20 matches found
CVE-2026-48244: Use of Hard-coded Credentials
Open ISES Tickets before 3.44.2 embeds a hardcoded Google Maps API key in settings.inc.php that is committed to the public source repository. The key can be extracted by anyone with read access to the source and used to make Google Maps Platform requests billed against the original owner's Google...
CVE-2020-25134
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to the fact that there is an unrestricted possibility of loading any file with an inc.php extension. Inclusion of other files even though...
CVE-2020-25134: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to the fact that there is an unrestricted possibility of loading any file with an inc.php extension. Inclusion of other files even though...
CVE-2003-0586: Undefined Security Weakness
Brooky eStore 1.0.1 through 1.0.2b allows remote attackers to obtain sensitive path information via a direct HTTP request to settings.inc.php...
fuzzylime cms <= 3.0 - Local File Inclusion Vulnerability
No description provided by source. not sec group http://www.notsec.com [email protected] fuzzylime cms = 3.0 Class: Local File Inclusion Found: 08/09/2007 Site: http://cms.fuzzylime.co.uk/ Download: http://cms.fuzzylime.co.uk/files/cms.zip Author: wHITeShEEp of notsec Contact: [email protected]...
Discuz!7.0-7.2后台settings.inc.php中写shell漏洞
漏洞详情： if$operation == 'uc' && iswriteable'./config.inc.php' && $isfounder $ucdbpassnew = $settingsnew'uc''dbpass' == '' ? UCDBPW : $settingsnew'uc''dbpass'; if$settingsnew'uc''connect' $ucdblink = @mysqlconnect$settingsnew'uc''dbhost', $settingsnew'uc''dbuser', $ucdbpassnew, 1; if!$ucdblink...
fuzzylime cms 3.03 (track.php p) Local File Inclusion Vulnerability
No description provided by source. / --+---=+--==+++++ -- FuzzyLime 3.03 Local File Iclude PoC -0- -======+++++---'''' -- Vuln - code/track.php $m = $GETm; $p = $GETp; //1 include "settings.inc.php"; if!isset$POSTurl || !isset$POSTtitle || !isset$POSTexcerpt //2 header"Location:...
Fuzzylime CMS 3.03 - track.php Local File Inclusion
Fuzzylime CMS 3.03 - track.php Local File Inclusion / --+---=+--==+++++ -- FuzzyLime 3.03 Local File Iclude PoC -0- -======+++++---'''' -- Vuln - code/track.php $m = $GETm; $p = $GETp; //1 include "settings.inc.php"; if!isset$POSTurl || !isset$POSTtitle || !isset$POSTexcerpt //2 header"Location:...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in PHPauction GPL 2.51 allow remote attackers to execute arbitrary PHP code via a URL in the includepath parameter to 1 converter.inc.php, 2 messages.inc.php, and 3 settings.inc.php in includes/...
CVE-2008-1416: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in PHPauction GPL 2.51 allow remote attackers to execute arbitrary PHP code via a URL in the includepath parameter to 1 converter.inc.php, 2 messages.inc.php, and 3 settings.inc.php in includes/...
phpAuction GPL Enhanced 2.51 - Multiple Remote File Inclusions
phpAuction GPL Enhanced 2.51 - Multiple Remote File Inclusions Name : PHPauction GPL 2.51 Multiple Remote File Include Vulnerabilities Download From : http://www.johnrayfield.com/phpauction/phpauction-gpl-enhanced-251.zip Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM BlackxHat , BlackBox , alwheed Home...
fuzzylime-rfi.txt
.-----------------------------------------------------------------------------. | vuln.: fuzzylime cms = 3.01 Remote File Inclusion Vulnerability | | download: http://cms.fuzzylime.co.uk/ | | dork: "powered by fuzzylime" | | | | author: [email protected] | | homepage: http://irk4z.wordpress.com/ | |...
fuzzylime cms <= 3.01 (admindir) Remote File Inclusion Vulnerability
No description provided by source. .-----------------------------------------------------------------------------. | vuln.: fuzzylime cms = 3.01 Remote File Inclusion Vulnerability | | download: http://cms.fuzzylime.co.uk/ | | dork: "powered by fuzzylime" | | | | author: [email protected]&nb...
fuzzylime cms <= 3.01 (admindir) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ==================================================================== fuzzylime cms = 3.01 admindir Remote File Inclusion Vulnerability ====================================================================...
CVE-2007-5705: Improper Control of Generation of Code
Unspecified vulnerability in the Settings component in the administration system in Jeebles Directory 2.9.60 allows remote authenticated administrators to execute arbitrary PHP code via unspecified vectors related to settings.inc.php. NOTE: the provenance of this information is unknown; the detai...
Ajax File Browser 3b (settings.inc.php approot) RFI Vulnerability
No description provided by source. Ajax File Browser 3 Beta Remote File Inclusion found by the "arfis project" http://arfis.wordpress.com/ Project Info: ------------- Name: Ajax File Browser Link: http://sourceforge.net/projects/ajaxfb/ DL:...
Ajax File Browser 3b - settings.inc.php?approot Remote File Inclusion
Ajax File Browser 3b - settings.inc.php?approot Remote File Inclusion Ajax File Browser 3 Beta Remote File Inclusion found by the "arfis project" http://arfis.wordpress.com/ Project Info: ------------- Name: Ajax File Browser Link: http://sourceforge.net/projects/ajaxfb/ DL:...
PT-2006-5835 · Net2Ftp · Net2Ftp
Name of the Vulnerable Software and Affected Versions: net2ftp versions 0.1 through 0.62 Description: A remote file inclusion issue in index.php allows remote attackers to execute arbitrary PHP code via a URL in the application rootdir parameter. However, this issue has been disputed by a...
CVE-2005-0606: Undefined Security Weakness
Cross-site scripting XSS vulnerability in settings.inc.php for CubeCart 2.0.0 through 2.0.5, as used in multiple PHP files, allows remote attackers to inject arbitrary HTML or web script via the 1 catid, 2 PHPSESSID, 3 viewdoc, 4 product, 5 session, 6 catname, 7 search, or 8 page parameters...
