what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

xoops2016-rfi.txt

xoops2016-rfi.txt
Posted Feb 21, 2008
Authored by F10 | Site by-f10.com

XOOPS version 2.0.16 suffers from multiple remote file inclusion vulnerabilities.

tags | exploit, remote, vulnerability, code execution, file inclusion
SHA-256 | d1aa4112c450e6c9bdb34ddc9b6d7a4d6883e84e6456a9acdb53527bac9901a3

xoops2016-rfi.txt

Change Mirror Download
In the Script Xoops-2.0.16 are Remote File Inclusion Bugs 

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Script : xoops-2.0.16-Kararli
Discovered By : F10
Contact : by_f10@hotmail.com
WebSite : http://by-f10.com
Greetz : by_emR3 , H0tturk , TaRanTuLa ,
gsy , ercu_145 ,
LupuS,m0sted,CyberGhost ... .
>From : Turkey
Description : In the Script Xoops-2.0.16 are
Remote File Inclusion Bugs.
I show the bugs, in which file
are their.
"xoops-2.0.16-Kararli/" << is
the script path..
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

-------------------------------------
bugs:

xoops-2.0.16-Kararli/htdocs/notifications.php include_once $lookup_file;
xoops-2.0.16-Kararli/htdocs/extras/login.php include $path.'/mainfile.php';
xoops-2.0.16-Kararli/htdocs/include/functions.php require_once $hnd_file;
xoops-2.0.16-Kararli/htdocs/include/functions.php include_once $hnd_file;
xoops-2.0.16-Kararli/htdocs/kernel/notification.php include_once $tags_file;
xoops-2.0.16-Kararli/htdocs/kernel/notification.php include_once $lookup_file;
xoops-2.0.16-Kararli/htdocs/class/auth/authfactory.php require_once $file;
xoops-2.0.16-Kararli/htdocs/class/database/databasefactory.php require_once $file;
xoops-2.0.16-Kararli/htdocs/class/database/databasefactory.php require_once $file;
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty.class.php $_smarty_results =
smarty_core_process_compiled_include($_params, $this);
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty.class.php include($_smarty_compile_path);
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty.class.php include($_smarty_compile_path);
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty.class.php require_once($this->_get_plugin_filepath('function',
'config_load'));
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty.class.php require_once($this->compiler_file);
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty.class.php function
_smarty_include($params)
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty.class.php include($_smarty_compile_path);
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty.class.php function
_include($filename, $once=false, $params=null)
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty.class.php return
include_once($filename);
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty.class.php return include($filename);
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty_Compiler.class.php include_once
$plugin_file;
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty_Compiler.class.php include_once
$plugin_file;
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty_Compiler.class.php include_once
$plugin_file;
xoops-2.0.16-Kararli/htdocs/class/smarty/Smarty_Compiler.class.php $output .=
"\$this->_smarty_include($_params);\n" .
xoops-2.0.16-Kararli/htdocs/modules/system/admin.php include
$admin_dir.'/'.$file.'/xoops_version.php';
xoops-2.0.16-Kararli/htdocs/class/mail/phpmailer/class.phpmailer.php include_once($this->PluginDir
. "class.smtp.php");
xoops-2.0.16-Kararli/htdocs/class/mail/phpmailer/class.phpmailer.php include($lang_path.'phpmailer.lang-'.$lang_type.'.php');
xoops-2.0.16-Kararli/htdocs/class/mail/phpmailer/class.phpmailer.php include($lang_path.'phpmailer.lang-en.php');
xoops-2.0.16-Kararli/htdocs/class/smarty/internals/core.display_debug_console.php $smarty->_include($_compile_path);
xoops-2.0.16-Kararli/htdocs/class/smarty/internals/core.load_plugins.php include_once
$_plugin_file;
xoops-2.0.16-Kararli/htdocs/class/smarty/internals/core.load_resource_plugin.php include_once($_plugin_file);
xoops-2.0.16-Kararli/htdocs/class/smarty/internals/core.process_cached_inserts.php $smarty->_include($php_resource,
true);
xoops-2.0.16-Kararli/htdocs/class/smarty/internals/core.process_compiled_include.php function
smarty_core_process_compiled_include($params, &$smarty)
xoops-2.0.16-Kararli/htdocs/class/smarty/internals/core.process_compiled_include.php $smarty->_include($_include_file_path,
true);
xoops-2.0.16-Kararli/htdocs/class/smarty/internals/core.run_insert_handler.php $smarty->_include($_params['php_resource'],
true);
xoops-2.0.16-Kararli/htdocs/class/smarty/internals/core.smarty_include_php.php $smarty->_include($_smarty_php_resource,
$params['smarty_once'], $params['smarty_include_vars']);
xoops-2.0.16-Kararli/htdocs/class/smarty/internals/core.smarty_include_php.php $smarty->_include($_smarty_php_resource,
$params['smarty_once'], $params['smarty_include_vars']);
xoops-2.0.16-Kararli/htdocs/class/smarty/internals/core.write_compiled_include.php function
smarty_core_write_compiled_include($params, &$smarty)
xoops-2.0.16-Kararli/htdocs/class/smarty/plugins/function.config_load.php include($_compile_file);
xoops-2.0.16-Kararli/htdocs/class/smarty/plugins/function.html_checkboxes.php require_once
$smarty->_get_plugin_filepath('shared','escape_special_chars');
xoops-2.0.16-Kararli/htdocs/class/smarty/plugins/function.html_image.php require_once
$smarty->_get_plugin_filepath('shared','escape_special_chars');
xoops-2.0.16-Kararli/htdocs/class/smarty/plugins/function.html_options.php require_once
$smarty->_get_plugin_filepath('shared','escape_special_chars');
xoops-2.0.16-Kararli/htdocs/class/smarty/plugins/function.html_radios.php require_once
$smarty->_get_plugin_filepath('shared','escape_special_chars');
xoops-2.0.16-Kararli/htdocs/class/smarty/plugins/function.html_select_date.php require_once
$smarty->_get_plugin_filepath('shared','make_timestamp');
xoops-2.0.16-Kararli/htdocs/class/smarty/plugins/function.html_select_date.php require_once
$smarty->_get_plugin_filepath('function','html_options');
xoops-2.0.16-Kararli/htdocs/class/smarty/plugins/function.html_select_time.php require_once
$smarty->_get_plugin_filepath('shared','make_timestamp');
xoops-2.0.16-Kararli/htdocs/class/smarty/plugins/function.html_select_time.php require_once
$smarty->_get_plugin_filepath('function','html_options');
xoops-2.0.16-Kararli/htdocs/class/smarty/plugins/modifier.date_format.php require_once
$smarty->_get_plugin_filepath('shared','make_timestamp');
xoops-2.0.16-Kararli/htdocs/class/smarty/xoops_plugins/compiler.includeq.php $output
.= "\$this->_smarty_include($_params);\n";
xoops-2.0.16-Kararli/htdocs/modules/xplorer/admin/admin_header.php include_once($admin_lang_file);
Login or Register to add favorites

