what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News Services About Contact Add New

Showing 1 - 25 of 4,066

File Inclusion Files

Sony BRAVIA Digital Signage 1.7.8 Unauthenticated Remote File Inclusion

Posted Dec 3, 2020

Authored by LiquidWorm | Site zeroscience.mk

Sony BRAVIA Digital Signage versions 1.7.8 and below are vulnerable to a remote file inclusion vulnerability by including arbitrary client-side dynamic scripts (JavaScript, VBScript, HTML) when adding content though the input URL material of type html. This allows hijacking of the current session of the user, execute cross-site scripting code, or changing the look of the page and content modification on current display.

tags | exploit, remote, arbitrary, javascript, xss, file inclusion

MD5 | 85b5e3c8c9cb495114ef096e2616e76a

Download | Favorite | View

Simple College Website 1.0 Local File Inclusion

Posted Dec 2, 2020

Authored by mosaaed

Simple College Website version 1.0 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

MD5 | 86b49885d775e8eb45bc78ef1e69613a

Download | Favorite | View

Car Rental Management System 1.0 Local File Inclusion / SQL Injection

Posted Dec 2, 2020

Authored by mosaaed

Car Rental Management System version 1.0 suffers from local file inclusion and remote SQL injection vulnerabilities.

tags | exploit, remote, local, vulnerability, sql injection, file inclusion

MD5 | 3a68203e8a08bc0b1358a7badb0e67c3

Download | Favorite | View

TestBox CFML Test Framework 4.1.0 Directory Traversal

Posted Nov 19, 2020

Authored by Darren King

TestBox CFML Test Framework version 4.1.0 suffers from a directory traversal vulnerability.

tags | exploit, file inclusion

MD5 | 88450fd3a243fe57d5806f5e6b84c134

Download | Favorite | View

Medical Center Portal Management System SQL Injection

Posted Nov 17, 2020

Authored by gh1mau

Medical Center Portal Management System released prior to November 16, 2020 have been identified as being susceptible to a local file inclusion vulnerability.

tags | exploit, local, sql injection, file inclusion

MD5 | ebb1a8cb615f15dc9ac1503fc00676dc

Download | Favorite | View

Online News Portal Local File Inclusion

Posted Nov 17, 2020

Authored by gh1mau

Online News Portal versions released prior to November 16, 2020 have been identified as being susceptible to a local file inclusion vulnerability.

tags | exploit, local, file inclusion

MD5 | 150d4a01deee247d05bff4f6b2ff5485

Download | Favorite | View

SIGE 3.4.1 / 3.5.3 Pro Cross Site Scripting / Remote File Inclusion

Posted Nov 16, 2020

Authored by h4shur | Site vulnerability-lab.com

SIGE versions 3.4.1 and 3.5.3 Pro suffer from cross site scripting and remote file inclusion vulnerabilities.

tags | exploit, remote, vulnerability, xss, file inclusion

MD5 | 288aba0ed822e5b2856245f6549208e1

Download | Favorite | View

Citrix ADC NetScaler Local File Inclusion

Posted Nov 13, 2020

Authored by Donny Maasland, Ramella Sebastien | Site metasploit.com

This Metasploit module exploits a local file inclusion vulnerability in Citrix ADC Netscaler.

tags | exploit, local, file inclusion

advisories | CVE-2020-8193, CVE-2020-8195, CVE-2020-8196

MD5 | d988d9b9c395233084520c1b63a93177

Download | Favorite | View

Joomla SIGE 3.4.1-FREE / 3.5.3-PRO RFI / Cross Site Scripting

Posted Nov 11, 2020

Authored by h4shur

Joomla Simple Image Gallery Extended (SIGE) extension versions 3.4.1-FREE and 3.5.3-PRO suffer from cross site scripting and remote file inclusion vulnerabilities.

tags | exploit, remote, vulnerability, code execution, xss, file inclusion

MD5 | 57c76870c76473a7da1cad2edd7fa766

Download | Favorite | View

Processwire CMS 2.4.0 Local File Inclusion

Posted Nov 3, 2020

Authored by Y1LD1R1M

Processwire CMS version 2.4.0 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

MD5 | a16eb58aefe5f14c1f9c09c294a49bed

Download | Favorite | View

Oracle Business Intelligence Enterprise Edition 5.5.0.0.0 / 12.2.1.3.0 / 12.2.1.4.0 LFI

Posted Oct 28, 2020

Authored by Ivo Palazzolo

Oracle Business Intelligence Enterprise Edition versions 5.5.0.0.0, 12.2.1.3.0, and 12.2.1.4.0 suffer from local file inclusion and directory traversal vulnerabilities.

tags | exploit, local, vulnerability, file inclusion

advisories | CVE-2020-14864

MD5 | 067512dbc1fd13c960d6837eb1c78dd9

Download | Favorite | View

QSC Q-SYS Core Manager 8.2.1 Directory Traversal

Posted Oct 26, 2020

Authored by Kevin Randall

QSC Q-SYS Core Manager version 8.2.1 suffers from a TFTP related directory traversal vulnerability.

