7186 matches found
PHP AMX 0.90 - pluginsmain.php Remote File Inclusion
PHP AMX 0.90 - pluginsmain.php Remote File Inclusion phpamx 0.90 Class: Remote|Local File Include Vulnerability Patch: Unavailable Published 2006/10/18 Remote: Yes Local: No Type: High Site: http://sourceforge.net/projects/phpamx/ Author: MP Contact: [email protected] Vuln Code...
Php AMX 0.90 (plugins/main.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================= Php AMX 0.90 plugins/main.php Remote File Include Vulnerability ================================================================= phpamx 0.90 Class: Remote|Local File Includ...
PHPRecipeBook <= 2.35 (g_rb_basedir) Remote File Include Exploit
Exploit for unknown platform in category web applications ================================================================ PHPRecipeBook = 2.35 grbbasedir Remote File Include Exploit ================================================================ !/usr/bin/perl PHPRecipeBook 2.36 Class: Remote...
PHPmybibli <= 3.0.1 Multiple Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ================================================================== PHPmybibli = 3.0.1 Multiple Remote File Inclusion Vulnerabilities ================================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \...
Easynews 4.4.1 - admin.php Authentication Bypass
Easynews 4.4.1 - admin.php Authentication Bypass +------------------------------------------------------------------------------------------- + Easynews +------------------------------------------------------------------------------------------- + Details: + Easynews doesn't properly check to...
Easynews <= 4.4.1 (admin.php) Authentication Bypass Vulnerability
Exploit for unknown platform in category web applications ================================================================= Easynews = 4.4.1 admin.php Authentication Bypass Vulnerability =================================================================...
Comdev One Admin 4.1 - Adminfoot.php Remote Code Execution
Comdev One Admin 4.1 - Adminfoot.php Remote Code Execution !/usr/bin/php //oneadmin/adminfoot.php?pathdocroot= Googledork: inurl:/oneadmin/ w4ck1ng - w4ck1ng.com / if!$argv3 die"Usage: php $argv0 host path command\n Usage Example: php $argv0 domain.com /dolphin/ whoami\n"; function send$host, $pu...
Boonex Dolphin <= 5.2 index.php Remote Code Execution Exploit
No description provided by source. !/usr/bin/php ?php / Boonex Dolphin 5.2 Remote Command Execution / File Inclusion Vulnerability Note: Requires register globals to be on, and magic quotes gpc to be off. Usage: php script.php host path command Usage Example: php script.php domain.com /dolphin/...
Comdev One Admin 4.1 - 'Adminfoot.php' Remote Code Execution
!/usr/bin/php //oneadmin/adminfoot.php?pathdocroot= Googledork: inurl:/oneadmin/ w4ck1ng - w4ck1ng.com / if!$argv3 die"Usage: php $argv0 host path command\n Usage Example: php $argv0 domain.com /dolphin/ whoami\n"; function send$host, $put global $data; $conn = fsockopen gethostbyname$host,"80" ;...
Boonex Dolphin 5.2 - index.php Remote Code Execution
Boonex Dolphin 5.2 - index.php Remote Code Execution !/usr/bin/php //templates/tmpldfl/scripts/index.php?dirinc= w4ck1ng - w4ck1ng.com / if!$argv3 die"Usage: php $argv0 host path command\n Usage Example: php $argv0 domain.com /dolphin/ whoami\n"; function send$host, $put global $data; $conn =...
CyberBrau 0.9.4 - '/forum/track.php' Remote File Inclusion
--------------------------------------------------------------------------- CyberBrau = 0.9.4 path Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net : Remote : Yes Critica...
Flatnuke 2.5.8 - userlang Local Inclusion Delete All Users
Flatnuke 2.5.8 - userlang Local Inclusion Delete All Users !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i;...
RHEL 4 : kernel (RHSA-2006:0689)
Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...
Flatnuke 2.5.8 (userlang) Local Inclusion / Delete All Users Exploit
Exploit for unknown platform in category web applications ==================================================================== Flatnuke 2.5.8 userlang Local Inclusion / Delete All Users Exploit ==================================================================== !/usr/bin/php -q -d shortopentag=o...
CentOS 4 : kernel (CESA-2006:0689)
Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...
[ECHO_ADV_51$2006] docmint <= 2.0 (MY_ENV[BASE_ENGINE_LOC]) Remote File Inclusion Vulnerability
ECHOADV51$2006 ----------------------------------------------------------------------------------------- ECHOADV51$2006 docmint = 2.0 MYENVBASEENGINELOC Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...
OpenDock Easy Doc 1.4 - 'doc_directory' File Inclusion
ECHOADV49$2006 ----------------------------------------------------------------------------------------------- ECHOADV49$2006OpenDock Easy Doc =1.4 docdirectory Multiple Remote File Inclusion Vulnerability...
PHP Live! <= 3.1 help.php Remote File Inclusion vulnerability
/ -------------------------------------------------------- Neo Security Team NST - Advisory 25 - 08/10/06 -------------------------------------------------------- Program: PHP Live! Homepage: http://www.phplivesupport.com/ Vulnerable Versions: 3.1 and prior Risk: High! Impact: Critical Risk -==PH...
UBB.threads doeditconfig Arbitrary Command Injection
The version of UBB.threads installed on the remote host fails to sanitize input to the 'thispath' and 'config' parameters of the 'admin/doeditconfig.php' script before using them to update the application's configuration file. Provided PHP's 'registerglobals' setting is enabled, an unauthenticate...
CVE-2006-4876
Multiple SQL injection vulnerabilities in Jupiter CMS allow remote attackers to execute arbitrary SQL commands via 1 the user name during login, or the 2 key or 3 fpwusername parameters in modules/register...