6338 matches found
GPB Bulletin Board Multiple Remote File Inclusion Vulnerabilities
No description provided by source. GPB bulletin board Remote file include Download script : http://gpb.sourceforge.net/download/archive/gpb-unstable-2001.11.14-1.tar.gz D0rk : Download Script and install it in ur machine Exploit : http://localhost/gpbpath/themes/ubb/login.php?theme=shell.txt?...
CVE-2007-2204: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in GPL PHP Board GPB unstable-2001.11.14-1 allow remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter to 1 db.mysql.inc.php or 2 gpb.inc.php in include/, or the 3 theme parameter to themes/ubb/login.php...
GPB Bulletin Board - Multiple Remote File Inclusions
GPB Bulletin Board - Multiple Remote File Inclusions GPB bulletin board Remote file include Download script : http://gpb.sourceforge.net/download/archive/gpb-unstable-2001.11.14-1.tar.gz D0rk : Download Script and install it in ur machine Exploit :...
GPB Bulletin Board - Multiple Remote File Inclusions
GPB bulletin board Remote file include Download script : http://gpb.sourceforge.net/download/archive/gpb-unstable-2001.11.14-1.tar.gz D0rk : Download Script and install it in ur machine Exploit : http://localhost/gpbpath/themes/ubb/login.php?theme=shell.txt?...
GPB Bulletin Board Multiple Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ================================================================= GPB Bulletin Board Multiple Remote File Inclusion Vulnerabilities ================================================================= GPB bulletin board Remote file include...
PunBB <= 1.2.14 Multiple Vulnerabilities (Advisory)
Title: PunBB = 1.2.14 Multiple Vulnerabilities Author: DarkFig gmdarkfig at gmail dot com Written on: 2007/04/08 Released on: 2007/04/11 Risk level: High URL: http://www.acid-root.new.fr/advisories/13070411.txt Summary: SQL Injection, Cross site scripting, Code execution Solution: A new version o...
PT-2007-3062 · Phpbb · Phpbb
Name of the Vulnerable Software and Affected Versions: phpBB version 2.0.19 Description: A remote file inclusion issue in the includes/usercp register.php file allows remote attackers to execute arbitrary PHP code via a URL in the phpbb root path parameter. However, it has been noted that this...
Web Wiz Forums 8.05 (MySQL version) SQL Injection
There is a vulnerability in MySQL version of Web Wiz Forums, free ASP bulletin board system software, enabling SQL injection. The vulnerability is in the code used to filter string parameters prior to including them in the SQL queries: 'Format SQL Query funtion Private Function formatSQLInputByVa...
CVE-2007-1518
SQL injection vulnerability in usergroups.php in Woltlab Burning Board wBB 2.x allows remote attackers to execute arbitrary SQL commands via the array index of the applicationids array...
Sql injection
SQL injection vulnerability in usergroups.php in Woltlab Burning Board wBB 2.x allows remote attackers to execute arbitrary SQL commands via the array index of the applicationids array...
CVE-2007-1518
The CVE-2007-1518 entry describes a SQL injection in Woltlab Burning Board (wBB) 2.x, via usergroups.php where an attacker can manipulate the array index of applicationids to execute arbitrary SQL. The root cause is input handling that allows SQL commands through an array index, enabling remote e...
CVE-2007-1518
SQL injection vulnerability in usergroups.php in Woltlab Burning Board wBB 2.x allows remote attackers to execute arbitrary SQL commands via the array index of the applicationids array...
CVE-2006-7169
PHP remote file inclusion vulnerability in includes/headersimple.php in Ultimate PHP Board UPB 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGskindir parameter...
CVE-2007-1518: Undefined Security Weakness
SQL injection vulnerability in usergroups.php in Woltlab Burning Board wBB 2.x allows remote attackers to execute arbitrary SQL commands via the array index of the applicationids array...
CVE-2006-7169: Undefined Security Weakness
PHP remote file inclusion vulnerability in includes/headersimple.php in Ultimate PHP Board UPB 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CONFIGskindir parameter...
Unclassified NewsBoard 1.6.3 multiples logs disclosure
board log disclosure : can see the board log in :http://site.com/unblib/logs/board-2007-03-16.log mail disclosure : can see every mail/pm sended in : http://site.com/unblib/logs/email-YY-MONTH-DAY-HOURS-MINUTS-SEC.log sql error disclosure : can see every error sql :...
Woltlab Burning Board UserGroups.PHP SQL注入漏洞
Woltlab Burning Board是一款基于PHP的WEB应用程序。 Woltlab Burning Board不正确过滤用户提交的输入,远程攻击者可以利用漏洞进行SQL注入攻击,可获得敏感信息。 问题是'UserGroups.PHP'脚本对用户提交的WEB参数缺少过滤,提交恶意SQL代码作为参数数据,可导致更改原来的SQL逻辑,获得敏感信息。 Woltlab Burning Board 2.7 Woltlab Burning Board 2.6 Woltlab Burning Board 2.5 Woltlab Burning Board 2.4 Woltlab Burning...
Woltlab Burning Board 2.x (usergroups.php) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Woltlab Burning Board 2.X usergroups.php SQL Injection exploit - burned2.pl written by x666 [email protected] jmp-esp.kicks-ass.net;blueshisha.chills.it SR-CREW should work on every wbb regardless of php settings. use strict; use warnings;...
Woltlab Burning Board 2.x - usergroups.php SQL Injection
Woltlab Burning Board 2.x - usergroups.php SQL Injection !/usr/bin/perl Woltlab Burning Board 2.X usergroups.php SQL Injection exploit - burned2.pl written by x666 jmp-esp.kicks-ass.net;blueshisha.chills.it SR-CREW should work on every wbb regardless of php settings. use strict; use warnings; use...
Woltlab Burning Board 2.x (usergroups.php) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================================= Woltlab Burning Board 2.x usergroups.php Remote SQL Injection Exploit ======================================================================= !/usr/bin/perl Woltlab...