799 matches found
CVE-2006-7063
Directory traversal vulnerability in profile.php in TinyPHPforum 3.6 and earlier allows remote attackers to include and execute arbitrary files via ".." sequences in the uname parameter...
CVE-2007-0681
profile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords of arbitrary users without providing the original password, and possibly perform other unauthorized actions, via modified values to register.php...
PT-2007-2135 · Extcalendar · Extcalendar
Name of the Vulnerable Software and Affected Versions: ExtCalendar versions 2 and earlier Description: The issue allows remote attackers to change the passwords of arbitrary users without providing the original password, and possibly perform other unauthorized actions, via modified values to...
Extcalendar <= 2 (profile.php) Remote User Pass Change Exploit
No description provided by source. form name="userform" action="http://target/register.php" method="post" input name="step" type="hidden" value="regform" tr td class='tableh2' colspan='2'Account Information/td /tr tr td class='tableb' width='160'Username/td td class='tableb' /td /tr tr td...
Extcalendar 2 - profile.php Remote User Pass Change
Extcalendar 2 - profile.php Remote User Pass Change Account Information Username Password Confirm Password E-mail Address Other Details First Name Last Name Home page td class='t...
Extcalendar 2 - 'profile.php' Remote User Pass Change
Account Information Username Password Confirm Password E-mail Address Other Details First Name Last Name Home page Location td class='table...
CVE-2006-5775
Cross-site scripting XSS vulnerability in profile.php in FunkBoard 0.71 before 4 November 2006 at 18:16 GMT allows remote attackers to inject arbitrary web script or HTML, possibly via the name parameter...
CVE-2006-5775
Technical details about CVE-2006-5775 are not publicly provided in the connected documents. No explicit affected products, versions, or fixes are detailed here. Monitor for updates.
CVE-2006-4879
The CVE-2006-4879 entry documents a SQL injection vulnerability in the PHPp 1.0 (David Bennett PHP-Post) profile.php where the user parameter allows remote arbitrary SQL execution. Affected component: profile.php in PHP-Post (PHPp) 1.0 and earlier. Root cause: unsafely interpolated user input in ...
CVE-2006-4879
SQL injection vulnerability in profile.php in David Bennett PHP-Post PHPp 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter...
CVE-2006-4161
Directory traversal vulnerability in the avatargallery action in profile.php in XennoBB 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the category parameter...
CVE-2006-4161
CVE-2006-4161 : The provided documents confirm a directory-traversal flaw in XennoBB 2.1.0 and earlier, located in the profile.php avatar_gallery action. An attacker could read arbitrary files by supplying a .. (dot dot) sequence in the category parameter. The NVD entry lists the affected softwar...
CVE-2006-4161
Directory traversal vulnerability in the avatargallery action in profile.php in XennoBB 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the category parameter...
CVE-2006-4025
SQL injection vulnerability in profile.php in XennoBB 2.1.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the 1 bdayday, 2 bdaymonth, and 3 bdayyear parameters in the personal section...
CVE-2006-4025
XennoBB 2.1.0 (and earlier) contains a SQL injection in profile.php. The vulnerability affects the personal section via the bday_day, bday_month, and bday_year parameters, enabling a remote authenticated user to manipulate SQL commands. The CVSS-derived impact indicates partial confidentiality, i...
yabbse-all.txt
Hey str0ke - Are you the same str0ke whose code I've been ripping, damn I guess I better release my first N3td3v Sponsering Disclosure..... NDSD-06-001: YABBSE SQL Injection June 23, 2006 -- Sponsered post http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046903.html -- Affected Vendor...
CVE-2006-3275
CVE-2006-3275 affects YaBB SE 1.5.5 and earlier, with a SQL injection in profile.php via a double-encoded user parameter in the viewprofile action. The underlying issue is a lack of proper input handling that allows remote attackers to execute SQL commands. Documented impact includes potential da...
YaBB SE <= 1.5.5 profile.php user Parameter SQL Injection
Binary data 3669.prm...
wbb<<--v 2.1.6 "profile.php" SQL injection
============================================== Discovered By: CrAzY CrAcKeR Site:www.alshmokh.com I want to thank my friend:- nono225-mHOn-rageh-Lover Hacker-Sw33t h4ck3r Breeeeh-BoNym-Rootshill-LiNuXrOOt-SauDiVirUs ============================================== Example:-...
FunkBoardCF0.71.txt
Title : FunkBoard CF0.71 profile.php Remote User Pass Change Exploit Author : ajann REMOTE USER PASS CHANGE EXPLOİT; Change: = ID AND action Profile User Name ajann Membership Number 247 First Registered Sat 03 Jun 2006 at 09:20:14 pm Last Login Sat 03 Jun 2006 at 09:21:45 pm Number of posts 0...