6331 matches found
212Cafe Board 0.08 Beta 6.30 Beta - Multiple Cross-Site Scripting Vulnerabilities
212Cafe Board 0.08 Beta 6.30 Beta - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/22167/info 212cafeBoard is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may...
Sql injection
SQL injection vulnerability in search.php in Woltlab Burning Board wBB 1.0.2 and earlier, and 2.3.6 and earlier in the 2.x series, allows remote attackers to execute arbitrary SQL commands via the boardids1 and other boardids parameters...
CVE-2007-0388
SQL injection vulnerability in search.php in Woltlab Burning Board wBB 1.0.2 and earlier, and 2.3.6 and earlier in the 2.x series, allows remote attackers to execute arbitrary SQL commands via the boardids1 and other boardids parameters...
CVE-2007-0388
CVE-2007-0388 affects Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2.x up to 2.3.6. The vulnerability is a SQL injection in the search.php handling of boardids[1] and other boardids[] parameters due to unsafe input handling, allowing remote attackers to execute arbitrary SQL commands. Publi...
CVE-2007-0388
SQL injection vulnerability in search.php in Woltlab Burning Board wBB 1.0.2 and earlier, and 2.3.6 and earlier in the 2.x series, allows remote attackers to execute arbitrary SQL commands via the boardids1 and other boardids parameters...
CVE-2007-0388: Undefined Security Weakness
SQL injection vulnerability in search.php in Woltlab Burning Board wBB 1.0.2 and earlier, and 2.3.6 and earlier in the 2.x series, allows remote attackers to execute arbitrary SQL commands via the boardids1 and other boardids parameters...
Woltlab Burning Board <= 1.0.2, 2.3.6 search.php SQL Injection Exploit
No description provided by source. ?php / http://www.undergroundagents.de coded by silent vapor [email protected] / printr' -------------------------------------------------------------------------------- Woltlab Burning Board Lite = 1.0.2 GetHashes over search.php Woltlab Burning...
netvigilance-sa10.txt
netVigilance Security Advisory 10 dtguestbook version 1.0f XSS vulnerability Description: dtguestbook is a fully-featured message board system with admin interface. Due to program flaws it is possible for the remote attacker to conduct XSS attacks. The remote attacker can convince the victim to...
Woltlab Burning Board <= 1.0.2, 2.3.6 search.php SQL Injection Exploit 3
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Response; $| = 1; print " Woltlab Burning Board 2.3.6 = / Lite Exploit Coded by 666 http://blueshisha.mutebox.net Bug by trew \n"; if$ARGV 0 print "x Usage: wbbsploit.pl Target Userid Searchstring\n"; exit; print "...
Woltlab Burning Board Search.PHP SQL注入漏洞
Woltlab Burning Board是一款基于PHP的WEB应用程序。 Woltlab Burning Board不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Search.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得敏感信息。 Woltlab Woltlab Burning Board Lite 1.0.2 WoltLab Burning Board Lite 1.0.2 WoltLab Burning Board Lite 1.0.1 e WoltLab Burning Board Lite...
CVE-2007-0340: Undefined Security Weakness
SQL injection vulnerability in inc/header.inc.php in ThWboard 3.0b2.84-php5 and earlier allows remote attackers to execute arbitrary SQL commands via the boardstyleid parameter to index.php...
Burning Board search.php boardids Parameter SQL Injection
Binary data 3888.prm...
WoltLab Burning Board search.php Multiple Parameter SQL Injection
The version of Burning Board / Burning Board Lite on the remote host fails to sanitize user input to the 'boardids' parameter of the 'search.php' script before using it in database queries. Regardless of PHP's 'registerglobals' and 'magicquotesgpc' settings, an unauthenticated, remote attacker ca...
Woltlab Burning Board <= 1.0.2, 2.3.6 search.php SQL Injection Exploit 3
Exploit for unknown platform in category web applications ======================================================================== Woltlab Burning Board Exploiting...\n"; my $url = shift; my $id = shift; my $sstring = shift; my $ua = LWP::UserAgent-new; my $request = new HTTP::Request'POST',...
Woltlab Burning Board <= 1.0.2, 2.3.6 search.php SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================================== Woltlab Burning Board = 1.0.2, 2.3.6 search.php SQL Injection Exploit ====================================================================== ?php /...
Woltlab Burning Board <= 1.0.2 2.3.6 search.php SQL Injection Exploit
No description provided by source. ?php / http://www.undergroundagents.de coded by silent vapor [email protected] / printr' -------------------------------------------------------------------------------- Woltlab Burning Board Lite = 1.0.2 GetHashes over search.php Woltlab Burning...
Woltlab Burning Board <= 1.0.2 2.3.6 search.php SQL Injection Exploit 3
No description provided by source. !/usr/bin/perl use LWP::UserAgent; use HTTP::Response; $| = 1; print " Woltlab Burning Board 2.3.6 = / Lite Exploit Coded by 666 http://blueshisha.mutebox.net Bug by trew \n"; if$ARGV 0 print "x Usage: wbbsploit.pl Target Userid Searchstring\n"; exit; print "...
dt_guestbook version 1.0f XSS vulnerability
netVigilance Security Advisory 10 dtguestbook version 1.0f XSS vulnerability Description: dtguestbook is a fully-featured message board system with admin interface. Due to program flaws it is possible for the remote attacker to conduct XSS attacks. The remote attacker can convince the victim to...
Woltlab Burning Board 1.0.22.3.6 - search.php SQL Injection (1)
Woltlab Burning Board 1.0.22.3.6 - search.php SQL Injection 1 ?php / http://www.undergroundagents.de coded by silent vapor [email protected] / printr' -------------------------------------------------------------------------------- Woltlab Burning Board Lite = 1.0.2 GetHashes over...
Woltlab Burning Board 1.0.22.3.6 - search.php SQL Injection (2)
Woltlab Burning Board 1.0.22.3.6 - search.php SQL Injection 2 !/usr/bin/perl Woltlab Burning Board 2.X/Lite search.php SQL Injection exploit - burned.pl written by trew should work on every wbb regardless of php settings. v 1.2 - added 1337 sql filter evasion, version identification,better...