4106 matches found
SOL6924 - Insertion of special characters in URL path circumvents Accessibility Scope and Access Control Lists
It is possible to bypass the Deny list, configured in the Accessibility Scope section located on the Portal Access: Web Applications: Master Group Settings page, by inserting certain special characters into a URL path. In FirePass version 6.0, this issue also applies to the Deny list configured...
Sv(ADP) Forum 2.0.3 Remote Password Disclosure Vulnerablity
SvADP Forum 2.0.3 Remote Password Disclosure Vulnerablity S.name:ADP Forum Affected version:2.0.3 Download&Demo:http://www.linux.it/fedro/index.php?pag=scripts&lang=en Risk:Very Highly Critical Author:Dr Max Virus Location:Egypt POC: http:/target/path/users/admin.txt As We see Admin name and hash...
inertianews 0.02b - inertianews_main.php Remote File Inclusion
inertianews 0.02b - inertianewsmain.php Remote File Inclusion +++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + inertianews 0.02b Remote File Include Vulnerability + + + + Found3R: bd0rk || SOH-Crew + + + + eMail: bd0rkathackermail.com + + + + Greetz: str0ke, TheJT, Axel H., Carsten S...
Newxooper-PHP 0.9.1 - mapage.php Remote File Inclusion
Newxooper-PHP 0.9.1 - mapage.php Remote File Inclusion Newxooper-php v0.9.1chemin Remote File Include Vulnerabilty Download:http://www.easy-script.com/newxoope-091.zip Author:Dr Max Virus Location:Egypt Bug in compteur/mapage.php In Line:37 Vul Code: REQUIRE "$chemin/compteur/mapage.txt"; POC:...
PHPFanBase (protection.php) Remote File Include Vulnerability
--------------------------------------|| Viva Palestine ||----------------------------------------- --------------------------------------|| Free Saddam Hussien ||----------------------------------------- PHPFanBase protection.php Remote File Include Vulnerability Found By : CoLd Zero Wasem898...
PHPFanBase 2.x - 'protection.php' Remote File Inclusion
--------------------------------------|| Viva Palestine ||----------------------------------------- --------------------------------------|| Free Saddam Hussien ||----------------------------------------- PHPFanBase protection.php Remote File Include Vulnerability Found By : CoLd Zero Wasem898...
Bandwebsite <= 1.5 (Login) Remote Add Admin Exploit
Exploit for unknown platform in category web applications =================================================== Bandwebsite Name: Pass: 0day.today 2018-03-28...
Bandsite portal system Admin Added Access
!-- - Product : Bandsite portal system - Website : http://membres.lycos.fr/fluxx/bandwebsite.php - Author : H0tTurk- WebSiteVersion:1.x - Problem : Admin Added Access. Bandsite is an online portal system designed for Bands. Features: themes support, news posting, audio sections, guestbook, tour...
PHPMyCMS 0.3 - basic.inc.php Remote File Inclusion
PHPMyCMS 0.3 - basic.inc.php Remote File Inclusion v1per-haCker How I Can lives Without FooL Programmer! ======================================================================================= phpmycms RFI =======================================================================================...
PHPMyCMS 0.3 - 'basic.inc.php' Remote File Inclusion
v1per-haCker How I Can lives Without FooL Programmer! ======================================================================================= phpmycms RFI ======================================================================================= Information:- Scripts: phpmycms download :...
mxBB Module ErrorDocs 1.0 (common.php) Remote Inclusion Vulnerability
No description provided by source. = mxBB Module mxerrordocs 1.0 Remote File Include Vulnerability = Mod-Download: http://forums.phpmix.org/download.php?id=27 = Bugfounder: bd0rk || SOH-Crew = Vulnerable code in common.php = Greetings: str0ke, broken-error, Martn & m0rphin + Exploit:...
security flaw
Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to "certain characters in session names," including special characters that are frequently associated with CRLF injection, SQL injection, cross-site scripting XSS, and HTTP response splitting...
mxBB Module ErrorDocs 1.0 - 'common.php' Remote File Inclusion
= mxBB Module mxerrordocs 1.0 Remote File Include Vulnerability = Mod-Download: http://forums.phpmix.org/download.php?id=27 = Bugfounder: bd0rk || SOH-Crew = Vulnerable code in common.php = Greetings: str0ke, broken-error, Martn & m0rphin + Exploit:...
CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Arbitrary File Removal
The following pre-advisory is also available in PDF format for download at: http://www.cybsec.com/vuln/CYBSEC-SecurityPre-AdvisorySAPIGSRemoteArbitraryFileRemoval.pdf CYBSEC S.A. www.cybsec.com Pre-Advisory Name: SAP Internet Graphics Service IGS Remote Arbitrary File Removal ==================...
PHP-revista 1.1.2 - adodb Multiple Remote File Inclusions
PHP-revista 1.1.2 - adodb Multiple Remote File Inclusions --------------------------------------|| Viva Palestine ||----------------------------------------- --------------------------------------|| Free Saddam Hussien ||----------------------------------------- php-revista execute"$obtenrev";...
HSRS 1.0 - 'addcode.php' Remote File Inclusion
--------------------------------------|| Viva Palestine ||----------------------------------------- --------------------------------------|| Free Saddam Hussien ||----------------------------------------- HSRS = 1.0 HIOX Star Rating System Script addcode.php Remote File Include Vulnerability Foun...
mg.applanix (RFI)
v1per-haCker How I Can lives Without FooL Programmer! ======================================================================================= mg.applanix RFI ======================================================================================= Information:- Scripts: mg.applanix download :...
StoryStream 4.0 - 'baseDir' Remote File Inclusion
v1per-haCker How I Can lives Without FooL Programmer! ======================================================================================= Storystream RFI ======================================================================================= Information:- Scripts: Storystream download :...
knowledgebuilder Remote File Include Exploit
No description provided by source. !/usr/bin/perl knowledgeBuilder v.2.2.php.NuLL-WDYL= Remote File Include Vulnerability Script.............. :knowledgebuilder php.NuLL WDYL Discovered By.... : IGI Expl0iter ........ : Root3rH3LL Location .......... : Iran Class.............. : Remote Original...
gtcatalog <= 0.9.1 (index.php) Remote File Include Vulnerability
No description provided by source. ============================================================================================= Shopping Catalog RFI ============================================================================================= Info:- Scripts: ShoppingCatalog download :...