ProfitCode Shopping Cart - Multiple Local/Remote File Inclusion Vulnerabilities

Author: Zer0 Thunder Site : http://www.profitcode.net/ - http://profbiz-cart.sourceforge.net/ Tested on: Windows XP sp2 WampServer 2.0i - There are Cople of pages that has the LFI vuln Vuln c0de : dl-authcontent.php $returlvar = "dloads"; include "$docroot" . "tplates/usrauthlogin.php"; exit;...

PHPDirector Game Edition Cross Site Scripting / Local File Inclusion / SQL Injection

Exploit Title: PHPDirector Game Edition Multiple Vulnerabilities LFI/SQLi/Xss Date: 2010-01-05 Author: Zer0 Thunder Site : http://www.play-online.bzh.be/forum/ Software Link: http://www.play-online.bzh.be/forum/download/phpdirectorgameedition.zip Version: v0.1 Tested on: Windows XP sp2 WampServer...

Docebo 3.6.0.2 (stable) - Local File Inclusion

Docebo 3.6.0.2 stable - Local File Inclusion Exploit Title: Docebo 3.6.0.2 stable Local File Inclusion Date: 2010-01-06 Author: Zer0 Thunder Site : http://www.docebolms.org/ Software Link: http://www.docebolms.org/doceboCms/ Version: 3.6.0.2 Tested on: Windows XP sp2 WampServer 2.0i CVE : Code :...

LightOpenCMS 0.1 - smarty.php Remote File Inclusion

LightOpenCMS 0.1 - smarty.php Remote File Inclusion Exploit Title: LightOpen CMS Remote File Inclusion smarty.php Date: 2010-01-05 Author: Zer0 Thunder Software Link: http://sourceforge.net/projects/lightopencms/ Version: v0.1 Tested on: Windows XP sp2 Wamp CVE : Code : Exploit :...

iPhone Worm Was Simple, Yet Effective, Analysis Shows

The iKee worm that was infecting jailbroken iPhones last month was a simple, yet effective, piece of software that shows how easy it might be for an attacker to create a fairly large, functioning botnet comprising mobile devices, an analysis of the worm shows. Researchers at SRI International’s...

SRI releases Conficker scanner source code

The experts at SRI International, who have been tracking the Conficker worm as closely as anyone, have released the source code to the scanner they wrote to detect the active P2P scanning that Conficker-infected machines perform. The Conficker worm exhibits a number of interesting characteristics...

Honeynet Project finds way to fingerprint Conficker infections

Just days ahead of an April 1st activation date for the Conficker worm, a pair of security researchers from the Honeynet Project have scored a major breakthrough, finding a way to remotely and anonymously fingerprint the malware on infected networks. Now, with the help of Dan Kaminsky and Rich...

Fedora 7 : moodle-1.8.4-1.fc7 (2008-0627)

Upgrade to 1.8.4, fix CVE-2008-0123. Added Tamil Sri Lanka support. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 8 : moodle-1.8.4-1.fc8 (2008-0610)

Upgrade to 1.8.4, fix CVE-2008-0123. Added Tamil Sri Lanka support. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing...