phpmyadmin -- Cross Site Scripting Vulnerabilities

Secunia report: Some vulnerabilities have been reported in phpMyAdmin, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed via unspecified parameters to files in /libraries is not properly sanitised before being returned to the user. This can be...

XSS on plausible insecure PHP installation

PMASA-2008-4 Announcement-ID: PMASA-2008-4 Date: 2008-06-23 Summary XSS on plausible insecure PHP installation Description We received an advisory from Tim Starling Wikimedia, and we wish to thank him for his work. Some scripts in the /libraries directory were vulnerable to XSS. Severity We...

CVE-2008-2690

CVE-2008-2690 describes multiple PHP remote file inclusion vulnerabilities in BrowserCRM 5.002.00 triggered when register_globals is enabled. The issues allow remote attackers to execute arbitrary PHP code via a URL in the bcrm_pub_root parameter to one of five files under pub/ (kb.php, login.php...

Directory traversal

Multiple directory traversal vulnerabilities in ErfurtWiki R1.02b and earlier, when registerglobals is enabled, allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 ewikiid and 2 ewikiaction parameters to fragments/css.php, and possibly the 3 id parameter ...

CVE-2008-2672

CVE-2008-2672 affects ErfurtWiki

PixelPost 1.7.1 File Disclosure

PixelPost 1.7.1 File Disclosure by Charles "real" F. charlesfolathotmail.fr http://realn.free.fr Requires registerglobals = On magicquotesgpc = Off PROOF OF CONCEPT TARGET URL: http://url/addons/copyfolder.php?...

softpedia-upload.txt

SiteXS CMS Remote File Upload Vulnerability Discovered by : Ciph3r E-Mail : [email protected] CMS: sitexs-0.1.1 CMS All Version Vulnerable Download CMS : http://dfn.dl.sourceforge.net/sourceforge/sitexs/sitexs-0.1.1.tar.gz Sp TANX4 : google.com ; milw0rm.com ; sourceforge.net SP TANX2 :...

CVE-2008-2481

CVE-2008-2481 affects phpRaider 1.0.7 and 1.0.7a. The issue is a PHP remote file inclusion in authentication/phpbb3/phpbb3.functions.php that is exploitable when register_globals is enabled. An attacker can cause arbitrary PHP code execution by supplying a URL in the pConfig_auth[phpbb_path] para...

Remote file inclusion

PHP remote file inclusion vulnerability in kmitaadmin/kmitam/htmlcode.php in Kmita Mail 3.0 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the file parameter...

CVE-2008-2198

The CVE-2008-2198 entry describes a PHP remote file inclusion vulnerability in Kmita Tellfriend 2.0 and earlier, specifically in kmitaadmin/kmitat/htmlcode.php when register_globals is enabled. The root cause is the ability to specify a URL in the file parameter, allowing an attacker to execute a...

CVE-2008-2199

Kmita Mail 3.0 and earlier contains a PHP remote file inclusion vulnerability in kmitaadmin/kmitam/htmlcode.php when register_globals is enabled. The underlying issue is RFI via the file parameter, allowing remote code execution of arbitrary PHP if attackers supply a URL. Affected component: Kmit...

CVE-2008-2199

PHP remote file inclusion vulnerability in kmitaadmin/kmitam/htmlcode.php in Kmita Mail 3.0 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the file parameter...

bigace-rfi.txt

/ \ @ /|\ /|\ |-| / | \ /|/\ / | \ @ | |--------------------/--|-voV---|'/--Vov-|-----------------------|-| |-| '^ o o '^ | | | | \Y/' |-| |-| | | | | -=ShAd0w-CrEw=- |-| |-| | | | | |-| ||| | @ l /\ / \ /\ l |-| l / V \ \ V \ l @ l/ \I \ /' ---------------------------------------------- GrEeTs...

BIGACE 2.4 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= BIGACE 2.4 Multiple Remote File Inclusion Vulnerabilities ========================================================= / \ @ /|\ /|\ |-| / | \ /|/\ / | \ @ |...

BigACE 2.4 - Multiple Remote File Inclusions

/ \ @ /|\ /|\ |-| / | \ /|/\ / | \ @ | |--------------------/--|-voV---|'/--Vov-|-----------------------|-| |-| '^ o o '^ | | | | \Y/' |-| |-| | | | | -=ShAd0w-CrEw=- |-| |-| | | | | |-| ||| | @ l /\ / \ /\ l |-| l / V \ \ V \ l @ l/ \I \ /' ---------------------------------------------- GrEeTs...

txtCMS 0.3 (index.php) Local File Inclusion Exploit

No description provided by source. !-- Name : txtCMS 0.3 index.php Local File Inclusion Exploit Author : cOndemned Conditions : Registerglobals = On / Magicquotesgpc = Off Greetz : irk4z, GregStar, ZaBeaTy, ElusiveN, Avanturka : -- html head titletxtCMS 0.3 index.php Local File Inclusion...

sazcart151-rfi.txt

-========================================== ViVa Islam + YeMeN ====================================- Name : SazCart 1.5.1 Multiple Remote File Include Vulnerability Download From : http://www.sazcart.com/site/download.php?id=16 Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM BlackxHat , BlackBox , aLwHEe...

txtCMS 0.3 - 'index.php' Local File Inclusion

txtCMS 0.3 index.php Local File Inclusion Exploit milw0rm.com 2008-05-09...

txtCMS 0.3 - index.php Local File Inclusion

txtCMS 0.3 - index.php Local File Inclusion txtCMS 0.3 index.php Local File Inclusion Exploit milw0rm.com 2008-05-09...

SazCart 1.5.1 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ SazCart 1.5.1 Multiple Remote File Inclusion Vulnerabilities ============================================================ -========================================== ViVa Islam +...