6332 matches found
Woltlab Burning Board 1.0.22.3.6 - search.php SQL Injection (2)
Woltlab Burning Board 1.0.22.3.6 - search.php SQL Injection 2 !/usr/bin/perl Woltlab Burning Board 2.X/Lite search.php SQL Injection exploit - burned.pl written by trew should work on every wbb regardless of php settings. v 1.2 - added 1337 sql filter evasion, version identification,better...
Woltlab Burning Board 1.0.22.3.6 - search.php SQL Injection (3)
Woltlab Burning Board 1.0.22.3.6 - search.php SQL Injection 3 !/usr/bin/perl use LWP::UserAgent; use HTTP::Response; $| = 1; print " Woltlab Burning Board 2.3.6 Bug by trew \n"; if$ARGV Exploiting...\n"; my $url = shift; my $id = shift; my $sstring = shift; my $ua = LWP::UserAgent-new; my $reques...
Woltlab Burning Board <= 1.0.2, 2.3.6 search.php SQL Injection Exploit 2
Exploit for unknown platform in category web applications ======================================================================== Woltlab Burning Board = 1.0.2, 2.3.6 search.php SQL Injection Exploit 2 ======================================================================== !/usr/bin/perl Woltla...
Woltlab Burning Board 1.0.2/2.3.6 - 'search.php' SQL Injection (2)
!/usr/bin/perl Woltlab Burning Board 2.X/Lite search.php SQL Injection exploit - burned.pl written by trew should work on every wbb regardless of php settings. v 1.2 - added 1337 sql filter evasion, version identification,better regex,raw cookie v 1.1 - added wbblite support thx to lama !PRIVATE!...
Woltlab Burning Board 1.0.2/2.3.6 - 'search.php' SQL Injection (1)
?php / http://www.undergroundagents.de coded by silent vapor [email protected] / printr' -------------------------------------------------------------------------------- Woltlab Burning Board Lite = 1.0.2 GetHashes over search.php Woltlab Burning Board = 2.3.6 GetHashes over search.p...
Woltlab Burning Board 1.0.2/2.3.6 - 'search.php' SQL Injection (3)
!/usr/bin/perl use LWP::UserAgent; use HTTP::Response; $| = 1; print " Woltlab Burning Board 2.3.6 Bug by trew \n"; if$ARGV Exploiting...\n"; my $url = shift; my $id = shift; my $sstring = shift; my $ua = LWP::UserAgent-new; my $request = new HTTP::Request'POST', 'http://'.$url.'search.php';...
geobb-rfi.txt
BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : GeoBB Georgian Bulletin Board Script Download : http://hotscripts.com/Detailed/58100.html Risk : High Found By : ShaFuck31 Vulnerable file : index.php Vuln. Code: require$action.'.php'; Vuln : http://www.victim.com/ScriptPath/index.php?action=she...
CVE-2007-0189
PHP remote file inclusion vulnerability in index.php in GeoBB Georgian Bulletin Board allows remote attackers to execute arbitrary PHP code via a URL in the action parameter. NOTE: CVE disputes this issue, since GeoBB 1.0 sets $action to a whitelisted value...
CVE-2007-0189
CVE-2007-0189 affects GeoBB Georgian Bulletin Board: remote PHP code execution via a URL in the action parameter of index.php. The root cause is unclear in public text, but multiple sources note that GeoBB 1.0 whitelists the $action value, which disputes the vulnerability. Older GeoBB versions pr...
PT-2007-1673 · Geobb · Geobb
Name of the Vulnerable Software and Affected Versions: GeoBB Georgian Bulletin Board versions prior to 1.0 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the action parameter in the index.php file. However, it's noted that GeoBB 1.0 sets $action to a...
CVE-2007-0189: Undefined Security Weakness
PHP remote file inclusion vulnerability in index.php in GeoBB Georgian Bulletin Board allows remote attackers to execute arbitrary PHP code via a URL in the action parameter. NOTE: CVE disputes this issue, since GeoBB 1.0 sets $action to a whitelisted value...
CVE-2006-6846
CVE-2006-6846 covers multiple SQL injection vulnerabilities in the While You Were Out (WYWO) InOut Board 1.0. The flaws allow remote attackers to run arbitrary SQL commands through: (1) num parameter in phonemessage.asp, (2) catcode parameter in faqDsp.asp, and (3) Username and (4) Password field...
CVE-2006-6846
Multiple SQL injection vulnerabilities in While You Were Out WYWO InOut Board 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the num parameter in a phonemessage.asp, 2 the catcode parameter in b faqDsp.asp, and the 3 Username and 4 Password fields in c login.asp...
CVE-2006-6846: Undefined Security Weakness
Multiple SQL injection vulnerabilities in While You Were Out WYWO InOut Board 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the num parameter in a phonemessage.asp, 2 the catcode parameter in b faqDsp.asp, and the 3 Username and 4 Password fields in c login.asp...
Ultimate PHP Board chat/login.php username Parameter Arbitrary Command Execution
The remote host is running Ultimate PHP Board UPB. The version of UPB installed on the remote host does not sanitize input to the 'username' parameter of the 'chat/login.php' script before writing it to 'chat/text.php'. Regardless of PHP's settings, an attacker can leverage this flaw to inject...
CVE-2006-6846
Multiple SQL injection vulnerabilities in While You Were Out WYWO InOut Board 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the num parameter in a phonemessage.asp, 2 the catcode parameter in b faqDsp.asp, and the 3 Username and 4 Password fields in c login.asp...
Title : WYWO - InOut Board 1.0 Multiple Vulnerabilities
Title : WYWO - InOut Board 1.0 Multiple Vulnerabilities Author : ajann Contact : : S.Page : http://cybercoded.com $$ : 9.95 $ SQL--------------------------------------------------------- http://target/path/phonemessage.asp?num=SQL Example:...
CVE-2006-6790
Direct static code injection vulnerability in chat/login.php in Ultimate PHP Board UPB 2.0b1 and earlier allows remote attackers to inject arbitrary PHP code via the username parameter, which is injected into chat/text.php...
CVE-2006-6790
Direct static code injection vulnerability in chat/login.php in Ultimate PHP Board UPB 2.0b1 and earlier allows remote attackers to inject arbitrary PHP code via the username parameter, which is injected into chat/text.php...
CVE-2006-6790: Undefined Security Weakness
Direct static code injection vulnerability in chat/login.php in Ultimate PHP Board UPB 2.0b1 and earlier allows remote attackers to inject arbitrary PHP code via the username parameter, which is injected into chat/text.php...