Remote file inclusion

PHP remote file inclusion vulnerability in dm-albums/template/album.php in DM FileManager 3.9.4, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITYFILE parameter...

ClearContent (image.php url) RFI/LFI Vulnerability

No description provided by source. ---------------------------------------------------------------------------------------------------- Name : ClearContent Site : http://www.allisclear.com/ Demo : http://demo.allisclear.com/...

ClearContent (image.php url) RFI/LFI Vulnerability

Exploit for unknown platform in category web applications ================================================== ClearContent image.php url RFI/LFI Vulnerability ==================================================...

ClearContent - '/image.php?url' Local/Remote File Inclusion

---------------------------------------------------------------------------------------------------- Name : ClearContent Site : http://www.allisclear.com/ Demo : http://demo.allisclear.com/ ---------------------------------------------------------------------------------------------------- Found ...

AN Guestbook Local File Inclusion Vulnerability

This host is running AN Guestbook and is prone to Local File Inclusion vulnerability. OpenVAS Vulnerability Test $Id: gbanguestbooklfivuln.nasl 4865 2016-12-28 16:16:43Z teissa $ AN Guestbook Local File Inclusion Vulnerability Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH...

AdminLog 0.5 Authentication Bypass

AdminLog 0.5 Login Bypass Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + down: http://www.manlyfamily.net/wiki/doku.php?id=programming:php:adminlog + Login Bypass - Conditions : registerglobals = ON - PoC...

AdminLog 0.5 - 'valid_login' Authentication Bypass

AdminLog 0.5 Login Bypass Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + down: http://www.manlyfamily.net/wiki/doku.php?id=programming:php:adminlog + Login Bypass - Conditions : registerglobals = ON - PoC...

AdminLog 0.5 - valid_login Authentication Bypass

AdminLog 0.5 - validlogin Authentication Bypass + AdminLog 0.5 Login Bypass Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + down: http://www.manlyfamily.net/wiki/doku.php?id=programming:php:adminlog + Login Bypass - Conditions : registerglobals = ON - PoC...

Php168 a local file inclusion vulnerability-vulnerability warning-the black bar safety net

Php168 a local file inclusion vulnerability Looking at the v6 version,in do/job. php file: ... elseifereg dividing"^-0-9a-zA-Z+$",$GETjob||ereg"^-0-9a-zA-Z+$",$POSTjob requiredirnameFILE."/"." global.php"; ifisfilePHP168PATH."inc/job/$job.php" includePHP168PATH."inc/job/$job.php"; Well,if you ope...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in phpCollegeExchange 0.1.5c, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the home parameter to 1 ihead.php, 2 inav.php, 3 usernew2.php, or 4 house/myrents.php; or 5 allbooks.php, 6 home.php,...

LightOpenCMS 0.1 Local File Inclusion

LightOpenCMS 0.1 smarty.php cwd Local File Inclusion Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://sourceforge.net/project/showfiles.php?groupid=251474 smarty.php define"SMARTYDIR",...

LightOpenCMS 0.1 - 'smarty.php?cwd' Local File Inclusion

LightOpenCMS 0.1 smarty.php cwd Local File Inclusion Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://sourceforge.net/project/showfiles.php?groupid=251474 smarty.php define"SMARTYDIR",...

Directory traversal

PHP remote file inclusion vulnerability in template/simpledefault/admin/masterlayout.php in Mundi Mail 0.8.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the top parameter. NOTE: when allowurlfopen is disabled, directory traversal attacks ar...

CVE-2009-2101

Directory traversal vulnerability in archive.php in TorrentVolve 1.4, when registerglobals is enabled, allows remote attackers to delete arbitrary files via a .. dot dot in the deleteTorrent parameter...

CVE-2009-2095

CVE-2009-2095 is a PHP remote file inclusion vulnerability affecting Mundi Mail 0.8.2 via template/simpledefault/admin/_masterlayout.php. The root cause is register_globals being enabled, allowing an attacker to execute arbitrary PHP code by supplying a URL in the top parameter. When allow_url_fo...

Mundi Mail 0.8.2 (top) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================== Mundi Mail 0.8.2 top Remote File Inclusion Vulnerability ==========================================================...

Directory traversal

Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 GLOBALSSKIN parameter to index.php and the 2 skin...

CVE-2009-2037

Multiple directory traversal vulnerabilities in Online Grades & Attendance 3.2.5 and earlier, and possibly 3.2.6, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 GLOBALSSKIN parameter to index.php and the 2 skin...

CVE-2009-2034

The CVE-2009-2034 entry concerns Yogurt 0.3, with a vulnerability in writemessage.php that arises when register_globals is enabled. This allows remote authenticated users to execute arbitrary SQL commands via the original parameter, indicating an SQL injection in the affected component. The vulne...

yogurt 0.3 - Cross-Site Scripting / SQL Injection

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Name : Yogurt Site : http://sourceforge.net/projects/yogurt/...