.6.1 File Disclosure Vuln

Exploit for unknown platform in category web applications ================================================================== Content Management System for Phprojekt 0.6.1 File Disclosure Vuln ==================================================================...

Content Management System for Phprojekt 0.6.1 - File Disclosure

Content Management System for Phprojekt 0.6.1 - File Disclosure -------------------------------------------------------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo ---------------------------------------------------------...