CVE-2006-0523

The vulnerability CVE-2006-0523 is an SQL injection flaw in MyBB’s global.php (templatelist variable) affecting versions prior to 1.03. The issue allows remote attackers to modify SQL queries, potentially compromising data. The core detail is that templatelist input is used in SQL statements with...

arabPortalSQL.txt

Hi .. This is small bug for Arab Portal System v2 Beta 2 File name :- global.php Remote:- Yes Credit :- Devil-00 Messenger :- E-Mail :- //-- Devil SQL Injection / This SQL can do when :- magicquotesgpc = Off $sessionid query"DELETE FROM rafiaonline WHERE onlineSID ='$sessionid' or timestamp...

Arab Portal v2 Beta2 SQL Injections

Hi .. This is small bug for Arab Portal System v2 Beta 2 File name :- global.php Remote:- Yes Credit :- Devil-00 Messenger :- [email protected] E-Mail :- [email protected] //-- Devil SQL Injection / This SQL can do when :- magicquotesgpc = Off $sessionid Bad Var Attacking :-...

CVE-2002-1922

CVE-2002-1922 describes a Cross-site Scripting (XSS) vulnerability in Jelsoft vBulletin, affecting versions 2.0.0 through 2.2.8. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) $scriptpath or (2) $url variables in global.php. The connected documents confirm th...

CVE-2002-1922

Cross-site scripting XSS vulnerability in global.php in Jelsoft vBulletin 2.0.0 through 2.2.8 allows remote attackers to inject arbitrary web script or HTML via the 1 $scriptpath or 2 $url variables...

MercuryBoard 1.1.4 SQL Injection

RST/GHC Advisory 28 Product : MercuryBoard Version : 1.1.4 FILE : index.php VULN : SQL injection CODE : global.php ---------- 71 : $this-agent = isset$SERVER'HTTPUSERAGENT' ? $SERVER'HTTPUSERAGENT' : null; index.php --------- 154 : $mercury-db-query"REPLACE INTO $mercury-preactive activeid,...

CVE-2005-1883

global.php in YaPiG 0.92b allows remote attackers to include arbitrary local files via the BASEDIR parameter...

CVE-2005-1883

global.php in YaPiG 0.92b allows remote attackers to include arbitrary local files via the BASEDIR parameter...

vBulletin XSS Security Bug

.:: vBulletin XSS Security Bug vBulletin is a powerful and widely used bulletin board system, based on PHP language and MySQL database. One of its features is the usage of templates to modify the boards look. I discovered lately a Cross-Site Scripting vulnerability that would attackers to inject...