tags | advisory, file inclusion

advisories | CVE-2020-24990

MD5 | b8b44947a96dd18d16e85141c32b16c4

Download | Favorite | View

Hrsale 2.0.0 Local File Inclusion

Posted Oct 21, 2020

Authored by Sosecure

Hrsale version 2.0.0 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

MD5 | 88dac6a7e7cede1e94e86a14088dd82f

Download | Favorite | View

HiSilicon Video Encoder 1.97 File Disclosure / Path Traversal

Posted Oct 19, 2020

Authored by Alexei Kojenov

HiSilicon Video Encoder versions up to 1.97 suffer from a path traversal vulnerability that allows for file disclosure.

tags | exploit, file inclusion

advisories | CVE-2020-24219

MD5 | cb4c6c75d9547eef7af977b49adf00a6

Download | Favorite | View

CS-Cart 1.3.3 Local File Inclusion

Posted Oct 16, 2020

Authored by 0xmmnbassel

Details for performing a local file inclusion attack on CS-Cart version 1.3.3, a really old version.

tags | exploit, local, file inclusion

MD5 | efd32d23b8016e8ae463a6c744326e4e

Download | Favorite | View

Cisco ASA / FTD 9.6.4.42 Path Traversal

Posted Oct 11, 2020

Authored by 3ndG4me

Cisco ASA and FTD version 9.6.4.42 suffer from a path traversal vulnerability.

tags | exploit, file inclusion

systems | cisco

advisories | CVE-2020-3452

MD5 | 48f25de33c55a08e792d3ab4713f7f58

Download | Favorite | View

Karel IP Phone IP1211 Web Management Panel Directory Traversal

Posted Oct 7, 2020

Authored by Berat Isler

The Karel IP Phone IP1211 web management panel suffers from a directory traversal vulnerability.

tags | exploit, web, file inclusion

MD5 | 39ad52c26c3918e666690e9425a9a8c1

Download | Favorite | View

MonoCMS Blog 1.0 File Deletion / CSRF / Hardcoded Credentials

Posted Oct 1, 2020

Authored by Shahrukh Iqbal Mirza

MonoCMS Blog version 1.0 suffers from arbitrary file deletion, cross site request forgery, and information disclosure vulnerabilities.

tags | exploit, arbitrary, vulnerability, file inclusion, info disclosure, csrf

advisories | CVE-2020-25986, CVE-2020-25987

MD5 | 858c4bad79460948ebff42b9ed1fd0cd

Download | Favorite | View

Red Hat Security Advisory 2020-3944-01

Posted Sep 30, 2020

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2020-3944-01 - Universal Office Converter is a command line tool to convert any document format that LibreOffice can import to any document format that LibreOffice can export. It makes use of the LibreOffice's UNO bindings for non-interactive conversion of documents. Issues addressed include local file inclusion and server-side request forgery vulnerabilities.

tags | advisory, local, vulnerability, file inclusion

systems | linux, redhat

advisories | CVE-2019-17400

MD5 | 1a894e0156c35551711c8faebaf9c44b

Download | Favorite | View

Hyland OnBase Path Traversal

Posted Sep 8, 2020

Authored by Adaptive Security Consulting

All versions up to and prior to Hyland OnBase Foundation EP1 (tested: 19.8.9.1000) and OnBase 18 (tested: 18.0.0.32) suffer from path traversal vulnerabilities.

tags | advisory, vulnerability, file inclusion

MD5 | 156aaf01e3f567caba60826f8c0e3305

Download | Favorite | View

Ruijie Networks Switch eWeb S29_RGOS 11.4 Directory Traversal

Posted Aug 20, 2020

Authored by Tuygun

Ruijie Networks Switch eWeb S29_RGOS version 11.4 suffers from a directory traversal vulnerability.

tags | exploit, file inclusion

MD5 | d42793b9d2e5665d9a3c6433b256f461

Download | Favorite | View

Cisco Adaptive Security Appliance Software 9.11 Local File Inclusion

Posted Jul 29, 2020

Authored by 0xmmnbassel

Adaptive Security Appliance Software version 9.11 local file inclusion exploit.

tags | exploit, local, file inclusion

advisories | CVE-2020-3452

MD5 | 18674d1ac6566a743b27902123a8d30e

Download | Favorite | View

F5 Big-IP 13.1.3 Build 0.0.6 Local File Inclusion

Posted Jul 27, 2020

Authored by Carlos E. Vieira

F5 Big-IP versions 13.1.3 Build 0.0.6 and below suffer from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

advisories | CVE-2020-5902

MD5 | b2e61907a263f05cda5368c904a3e106

Download | Favorite | View

Bio Star 2.8.2 Local File Inclusion

Posted Jul 27, 2020

Authored by Bashaer AlHarthy, Rian Saaty, Safeyah Alhazmi

Bio Star version 2.8.2 suffers from a local file inclusion vulnerability.

tags | exploit, local, file inclusion

advisories | CVE-2020-15050

MD5 | 27371df2c5b87c59458e1241e0ee2306

Download | Favorite | View

Bludit 3.9.2 Directory Traversal

Posted Jul 27, 2020

Authored by James Green

Bludit version 3.9.2 suffers from a directory traversal vulnerability.

tags | exploit, file inclusion

advisories | CVE-2019-16113

MD5 | 9c37d259cdc14c00be01226e03c282d4

Download | Favorite | View