cyberfolio-rfi.txt

-========================================== ViVa Islam + YeMeN ====================================- Name : cyberfolio 7.2 Remote File Include Vulnerabiliy Download From : http://cyberfolio.org/sources/version7.10/cyberfolio712.zip Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM BlackxHat , BlackBox ,...

joomlacinema-sql.txt

Joomla Component comcinema SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "comcinema" EXPLOiT 1 :...

runcms161-multi.txt

RunCMS 1.6.1 Multiple XSS and XSRF Vulnerabilties by NBBN b 1 Create Webmaster admin XSRF Vulnerability/b input type="hidde...

RunCMS 1.6.1 Multiple XSS and XSRF Vulnerabilties

RunCMS 1.6.1 Multiple XSS and XSRF Vulnerabilties by NBBN b 1 Create Webmaster admin XSRF Vulnerability/b htmlhead/headbody onLoad="javascript:document.attack.submit" form action="http://localhost/xampp/runcms/modules/system/admin.php" method="post" enctype="multipart/form-data" name="r" input...

Unfixed XSS vulnerability at www.webmaster-talk.com

Security researcher PaPPy, has submitted on 02/07/2008 a cross-site-scripting XSS vulnerability affecting www.webmaster-talk.com, which at the time of submission ranked 27255 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2008. It is...

joomlarest-sql.txt

joomla SQL Injectioncomrestaurant AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comrestaurant" EXPLOIT : index.php?option=comrestaurant&Itemid=S@BUN&func=detail&id=-1//union//select//0,0,password,0,0,0,0,0,0,0,0,0,username//from//mosusers/ S@BUN www.hackturkiye.com S@BUN...

ClipShare - UID SQL Injection

ClipShare - UID SQL Injection video sharing www.clip-share.com Remote SQL Injection Exploit All Version AUTHOR :Krit webmaster of http://www.thaishadow.com HOME : http://www.thaishadow.com Download : http://www.clip-share.com/ DorKs :inurl:/uprofile.php?UID= or "Powered by clipshare" EXPLOIT :...

Break ray client figure ASP webmaster Safety assistant-vulnerability warning-the black bar safety net

To Lake2 website and 1. 5 the source code, found this version indeed improved a lot, and increase the killing function: 1:killing by the Unicode encoding of the ASP Trojan 2:killing the useOpen|CreateTextFile, And SaveToFile, Save, set Server, Server. Transfer|Execute, the ShellExecute, Exec, the...

Unfixed Redirect vulnerability at www.frontpagewebmaster.com

Security researcher 3lf3n1x, has submitted on 24/11/2007 a Redirect vulnerability affecting www.frontpagewebmaster.com, which at the time of submission ranked 26738 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is currently...

Remote file inclusion

PHP remote file inclusion vulnerability in admin.wmtrssreader.php in the webmaster-tips.net Flash RSS Reader comwmtrssreader 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...

CVE-2007-5410

PHP remote file inclusion vulnerability in admin.wmtrssreader.php in the webmaster-tips.net Flash RSS Reader comwmtrssreader 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...

CVE-2007-5410

CVE-2007-5410 affects the Joomla! component com_wmtrssreader (admin.wmtrssreader.php) in the webmaster-tips.net Flash RSS Reader 1.0. The vulnerability is a PHP remote file inclusion that allows an attacker to supply a URL via mosConfig_live_site to cause remote code execution. The connected docu...

wmtrssreader joomla component 1.0 Remote File Include Vulnerability

wmtrssreader joomla component 1.0 Remote File Include Vulnerability Component : comwmtrssreader version 1.0 Download script : http://www.webmaster-tips.net/flash-rss-reader.html you must register Dicovered by : Cyber-Crime Contact : [email protected] Orginal :...

Joomla! Component WebMaster-Tips.net Joomla! RSS Feed Reader 1.0 - Remote File Inclusion

source: https://www.securityfocus.com/bid/25999/info Webmaster-Tips.net Joomla! RSS Feed Reader is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlyi...

Remote file inclusion

PHP remote file inclusion vulnerability in admin.wmtportfolio.php in the webmaster-tips.net wmtportfolio 1.0 comwmtportfolio component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2007-5309

CVE-2007-5309 concerns a PHP remote file inclusion in the Joomla! component com_wmtgallery (Webmaster-Tips.net Flash Image Gallery) via admin.wmtgallery.php. The root cause is improper handling of the mosConfig_live_site parameter, allowing an attacker to cause the server to include a remote PHP ...

CVE-2007-5309: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in admin.wmtgallery.php in the webmaster-tips.net Flash Image Gallery comwmtgallery 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...

Webmaster-Tips.net Joomla! Flash Image Gallery远程文件包含漏洞

Joomla! Flash Image Gallery是一款基于PHP的WEB应用程序。 Joomla! Flash Image Gallery不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是由于'admin.wmtgallery.php'脚本对用户提交的'mosConfigabsolutepath'参数缺少过滤，指定远程服务器上的任意文件作为包含对象，可导致以以WEB权限执行任意命令。 webmaster-tips.net comwmtgallery 1.0 目前没有解决方案提供：...

joomlawmtport-rfi.txt

wmtportfolio joomla component 1.0 Remote File Include Vulnerability Component : comwmtportfolio version 1.0 Download script : http://www.webmaster-tips.net/ Dicovered by : NoGe Contact : [email protected]...

Joomla! Component wmtportfolio 1.0 - Remote File Inclusion

Joomla! Component wmtportfolio 1.0 - Remote File Inclusion wmtportfolio joomla component 1.0 Remote File Include Vulnerability Component : comwmtportfolio version 1.0 Download script : http://www.webmaster-tips.net/ Dicovered by : NoGe Contact : [email protected]...