phpSANE file_save Parameter Remote File Include

The remote web server is running phpSANE, an open source web-based, front-end to scanners using SANE Scanner Access Now Easy. The version of phpSANE installed on the remote host fails to sanitize user-supplied input to the 'filesave' parameter of the 'save.php' script before using it to include P...

Facil Helpdesk - 'kbase/kbase.php' URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/42528/info Facil Helpdesk is prone to multiple input-validation vulnerabilities, including a cross-site scripting vulnerability, a local file-include vulnerability, and a remote file-include vulnerability. An attacker can exploit these issues to execute...

NTSOFT BBS E-Market Professional XSS

+==========================================================================+ + NTSOFT BBS E-Market Professional & XSS - Remote Evil Java + +==========================================================================+ Authors: Ivan Sanchez Product: BBS E-Market Professional Vendor Overview: NTSOFT...

MyDLstore Meta Search Engine Script 1.0 - url Remote File Inclusion

MyDLstore Meta Search Engine Script 1.0 - url Remote File Inclusion source: https://www.securityfocus.com/bid/43455/info MyDLstore Meta Search Engine Script is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this...

Swinger Club Portal - start.php?go Remote File Inclusion

Swinger Club Portal - start.php?go Remote File Inclusion source: https://www.securityfocus.com/bid/43622/info Swinger Club Portal is prone to an SQL-injection vulnerability and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit...

Swinger Club Portal - start.php?id SQL Injection

Swinger Club Portal - start.php?id SQL Injection source: https://www.securityfocus.com/bid/43622/info Swinger Club Portal is prone to an SQL-injection vulnerability and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these...

FireStats < 1.6.2 Multiple Vulnerabilities

According to its version number, the install of FireStats running on the remote host is affected by multiple vulnerabilities : - A remote file include vulnerability in the 'fsjavascript' parameter of 'firestats-wordpress.php'. CVE-2009-2143 - An unspecified SQL injection vulnerability...

Swinger Club Portal - 'start.php?id' SQL Injection

source: https://www.securityfocus.com/bid/43622/info Swinger Club Portal is prone to an SQL-injection vulnerability and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to access or modify data, exploit...

WordPress DM Albums Plugin 1.9.2 - Remote File Inclusion Vulnerability

Remote File Include RFI vulnerability was found in album.php file. It allows an attacker to include a remote file and get access to the server. Solution Update plugin...

AIOCP 1.4 - cp_html2txt.php Remote File Inclusion

AIOCP 1.4 - cphtml2txt.php Remote File Inclusion source: https://www.securityfocus.com/bid/35811/info AIOCP All In One Control Panel is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to...

phpCollegeExchange 0.1.5c (RFI/LFI/XSS) Multiple Vulnerabilities

No description provided by source. ┌┌─────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └─────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes a...

phpCollege Exchange 0.1.5c RFI/LFI/XSS

┌┌─────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └─────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable...

phpCollegeExchange 0.1.5c (RFI/LFI/XSS) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ phpCollegeExchange 0.1.5c RFI/LFI/XSS Multiple Vulnerabilities ================================================================...

phpCollegeExchange 0.1.5c - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting

???????????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ???????????????????????????????????????????????????????????????????????????????????? ????? From The Ashes and Dust Rises An Unimaginable...

Campsite 3.3.0 RC1 - Multiple Remote File Inclusions

???????????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ???????????????????????????????????????????????????????????????????????????????????? ????? From The Ashes and Dust Rises An Unimaginable...

Campsite 3.3.0 RC1 - Multiple Remote File Inclusions

Campsite 3.3.0 RC1 - Multiple Remote File Inclusions ???????????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ???????????????????????????????????????????????????????????????????????????????????? ????...

FireStats 'firestats-wordpress.php' Remote File Include Vulnerability

FireStats is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible. FireStats 1.6.1 is vulnerable; prior versio...

FireStats 'firestats-wordpress.php' Remote File Include Vulnerability

FireStats is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

phpMyTourney adminfunctions.php Remote File Include Vulnerabilities

Hi a bug in phpMyTourney that allows to us to occur a Remote File Include on a Remote machin. Bug : Islamic Republic Of Iran Security Team Www.IrIsT.Ir phpMyTourney adminfunctions.php Remote File Include Vulnerabilities Download......: http:/phpmytourney.sourceforge.net file; dminfunctions.php bu...

Joomla Component com_vehiclemanager 1.0 RFI Vulnerability

No description provided by source. =-==-==-==-==-==-==-==X==O==R==O==N==-==-==-==-==-==-==-==-==-==-==-= Joomla comvehiclemanager 1.0 Remote File Include Download: http://ordasoft.com/Download-document/1-Vehicle-Manager-Basic.html...