56 matches found
CVE-2009-2161
Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-insensitive web site, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ssuri parameter, in conjunction with a modified component name...
Directory traversal
Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic 1.09, when used on a case-insensitive web site, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the ssuri parameter, in conjunction with a modified component name...
CVE-2009-2156
Multiple cross-site scripting XSS vulnerabilities in TorrentTrader Classic 1.09 allow remote authenticated users to inject arbitrary web script or HTML via 1 the Title field to requests.php, related to viewrequests.php; and 2 the Torrent Name field to torrents-upload.php, related to the logging o...
CVE-2009-2156
CVE-2009-2156 affects TorrentTrader Classic 1.09, with multiple XSS vulnerabilities that allow remote authenticated users to inject arbitrary scripts via numerous parameters and fields (e.g., Title in requests.php; Torrent Name in torrents-upload.php; ttversion, SITENAME, CURUSER[username], today...
PT-2009-4610 · Torrenttrader · Torrenttrader Classic
Name of the Vulnerable Software and Affected Versions: TorrentTrader Classic version 1.09 Description: The issue allows remote attackers to obtain a password via a brute-force attack because the account-recover.php file chooses random passwords from an insufficiently large set. Recommendations: F...
wbbrgallery-sql.txt
import sys, urllib2, re print "\n " print " \'/ " print " -.- " print " -------------------oOO------OOo--------------------" print " | rGallery 1.09 +- Exploit by Five-Three-Nine |" print " | Using Blind SQL Injection in 'itemID' of rGallery |" print " | |" print " | Greets and Shouts to: |" prin...
WBB Plugin rGallery 1.09 - itemID Blind SQL Injection
WBB Plugin rGallery 1.09 - itemID Blind SQL Injection import sys, urllib2, re print "\n " print " \'/ " print " -.- " print " -------------------oOO------OOo--------------------" print " | rGallery 1.09 +- Exploit by Five-Three-Nine |" print " | Using Blind SQL Injection in 'itemID' of rGallery |...
WBB Plugin rGallery 1.09 (itemID) Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================= WBB Plugin rGallery 1.09 itemID Blind SQL Injection Exploit ============================================================= import sys, urllib2, re print "\n " print " \'/ " print...
CVE-2007-6237
cp.php in DeluxeBB 1.09 fails to verify that the membercookie matches the authenticated member during profile updates, enabling remote authenticated users to change e-mails for arbitrary accounts via a modified membercookie parameter (a different vector than CVE-2006-4078). This can be leveraged ...
DeluxeBB CP.PHP安全绕过漏洞
DeluxeBB是一款基于PHP的WEB应用程序。 DeluxeBB不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞更改管理员信息。 问题是由于'cp.php'脚本对用户提交的WEB参数缺少过滤，当更新自身的档案时，DeluxeBB执行如下有问题代码： $db-unbufferedquery"UPDATE ".$prefix."users SET email='$xemail', msn='$xmsn', icq='$xicq', ... WHERE username='$membercookie'"; 因此可更改cookie "membercookie"，如更改远程用户的EMAI...
CVE-2006-5154
DeluxeBB 1.09 and earlier are affected by a PHP remote file inclusion in cp/sig.php. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a malicious URL in the templatefolder parameter, enabling remote code execution. Affected component: cp/sig.php; root cause: unsafe ...
[SA22176] DeluxeBB "templatefolder" File Inclusion Vulnerability
TITLE: DeluxeBB "templatefolder" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA22176 VERIFY ADVISORY: http://secunia.com/advisories/22176/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: DeluxeBB 1.x http://secunia.com/product/5702/...
CVE-2006-3110
The CVE-2006-3110 issue affects Chipmailer 1.09 and is a Cross-site Scripting (XSS) vulnerability in main.php, exploitable through the (1) name, (2) betreff, (3) mail, and (4) text parameters. The NVD entry documents a MEDIUM impact (CVSS v2: AV:N/AC:M/Au:N/C:N/I:P/A:N) with a base score of 4.3. ...
CVE-2006-3111
Chipmailer 1.09 contains multiple SQL injection flaws in main.php that let remote attackers execute arbitrary SQL commands via parameters (anfang, name, mail, anrede, vorname, nachname, gebtag, gebmonat, gebjahr) with network access and no authentication. The NVD entry IDs CVE-2006-3111 document ...