CVE-2007-2778

Multiple directory traversal vulnerabilities in MolyX BOARD 2.5.0 allow remote attackers to read arbitrary files via a .. dot dot in the lang parameter to index.php and other unspecified PHP scripts...

CVE-2007-2778

Multiple directory traversal vulnerabilities in MolyX BOARD 2.5.0 allow remote attackers to read arbitrary files via a .. dot dot in the lang parameter to index.php and other unspecified PHP scripts...

CVE-2007-2778

CVE-2007-2778 affects MolyX BOARD 2.5.0 with multiple directory traversal flaws. The vulnerability allows remote attackers to read arbitrary files by supplying a .. (dot dot) path in the lang parameter to index.php and other PHP scripts. The root cause is uncontrolled path traversal in the langua...

molyx-lfi.txt

=============== MolyX BOARD 2.5.0 Local File Inclusion ==== Possibly other versions =============== Vulnerability found by MurderSkillz ============================================== =============== d0rk "Powered by MolyX BOARD 2.5.0" ========================================= ===============...

CVE-2007-2778: Undefined Security Weakness

Multiple directory traversal vulnerabilities in MolyX BOARD 2.5.0 allow remote attackers to read arbitrary files via a .. dot dot in the lang parameter to index.php and other unspecified PHP scripts...

MolyX BOARD 2.5.0 (index.php lang) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ===================================================================== MolyX BOARD 2.5.0 index.php lang Local File Inclusion Vulnerability ===================================================================== =============== MolyX BOARD 2.5...

MolyX BOARD 2.5.0 - index.php?lang Local File Inclusion

MolyX BOARD 2.5.0 - index.php?lang Local File Inclusion =============== MolyX BOARD 2.5.0 Local File Inclusion ==== Possibly other versions =============== Vulnerability found by MurderSkillz ============================================== =============== d0rk "Powered by MolyX BOARD 2.5.0"...

MolyX BOARD 2.5.0 - 'index.php?lang' Local File Inclusion

=============== MolyX BOARD 2.5.0 Local File Inclusion ==== Possibly other versions =============== Vulnerability found by MurderSkillz ============================================== =============== d0rk "Powered by MolyX BOARD 2.5.0" ========================================= ===============...

sbb-sql.txt

netVigilance Security Advisory 19 SonicBB version 1.0 Multiple SQL Injection Vulnerabilities Description: SonicBB is a user-friendly and fully customizable bulletin board package. SonicBB is compatible with any web server/operating system combo with PHP 4.x or higher installed.SonicBB is the idea...

[Full-disclosure] SonicBB version 1.0 XSS Attack Vulnerabilities

netVigilance Security Advisory 20 SonicBB version 1.0 XSS Attack Vulnerabilities Description: SonicBB is a user-friendly and fully customizable bulletin board package. SonicBB is compatible with any web server/operating system combo with PHP 4.x or higher installed.SonicBB is the ideal community...

[Full-disclosure] SonicBB version 1.0 Multiple Path Disclosure Vulnerabilities

netVigilance Security Advisory 18 SonicBB version 1.0 Multiple Path Disclosure Vulnerabilities Description: SonicBB is a user-friendly and fully customizable bulletin board package. SonicBB is compatible with any web server/operating system combo with PHP 4.x or higher installed.SonicBB is the...

[Full-disclosure] SonicBB version 1.0 Multiple SQL Injection Vulnerabilities

netVigilance Security Advisory 19 SonicBB version 1.0 Multiple SQL Injection Vulnerabilities Description: SonicBB is a user-friendly and fully customizable bulletin board package. SonicBB is compatible with any web server/operating system combo with PHP 4.x or higher installed.SonicBB is the idea...

Cross site scripting

Cross-site scripting XSS vulnerability in Invision Power Board IP.Board 2.1.x and 2.2.x allows remote attackers to inject arbitrary web script or HTML by uploading crafted images or PDF files...

CVE-2007-2349

Cross-site scripting XSS vulnerability in Invision Power Board IP.Board 2.1.x and 2.2.x allows remote attackers to inject arbitrary web script or HTML by uploading crafted images or PDF files...

CVE-2007-2349

Cross-site scripting XSS vulnerability in Invision Power Board IP.Board 2.1.x and 2.2.x allows remote attackers to inject arbitrary web script or HTML by uploading crafted images or PDF files...

GPB bulletin board Remote file include

GPB bulletin board Remote file include Download script : http://gpb.sourceforge.net/download/archive/gpb-unstable-2001.11.14-1.tar.gz D0rk : Download Script and install it in ur machine Exploit : http://localhost/gpbpath/themes/ubb/login.php?theme=shell.txt?...

CVE-2007-2349: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Invision Power Board IP.Board 2.1.x and 2.2.x allows remote attackers to inject arbitrary web script or HTML by uploading crafted images or PDF files...

GPB Bulletin Board远程文件包含漏洞

GPB Bulletin Board是一款基于PHP的WEB应用程序。 GPB Bulletin Board不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'rootpath'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 GPB bulletin board 2001.11.14-1 目前没有解决方案提供： http://gpb.sourceforge.net/ http://www.example.com/gpbpath/themes/ubb/login.php?theme=shell.txt?...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in GPL PHP Board GPB unstable-2001.11.14-1 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 db.mysql.inc.php or 2 gpb.inc.php in include/, or the 3 theme parameter to themes/ubb/login.php...

CVE-2007-2204

The CVE-2007-2204 entries describe multiple PHP remote file inclusion vulnerabilities in GPL PHP Board (GPB) unstable-2001.11.14-1. An attacker could trigger arbitrary PHP code execution by supplying a URL in the root_path parameter for include/db.mysql.inc.php or include/gpb.inc.php, or via the ...