phpBB Module XS-Mod 2.3.1 Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ phpBB Module XS-Mod 2.3.1 Local File Inclusion Vulnerability ============================================================...

Fedora 8 : wordpress-2.3.3-0.fc8 (2008-1559)

Fri Feb 8 2008 John Berninger - 2.3.3-0 - update to 2.3.3 for security fixes - BZ 431547 - Sun Dec 30 2007 Adrian Reber - 2.3.2-1 - updated to 2.3.2 bz 426431, Draft Information Disclosure - Tue Oct 30 2007 Adrian Reber - 2.3.1-1 - updated to 2.3.1 bz 357731, wordpress XSS issue - Mon Oct 15 2007...

WordPress wp-db.php Character Set SQL Injection Vulnerability

CVE-2007-6318 WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in...

jPORTAL 2.3.1 & UserPatch (forum.php) Remote Code Execution Exploit

Exploit for unknown platform in category web applications =================================================================== jPORTAL 2.3.1 & UserPatch forum.php Remote Code Execution Exploit =================================================================== ? $host = $argv1; $path = $argv2;...

jPORTAL 2.3.1 & UserPatch - 'forum.php' Remote Code Execution

 $host = $argv1; $path = $argv2; $phpcode = $argv3; $info = "\n\n". " jPORTAL 2.3.1 & UserPatch forum.php Remote PHP Code Execution Exploit\n". "\n". " author: irk4zatyahoo.pl\n". " http://irk4z.wordpress.com\n". "\n". "\n". " greetz: str0ke, wacky, polish under :\n"...

WordPress未授权帖子访问漏洞

WordPress是一款流行的博客程序。 WordPress不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞未授权读取之前发布的帖子。 问题是Wordpress信任$SERVER'REQUESTURI'全局变量，操作$SERVER'REQUESTURI'可导致多个跨站缺陷，虽然攻击者不能控制所有$SERVER变量，但也不能信任所有变量。 如： htttp://localhost/wordpress/'wp-admin/ 会导致$SERVER'REQUESTURI'和$SERVER'PHPSELF'包含如下值： htttp://localhost/wordpress/'wp-admi...

WordPress $_SERVER变量跨站脚本漏洞

BUGTRAQ ID: 26885 WordPress是一款免费的论坛Blog系统。 WordPress处理全局变量时存在漏洞，远程攻击者可能利用此漏洞控制导致跨站脚本执行攻击。 WordPress信任了$SERVER'REQUESTURI'全局变量，因此远程攻击者控制了$SERVER'REQUESTURI'就可以执行跨站脚本攻击。以下是/wp-includes/query.php文件中第34行的有漏洞函数： function isadmin global $wpquery; return $wpquery-isadmin || stripos$SERVER'REQUESTURI',...

WordPress Core 2.3.1 - Unauthorized Post Access

source: https://www.securityfocus.com/bid/26885/info WordPress is prone to a vulnerability that lets unauthorized users read draft posts before they have been published. This issue affects WordPress 2.3.1; other versions may also be affected. NOTE: This BID is being reinstated because further...

CVE-2007-6318

CVE-2007-6318 is a SQL injection vulnerability in WordPress, affecting wp-includes/query.php in WordPress 2.3.1 and earlier. The issue allows remote attackers to alter the database via the s parameter when DB_CHARSET is set to encodings that support a backslash in multibyte characters (e.g., Big5...

Sun OpenOffice.org < 2.3.1 Database HSQLDB Database Document Handling Arbitrary Java Code Execution

The remote host is running a version of Sun Microsystems OpenOffice.org that contains an arbitrary code execution vulnerability in its HSQLDB database engine. If a remote attacker can trick a user into opening a specially crafted database, this issue can be leveraged to execute arbitrary static...

CVE-2007-5973

SQL injection vulnerability in articles.php in JPortal 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter...

Sql injection

SQL injection vulnerability in articles.php in JPortal 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter...

CVE-2007-5973

SQL injection vulnerability in articles.php in JPortal 2.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter...

jPORTAL &lt;= 2.3.1 articles.php Remote SQL Injection Vulnerability

No description provided by source. Title:jPORTAL = 2.3.1 and Remote SQL Injection Vulnerability Dork: intext:"jPORTAL 2" & inurl:"articles.php?topic=" Autor: Alexsize E-Mail: [email protected] Site: Antichat.ru articles.php?topic=-3+union+select+1,pass,3,4,5+from+admins/ Vuln code: function...

jPORTAL <= 2.3.1 articles.php Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ jPORTAL '.$r'title'.''; 0day.today 2018-01-10...

[waraxe-2007-SA#059] - XSS in WordPress 2.3

waraxe-2007-SA059 - XSS in WordPress 2.3 ==================================================================== Author: Janek Vind "waraxe" Date: 27. October 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-59.html Target software description: WordPress is a state-of-the-art semanti...

CVE-2001-1585

CVE-2001-1585: OpenSSH 2.3.1 development snapshot (2001-01-18 to 2001-02-08) exposes a flaw in SSH protocol 2 public key authentication: it does not perform a challenge–response step to verify the client’s private key, allowing remote attackers to bypass authentication by using a public key from ...

CVE-2007-4914

Unspecified vulnerability in the subscriptions manager in Invision Power Board IPB or IP.Board 2.3.1 before 20070912 allows remote authenticated users to change the member ID and reduce the privilege level of arbitrary users via a crafted payment form, related to 1 classgw2checkout.php, 2...

Woltlab Burning Board UserGroups.PHP SQL注入漏洞

Woltlab Burning Board是一款基于PHP的WEB应用程序。 Woltlab Burning Board不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'UserGroups.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 Woltlab Burning Board 2.7 Woltlab Burning Board 2.6 Woltlab Burning Board 2.5 Woltlab Burning Board 2.4 Woltlab Burning...

CVE-2007-0912

Cross-Site Request Forgery CSRF vulnerability in admin/admin.adm.php in Jportal 2.3.1, and possibly earlier, allows remote attackers to perform privileged actions as administrators by tricking the admin into accessing a URL with modified arguments to admin/admin.adm.php...