ClearContent Remote/Local File Inclusion

---------------------------------------------------------------------------------------------------- Name : ClearContent Site : http://www.allisclear.com/ Demo : http://demo.allisclear.com/ ---------------------------------------------------------------------------------------------------- Found ...

ClearContent - image.php?url LocalRemote File Inclusion

ClearContent - image.php?url LocalRemote File Inclusion ---------------------------------------------------------------------------------------------------- Name : ClearContent Site : http://www.allisclear.com/ Demo : http://demo.allisclear.com/...

Citrix XenCenterWeb Multiple Vulnerabilities

Secure Network - Security Research Advisory Vuln name: Citrix XenCenterWeb Multiple Vulnerabilities Systems affected: Citrix XenCenterWeb Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL: http://www.citrix.com Authors: Alberto Trivero [email protected] - Claudio...

AdminLog 0.5 (valid_login) Authentication Bypass Vulnerability

No description provided by source. + AdminLog 0.5 Login Bypass Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + down: http://www.manlyfamily.net/wiki/doku.php?id=programming:php:adminlog + Login Bypass - Conditions : registerglobals = ON - PoC...

CVE-2009-2220

Multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c, when registerglobals is enabled and magicquotesgpc is disabled, allow remote attackers to include and possibly execute arbitrary files via directory traversal sequences in the templatepath parameter to 1 masthead.inc.php, 2...

CVE-2009-2218

Multiple PHP remote file inclusion vulnerabilities in phpCollegeExchange 0.1.5c, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the home parameter to 1 ihead.php, 2 inav.php, 3 usernew2.php, or 4 house/myrents.php; or 5 allbooks.php, 6 home.php,...

MyFusion 6b - settings[locale] Local File Inclusion

MyFusion 6b - settingslocale Local File Inclusion ???????????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ???????????????????????????????????????????????????????????????????????????????????? ?????...

MyFusion 6b Local File Inclusion

┌┌─────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └─────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable...

LightOpenCMS 0.1 (smarty.php cwd) Local File Inclusion Vulnerability

No description provided by source. LightOpenCMS 0.1 smarty.php cwd Local File Inclusion Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://sourceforge.net/project/showfiles.php?groupid=251474...

LightOpenCMS 0.1 - smarty.php?cwd Local File Inclusion

LightOpenCMS 0.1 - smarty.php?cwd Local File Inclusion LightOpenCMS 0.1 smarty.php cwd Local File Inclusion Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download:...

Tribiq CMS 5.0.12c (XSS/LFI) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ Tribiq CMS 5.0.12c XSS/LFI Multiple Remote Vulnerabilities ============================================================...

Campsite 3.3.0 RC1 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= Campsite 3.3.0 RC1 Multiple Remote File Inclusion Vulnerabilities =================================================================...

Elgg (XSS/CSRF/Change Password) Multiple Remote Vulnerabilities

No description provided by source. + CMS Elgg 1.00 XSS;CSRF;Cambia PasswordMultiple Remote Vulnerabilities + Discovered By ThE Lorddemon [email protected] + Vendor:http://elgg.org/ + Greetings: Project MEMI-Bolivia, OpTix, RTM security Group http://zonartm.og Change Password Remotely:...

XOOPS <= 2.3.3 Remote File Disclosure Vulnerability (.htaccess)

No description provided by source. ======================================================================== XOOPS = 2.3.3 Remote Arbitrary File Retrieval ======================================================================== Affected Software : XOOPS = 2.3.3 Author : Luca "daath" De Fulgentis -...

Yogurt 0.3 SQL Injection / XSS

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Name : Yogurt Site : http://sourceforge.net/projects/yogurt/...

School Data Navigator - page LocalRemote File Inclusion

School Data Navigator - page LocalRemote File Inclusion ---------------------------------------------------------------------------------------------------- Name : School Data Navigator Site : http://sourceforge.net/projects/school-data-nav/ Down : http://216.92.6.173/datanavigator/appandreadme.z...

School Data Navigator (page) Local/Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ====================================================================== School Data Navigator page Local/Remote File Inclusion Vulnerability ======================================================================...

S-CMS 2.0b3 - Multiple Local File Inclusions

S-CMS 2.0b3 - Multiple Local File Inclusions || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

DEBIAN-CVE-2009-1960

inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via the configcascademaindefault parameter to doku.php. NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp://...

UBUNTU-CVE-2009-1960

inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via the configcascademaindefault parameter to doku.php. NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp://...