266 matches found
CVE-2007-2524
Cross-site scripting XSS vulnerability in index.pl in Open Ticket Request System OTRS 2.0.x allows remote attackers to inject arbitrary web script or HTML via the Subaction parameter in an AgentTicketMailbox Action. NOTE: DEBIAN:DSA-1299 originally used this identifier for an ipsec-tools issue, b...
CVE-2007-2524
CVE-2007-2524 describes a cross-site scripting (XSS) vulnerability in the Open Ticket Request System (OTRS) 2.0.x. The flaw occurs in the index.pl script via the Subaction parameter in an AgentTicketMailbox Action, enabling an attacker to inject arbitrary web script or HTML. The connected OSS/NSS...
CVE-2006-6421
Cross-site scripting XSS vulnerability in the private message box implementation privmsg.php in phpBB 2.0.x allows remote authenticated users to inject arbitrary web script or HTML via the "Message body" field in a message to a non-existent user...
CVE-2006-6421
CVE-2006-6421 is an XSS in phpBB 2.0.x; the private messaging (privmsg.php) feature allows remote authenticated users to inject arbitrary script/HTML via the Message body when targeting a non-existent user. Affected component: phpBB 2.0.x private messaging; root cause is user-supplied input not s...
phpbb 2.0.x [xss]
vendor site:http://phpbb.com/ product:phpbb bug:xss risk:low A xss post has been discovered in phpbb ,the impact of this attack is very low ,because it's more a bug , than a vulnerability . An authentificated user can excute some html code in his private message box , by sending a message to an...
phpBB Security Suite Mod 1.0.0 (logger_engine.php) Remote File Include
No description provided by source. / \ \ \ ,, / / '-./.-' .--' '--. / / /""\ \ \ SpiderZ Hacking Security | | | | \ \ / / '..' Author: SpiderZ Security Suite IP Logger Remote File Inclusion Vulnerability For: phpBB 2.0.x - 2.0.21 Site: www.spiderz.altervista.org Site02: www.spiderz.netsons.org...
phpBB Admin Topic Action Logging Mod <= 0.94b File Include Vuln
Exploit for unknown platform in category web applications =============================================================== phpBB Admin Topic Action Logging Mod | | \ \ / / '..' Author: SpiderZ Admin Topic Action Logging Remote File Inclusion Vulnerability Version 0.95 Admin Topic Action Logging Fo...
phpBB Admin Topic Action Logging Mod 0.94b - Remote File Inclusion
/ \ \ \ ,, / / '-./.-' .--' '--. / / /""\ \ \ SpiderZ Hacking Security | | | | \ \ / / '..' Author: SpiderZ Admin Topic Action Logging Remote File Inclusion Vulnerability Version 0.95 Admin Topic Action Logging For: phpBB 2.0.x - 2.0.21 Site: www.spiderz.altervista.org Site02:...
phpBB Admin Topic Action Logging Mod 0.94b - Remote File Inclusion
phpBB Admin Topic Action Logging Mod 0.94b - Remote File Inclusion / \ \ \ ,, / / '-./.-' .--' '--. / / /""\ \ \ SpiderZ Hacking Security | | | | \ \ / / '..' Author: SpiderZ Admin Topic Action Logging Remote File Inclusion Vulnerability Version 0.95 Admin Topic Action Logging For: phpBB 2.0.x -...
CVE-2006-5108
Multiple cross-site scripting XSS vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitrary web script or HTML via the orderid parameter in 1 admin/printorder.php and 2 vieworder.php; the 3 siteurl and 4 lasearchhome parameters and 5 certain language parameters in...
security flaw
Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x aka StarOffice up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents...
CVE-2005-3619
CVE-2005-3619 affects VMware ESX Server management interface. The issue is a cross-site scripting (XSS) vulnerability in the web-based syslog viewer, where messages displayed without proper sanitization can inject arbitrary script/HTML. Affected versions include ESX 2.5.x prior to 2.5.2 upgrade p...
CVE-2006-2061
CVE-2006-2061 : SQL injection in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 via the ck parameter in lib/func_taskmanager.php allows remote attackers to execute arbitrary SQL commands. The vulnerability is triggered by input that is injected into database queries, with up to 32 cha...
phpBBupload.txt
Advisory 1 "phpBB Upload Script "up.php" Arbitrary File Upload" $ Author: Status-x $ Contact: [email protected] - [email protected] $ Date: 7 April 2005 $ Website: http://defacers.com.mx $ Original Advisory: http://www.defacers.com.mx/advisories/2.txt $ Risk: High $ Vendor URL:...
dlmanphpBB.txt
SQL Injection was found in the Variable $fileid in : DLMan Pro' Mod vulnerable system : phpBB 2.0.x exploit : dlman.php?func=fileinfo&fileid='SQL Injection Bug Found by : LovER BOY SecurityGurus Team www.securitygurusd0tNet...
linkslinks.txt
SQL Injection was found in the Variable $id in : LinksLinks Pro Mod vulnerable system : phpBB 2.0.x exploit : links.php?func=show&id='SQL Injection Bug Found by : LovER BOY SecurityGurus Team www.securitygurusd0tNet...
CVE-2005-1047
Meilad File upload script up.php mod for phpBB 2.0.x does not properly limit the types of files that can be uploaded, which allows remote authenticated users to execute arbitrary commands by uploading PHP files, then directly requesting them from the uploads directory...
CVE-2005-1026
Multiple SQL injection vulnerabilities in SnailSource phpBB 2.0.x mods allow remote attackers to execute arbitrary SQL commands via the 1 fileid parameter to dlman.php in DLMan Pro or 2 id parameter to links.php in Linkz Pro aka LinksLinks Pro...
phpBB Upload Script "up.php" Arbitrary File Upload
Advisory 1 "phpBB Upload Script "up.php" Arbitrary File Upload" $ Author: Status-x $ Contact: [email protected] - [email protected] $ Date: 7 April 2005 $ Website: http://defacers.com.mx $ Original Advisory: http://www.defacers.com.mx/advisories/2.txt $ Risk: High $ Vendor URL:...
CVE-2005-1047
Meilad File upload script up.php mod for phpBB 2.0.x does not properly limit the types of files that can be uploaded, which allows remote authenticated users to execute arbitrary commands by uploading PHP files, then directly requesting them from the uploads directory...