CVE-2006-2914

CVE-2006-2914 concerns DeluxeBB 1.06 with a remote file inclusion flaw. Secunia and Secunia-derived documents describe an vulnerability where input passed to the templatefolder parameter in several scripts (deluxe/postreply.php, deluxe/posting.php, deluxe/pm/newpm.php and corresponding default/ v...

CVE-2006-2914

PHP remote file inclusion vulnerability in DeluxeBB 1.06 allows remote attackers to execute arbitrary code via a URL in the templatefolder parameter to 1 postreply.php, 2 posting.php, 3 and pm/newpm.php in the deluxe/ directory, and 4 postreply.php, 5 posting.php, and 6 pm/newpm.php in the defaul...

secunia-deluxebb.txt

====================================================================== Secunia Research 14/06/2006 - DeluxeBB SQL Injection and File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...

DeluxeBB 1.06 - 'templatefolder' Remote File Inclusion

Secunia Research has discovered some vulnerabilities in DeluxeBB, which can be exploited by malicious people to conduct SQL injection attacks and compromise a vulnerable system. 1 Input passed to the "templatefolder" parameter in various scripts isn't properly verified, before it is used to inclu...

CVE-2006-2503

SQL injection vulnerability in misc.php in DeluxeBB 1.06 allows remote attackers to execute arbitrary SQL commands via the name parameter...

Sql injection

SQL injection vulnerability in misc.php in DeluxeBB 1.06 allows remote attackers to execute arbitrary SQL commands via the name parameter...

CVE-2006-2503

The CVE-2006-2503 entry documents a SQL injection in DeluxeBB (version 1.06) affecting misc.php, exploitable remotely via the name parameter to execute arbitrary SQL commands. The NVD metrics indicate a high impact with CVSS v2 base score 7.5, attack vector NETWORK, attack complexity LOW, authent...

CVE-2006-2503

SQL injection vulnerability in misc.php in DeluxeBB 1.06 allows remote attackers to execute arbitrary SQL commands via the name parameter...

DeluxeBB 1.06 - 'name' SQL Injection (mq=off)

!/usr/bin/perl use IO::Socket; print q DeluxeBB 1.06 Remote SQL Injection Exploit exploit discovered and coded by KingOfSka http://contropotere.netsons.org ; if !$ARGV2 print q Usage: perl dbbxpl.pl host /directory/ victimuserid perl dbbxpl.pl www.somesite.com /forum/ 1 ; $server = $ARGV0; $dir =...

DeluxeBB <= 1.06 (name) Remote SQL Injection Exploit (mq=off)

No description provided by source. !/usr/bin/perl use IO::Socket; print q DeluxeBB 1.06 Remote SQL Injection Exploit exploit discovered and coded by KingOfSka http://contropotere.netsons.org ; if !$ARGV2 print q Usage: perl dbbxpl.pl host /directory/ victimuserid perl dbbxpl.pl www.somesite.com...

XSS in phpFoX Version 1.06

Advisory: XSS in phpFoX Version 1.06 Home Page: http://www.phpfox.com/ Уязвимость/Vulnerability: Межсайтовый скриптинг/Cross Site Scripting http://www.arcticarmy.co.uk/user/?P=Daalvashi"scriptalert/script" http://www.arcticarmy.co.uk/user/?G=Cutiebubbleboo"scriptalert/script"...

CVE-2005-4616

CVE-2005-4616 concerns an SQL injection in index.php of iSupport 1.06 via the include_file parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, impacting confidentiality, integrity, and availability (as per the provided CVSS metrics: AV:N/AC:L/Au:N/C:P/I:P/A:P, ...

CVE-2005-4616

SQL injection vulnerability in index.php in iSupport 1.06 allows remote attackers to execute arbitrary SQL commands via the includefile parameter...

iSupport 1.x "include_file" SQL inj.

iSupport 1.x "includefile" SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/isupport-1x-includefile-sql-inj.html Vendor:http://www.idevspot.com/ Product link:http://www.idevspot.com/index.php?page=pdetail7E1 affected vesion: tested on 1.06...

CVE-2005-2209

CVE-2005-2209 affects Capturix ScanShare 1.06 build 50. The connected PT-2005-3138 entry confirms the issue is the storage of passwords in cleartext in the capturixss_cfg.ini file, which is readable by local users. The root cause is cleartext storage of sensitive information in a local configurat...

Endless loop in Halo 1.06

Luigi Auriemma Application: Halo: Combat Evolved http://www.microsoft.com/games/pc/halo.aspx Versions: = 1.06 and Custom Edition 1.00 Platforms: Windows Bug: endless loop Exploitation: remote, versus server Date: 24 May 2005 Author: Luigi Auriemma e-mail: [email protected] web:...

Gearbox Software Halo Game Server 1.06/1.07 - Infinite Loop Denial of Service

source: https://www.securityfocus.com/bid/13728/info The Halo Game Server is prone to a denial-of-service condition. The issue arises when malformed data is sent to the game server, causing it to enter an infinite loop. This issue was reported to affect Halo Game Server 1.06; earlier versions are...

CVE-2005-1419

CVE-2005-1419 affects Ocean12 Mailing List Manager 1.06, where the admin login panel is vulnerable to SQL injection via the Admin_id parameter. The available connected documents confirm the root cause as an SQL injection flaw in the admin authentication path, enabling remote attackers to execute ...

CVE-2004-1320

Asante FM2008 running firmware 1.06 is shipped with a default username and password, which could allow remote attackers to gain unauthorized access...

OpenBB 1.06 SQL Injection

Hello bugtraq readers, A vulnerability exists in OpenBB 1.06 that could allow an attacker to manipulate SQL queries and obtain sensitive information from the database such as the administrator md5 password hash. This vulnerability exists because the index.php script of the application does not...