File Archive:

March 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Mar 1st
    16 Files
  • 2
    Mar 2nd
    0 Files
  • 3
    Mar 3rd
    0 Files
  • 4
    Mar 4th
    32 Files
  • 5
    Mar 5th
    28 Files
  • 6
    Mar 6th
    42 Files
  • 7
    Mar 7th
    17 Files
  • 8
    Mar 8th
    13 Files
  • 9
    Mar 9th
    0 Files
  • 10
    Mar 10th
    0 Files
  • 11
    Mar 11th
    15 Files
  • 12
    Mar 12th
    19 Files
  • 13
    Mar 13th
    21 Files
  • 14
    Mar 14th
    38 Files
  • 15
    Mar 15th
    15 Files
  • 16
    Mar 16th
    0 Files
  • 17
    Mar 17th
    0 Files
  • 18
    Mar 18th
    10 Files
  • 19
    Mar 19th
    32 Files
  • 20
    Mar 20th
    46 Files
  • 21
    Mar 21st
    16 Files
  • 22
    Mar 22nd
    13 Files
  • 23
    Mar 23rd
    0 Files
  • 24
    Mar 24th
    0 Files
  • 25
    Mar 25th
    12 Files
  • 26
    Mar 26th
    31 Files
  • 27
    Mar 27th
    19 Files
  • 28
    Mar 28th
    42 Files
  • 29
    Mar 29th
    0 Files
  • 30
    Mar 30th
    0 Files
  • 31
    Mar 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close