4images 1.7.6 > 9 Csrf inject php code

Exploit for php platform in category web applications !/usr/bin/perl Title : 4images 1.7.6 9 Csrf inject php code Author : Or4nG.M4n Version : 1.7.6 9 Homepage : http://www.4homepages.de/ Dork : "Powered by 4images" video : http://youtu.be/NYFzC9hH54 Thnks+----------------------------------+ | xS...

4Images 1.7.6 Cross Site Request Forgery

!/usr/bin/perl Title : 4images 1.7.6 9 Csrf inject php code Author : Or4nG.M4n Version : 1.7.6 9 Homepage : http://www.4homepages.de/ Dork : "Powered by 4images" video : http://youtu.be/NYFzC9hH54 Thnks+----------------------------------+ | xSs m4n i-Hmx h311c0d3 |.sp. abo.B4sil | HcJ Cyb3r...

4Images 1.7.6-9 - Cross-Site Request Forgery PHP Code Injection

4Images 1.7.6-9 - Cross-Site Request Forgery PHP Code Injection !/usr/bin/perl Title : 4images 1.7.6 9 Csrf inject php code Author : Or4nG.M4n Version : 1.7.6 9 Homepage : http://www.4homepages.de/ Dork : "Powered by 4images" video : http://youtu.be/NYFzC9hH54...

CVE-2011-3745

HycusCMS 1.0.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/hycustemplate/template.php...

CVE-2011-3702: Exposure of Sensitive Information to an Unauthorized Actor

Ananta Gazelle 1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by modules/template.php and certain other files...

CVE-2011-3745: Exposure of Sensitive Information to an Unauthorized Actor

HycusCMS 1.0.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/hycustemplate/template.php...

Wordpress 3.2.1 Core Module(post-template.php) Improper Sanitizing XSS

Exploit for php platform in category web applications Exploit Title : Wordpress 3.2.1 Core Modulepost-template.php Improper SanitizingPersistent Cross Site Scripting Vulnerability Author : Darshit Ashara Date : 21/08/2011 Vendor : Wordpress Version: 3.2.1 Software Link...

CVE-2010-1528: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in include/template.php in Uiga Proxy, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the content parameter...

Uigaproxy Remote File Inclusion

coded by ahmadbady //=========================================================================== // Topic : uigaproxy // Bug type : remote file include // Download : http://www.scriptdevelopers.net/download/uigaproxy.zip // Advisory :...

CVE-2010-1216

The CVE-2010-1216 entry concerns PHP remote file inclusion in notsoPureEdit prior to or including version 1.4.1, triggered when register_globals is enabled. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a URL in the content parameter, via a crafted request to tem...

CVE-2010-1216: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in templates/template.php in notsoPureEdit 1.4.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the content parameter. NOTE: some of these details are obtained from third party information...

NotSopureEdit <= 1.4.1 Remote File Include Vulnerability

======================================================== NotSopureEdit = 1.4.1 Remote File Include Vulnerability ======================================================== + NotSopureEdit = 1.4.1 Remote File Include Vulnerability...

WordPress <2.0.6 Template.php 跨站脚本攻击漏洞

No description provided by source...

CVE-2008-6112: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via a .. dot dot in the id parameter in a detail action to 1 main.php and 2 template.php in ringtones/...

CVE-2008-5860

Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to create or read arbitrary files via directory traversal sequences in the editfile parameter...

Directory traversal

Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to create or read arbitrary files via directory traversal sequences in the editfile parameter...

CVE-2008-5860

Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to create or read arbitrary files via directory traversal sequences in the editfile parameter...

CVE-2008-5860: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in backend/template.php in Constructr CMS 3.02.5 and earlier, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to create or read arbitrary files via directory traversal sequences in the editfile parameter...

ezringtone-disclose.txt

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + Ez Ringtone Manager Multiple Vulnerabilities + + + + Discovered by b3hz4d + + + + WwW.DeltaHacking.Net + + + + + + + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ APA Center of Yazd University...

Ez Ringtone Manager Multiple Remote File Disclosure Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== Ez Ringtone Manager Multiple Remote File Disclosure Vulnerabilities =================================================================== AUTHOR : b3hz4d Seyed Behzad...