phpBB Tweaked 3 - phpbb_root_path Remote File Inclusion

phpBB Tweaked 3 - phpbbrootpath Remote File Inclusion ----------------------------------------------- Phpbb Tweaked phpbbrootpath Remote File Include Exploit ----------------------------------------------- Author: xoron xoron.biz - xoron.info ----------------------------------------------- Code:...

VisoHotlink "mosConfig_absolute_path"远程文件包含漏洞

VisoHotlink是一款基于PHP的WEB应用程序。 VisoHotlink不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'includes/functions.visohotlink.php'脚本对用户提交的'"mosConfigabsolutepath"'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 VisoHotlink 1.x 目前没有解决方案提供： http://www.easy-script.com/compt.php?id=3312 !/usr/bin/perl VisoHotlink 1.0...

MySpeach 2.1b - up.php Remote File Inclusion

MySpeach 2.1b - up.php Remote File Inclusion ------------------------------------------------------------------------------------------------------------------------ Script:MySpeach Affected Version:beta2.1 and maybe older Downlaoad:http://www.graphiks.net/scripts/chat/myspeach-2.1beta.zip...

Neon Labs Website 3.2 - 'nl.php?g_strRootDir' Remote File Inclusion

------------------------------------------------------------------------------------------------------------------------ Script:nlws Affected Version:3.2 Downlaoad:http://neonlabs.structum.com.mx/pkgs/nlws3-2.zip...

CVE-2007-0383

WDaemon 9.5.4 allows remote attackers to access the /WorldClient.dll URI on TCP port 3000, which has unknown impact. NOTE: The researcher reports that the vendor response was "this is not a security bug...

CVE-2007-0383

WDaemon 9.5.4 allows remote attackers to access the /WorldClient.dll URI on TCP port 3000, which has unknown impact. NOTE: The researcher reports that the vendor response was "this is not a security bug...

CVE-2007-0383

CVE-2007-0383 concerns WDaemon 9.5.4, where remote attackers can access the "/WorldClient.dll" URI on TCP port 3000. The impact is described as unknown in the sources, with the vendor reportedly stating this is not a security bug. The connected documents provide concrete details about the affecte...

Oreon <= 1.2.3 RC4 (lang/index.php file) Remote InclusionVulnerability

No description provided by source. ------------------------------------------------------------------------------------------------------------------------ Script:oreon-1.2.3-RC4 Downlaoad:http://www.oreon-project.org/...

Fedora Core 5 : mozilla-1.7.13-1.1.fc5 (2006-487)

Updated mozilla packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Fedora Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Several bugs...

x-news 1.1 Password Disclosure Vulnerability

x-news 1.1 Password Disclosure Vulnerability Affected Software: x-news 1.1 x-news Website: http://xqus.com Bugfounder: bd0rk Website: www.soh-crew.it.tt Contact: bd0rkathackermail.com Greetings: str0ke, Perle, TheJT, ajann +Exploit: http://target/xnewspath/news/db/users.txt Showexample:...

EternalMart Guestbook 1.10 (admin/auth.php) Remote Inclusion Vuln

Exploit for unknown platform in category web applications ================================================================= EternalMart Guestbook 1.10 admin/auth.php Remote Inclusion Vuln ================================================================= EternalMart Guestbook 1.1.0 emgbadminpath...

GnuPG: remotely controllable function pointer [CVE-2006-6235]

GnuPG: remotely controllable function pointer CVE-2006-6235 =============================================================== 2006-12-04 Summary ======= Tavis Ormandy of the Gentoo security team identified a severe and exploitable bug in the processing of encrypted packets in GnuPG. Please do not...

tnftpd.txt

LAMERZ!!!!! KEEP ON HACKING!!! KEEP THAT FUCKING PRIVATE!!! Greetings to the elite guys, thank you for your time. signed, eliteboy $$$ NetBSD ftpd and ports Remote ROOOOOT $HOLE$ $$$ About tnftpd is a port of the NetBSD FTP server to other systems. It offers many enhancements over the traditional...

Mambo Component com_flyspray 1.0.1 - Remote File Disclosure

Mambo Component comflyspray 1.0.1 - Remote File Disclosure | \ | / | \ \ / | | | | | \ / | \ \ / / | | | | '| | |/| |/ \ / / \ / / | | '| | | / | | || | | | | | | | | \ / | | | | || \ \ |/|| || ||,//\ / ||| ,|/ Compononent name:comflyspray Affected Version:1.0.1...

Photo Cart 3.9 (adminprint.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================= Photo Cart 3.9 adminprint.php Remote File Include Vulnerability ================================================================= PhotoCart 3.9 adminprint.php Remote File...

[ECHO_ADV_57_2006]Soholaunch Pro <=4.9 r36 Multiple Remote File Inclusion Vulnerability

----------------------------------------------------------------------------------------------- ECHOADV57$2006Soholaunch Pro =4.9 r36 Multiple Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------------------- Author : Dedi Dwianto...

tikiwiki-1.9.5.txt

/==========================================/ //tikiwiki version 1.9.5 CVS -Sirius- PoC // Product: Tikiwiki // URL: http://tikiwiki.org/ // RISK: critical /==========================================/ there's a critical security bug in tikiwiki version 1.9.5 CVS -Sirius- a anonymous user , can dum...

tikiwiki 1.9.5 mysql password disclosure & xss

/==========================================/ //tikiwiki version 1.9.5 CVS -Sirius- PoC // Product: Tikiwiki // URL: http://tikiwiki.org/ // RISK: critical /==========================================/ there's a critical security bug in tikiwiki version 1.9.5 CVS -Sirius- a anonymous user , can dum...

TikiWiki 1.9.5 Sirius (sort_mode) Information Disclosure Vulnerability

No description provided by source. /==========================================/ //tikiwiki version 1.9.5 CVS -Sirius- PoC // Product: Tikiwiki // URL: http://tikiwiki.org/ // RISK: critical /==========================================/ there's a critical security bug in tikiwiki version 1.9.5 CVS...

PwsPHP <= 1.1 (themes/fin.php) Remote File Include Vulnerablity

========================================================================================================================== PwsPHP v1.1 theme File inclusion Vulnerablity =============================================== Script:PwsPHP ============= Version:1.1 ============= script...