CVE-2008-0794: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in user/header.php in Affiliate Market 0.1 BETA allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

Affiliate Market Ver.0.1 BETA (language) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =========================================================================== Affiliate Market Ver.0.1 BETA language Local File Inclusion Vulnerability =========================================================================== Affiliate...

CVE-2007-5139

CVE-2007-5139 affects chupix 0.2.3 and relates to a PHP remote file inclusion in admin/include/header.php when register_globals is enabled. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a URL in the repertoire parameter. Root cause is the unsafe handling of user-...

CVE-2007-5139: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in admin/include/header.php in chupix 0.2.3, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the repertoire parameter...

Chupix CMS 0.2.3 - repertoire Remote File Inclusion

Chupix CMS 0.2.3 - repertoire Remote File Inclusion chupix 0.2.3 /admin/include/header.php RFI f0und by 0in contact: [email protected] Greetings to:Die-angel,Slim,Joker186,Kaja,Artysta,wojto111,reydex team:Our Dark-Coders team;...

Chupix CMS 0.2.3 - 'repertoire' Remote File Inclusion

chupix 0.2.3 /admin/include/header.php RFI f0und by 0in contact: [email protected] Greetings to:Die-angel,Slim,Joker186,Kaja,Artysta,wojto111,reydex team:Our Dark-Coders team; --------------------------------------------------------------------------------------------------------------------...

CVE-2007-4896: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in admin/header.php in Toms Gaestebuch 1.01 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 langadminseite, 2 langueberschrift, or 3 einstmetachar parameter, different vectors than CVE-2007-4711...

CVE-2007-4809: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Online Fantasy Football League OFFL 0.2.6 allow remote attackers to execute arbitrary PHP code via a URL in the DOCROOT parameter to 1 lib/functions.php or 2 lib/header.php...

online-rfi.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Multiple...

Toms Gastebuch 1.00/1.01 - 'header.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/25598/info Toms Gastebuch is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

CVE-2007-4711: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Toms Gaestebuch 1.00 allow remote attackers to inject arbitrary web script or HTML via the 1 homepage, 2 mail, and 3 name parameters in a show action to a form.php; the 4 language and 5 anzeigebreite parameters to b admin/header.php; and the 6...

tomsgb10-xss.txt

Software: Guestbook Title: Toms Gästebuch 1.00 Version: 1.0 Type: XSS Date: Sat Aug 11 21:52:08 CEST 2007 Vendor: Fitz Thomas Page: http://www.toms-seiten.at/ vulnerability: ---------------------------- http://example.com/form.php?action=show&homepage=XSS&mail=XSS&name=XSS...

SomeryC 0.2.4 - include.php?skindir Remote File Inclusion

SomeryC 0.2.4 - include.php?skindir Remote File Inclusion SomeryC = v0.2.4 Remote File Include Vendor: http://someryc.mostpopularcomic.com download http://someryc.mostpopularcomic.com/sC024.zip found by: Katatafish [email protected] d0rk: "powered by someryc" vuln-code/admin/system/include.php:...

AzDG Dating Gold v3.0.5 ===> Remote File Include Vulnerability

+0+N0Te:-I am N0t HaCkEr I aM ScRipTs ExplOit FiNder++ ---------------------------------------------------------------------- ScRipT NamE:-AzDG Dating Gold v3.0.5 --------------------------------------- Download...

CVE-2007-3792: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in AzDG Dating Gold 3.0.5 allow remote attackers to execute arbitrary PHP code via a URL in the intpath parameter to 1 header.php, 2 footer.php, or 3 secure.admin.php in templates/...

CVE-2007-3160

PHP remote file inclusion vulnerability in admin/header.php in PHP Real Estate Classifieds Premium Plus allows remote attackers to execute arbitrary PHP code via a URL in the loc parameter...

CVE-2007-3160

CVE-2007-3160 affects PHP Real Estate Classifieds Premium Plus, where an insecure implementation of the loc parameter in admin/header.php enables a remote attacker to include a remote file and execute arbitrary PHP code. The vulnerability is a PHP remote file inclusion leading to arbitrary code e...

CVE-2007-3160: Undefined Security Weakness

PHP remote file inclusion vulnerability in admin/header.php in PHP Real Estate Classifieds Premium Plus allows remote attackers to execute arbitrary PHP code via a URL in the loc parameter...

PHP Real Estate Classifieds Remote File Inclusion Exploit

No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titlePHP Real Estate Classifieds Premium Plusheader.php Remote File Inclusion Exploit/title script language="JavaScript"...

PHP Real Estate Classifieds - Remote File Inclusion

PHP Real Estate Classifieds Premium Plusheader.php Remote File Inclusion Exploit //=============================================================================================== //Script Name: PHP Real Estate Classifieds Premium Plus // not sec group //Author : http://notsec.com //Email :...