CVE-2006-6790

Summary: CVE-2006-6790 affects Ultimate PHP Board (UPB) 2.0b1 and earlier. The vulnerability is in chat/login.php where the username parameter is written to chat/text.php without proper sanitization, allowing an attacker to inject arbitrary PHP code that can be executed with the web server user p...

wywo inout board 1.0 - Multiple Vulnerabilities

Title : WYWO - InOut Board 1.0 Multiple Vulnerabilities Author : ajann Contact : : S.Page : http://cybercoded.com $$ : 9.95 $ SQL--------------------------------------------------------- http://target/path/phonemessage.asp?num=SQL Example:...

Ultimate PHP Board chat/login.php username Parameter Script Injection

Binary data 3872.prm...

Ultimate PHP Board <= 2.0b1 (chat/login.php) Code Execution Exploit

No description provided by source. !/usr/bin/perl +------------------------------------------------------------------------------------------- + Ultimate PHP Board = 2.0b1 chat/login.php Remote Code Execution Vulnerability...

Ultimate PHP Board <= 2.0b1 (chat/login.php) Code Execution Exploit

Exploit for unknown platform in category web applications =================================================================== Ultimate PHP Board 23: $filename = "text.php"; + - 24: $fileAr= file$filename; + - 25: exec"cat /dev/null '$filename'"; + - 26: $fd...

Ultimate PHP Board 2.0b1 - chatlogin.php Code Execution

Ultimate PHP Board 2.0b1 - chatlogin.php Code Execution !/usr/bin/perl +------------------------------------------------------------------------------------------- + Ultimate PHP Board +------------------------------------------------------------------------------------------- + Details: + Ultima...

Ultimate PHP Board 2.0b1 - '/chat/login.php' Code Execution

!/usr/bin/perl +------------------------------------------------------------------------------------------- + Ultimate PHP Board +------------------------------------------------------------------------------------------- + Details: + Ultimate PHP Board chat/login.php does not sanatize the...

Devsyn Open Bulletin Board Index.PHP远程文件包含漏洞

Devsyn Open Bulletin Board是一款基于PHP的论坛程序。 Devsyn Open Bulletin Board不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Index.PHP'脚本对用户提交的'rootpath'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 OpenBB OpenBB 1.0.8 目前没有解决方案提供,请关注以下链接： http://www.openbb.co.uk/...

Fire Soft Board Demarrage.PHP参数远程文件包含漏洞

Fire Soft Board是一款基于PHP的论坛程序。 Fire Soft Board不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于'Demarrage.PHP'脚本对用户提交的'racine'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Fire Soft Board Fire Soft Board RC3 目前没有解决方案提供,请关注以下链接： http://www.fire-soft-board.com/...

CJ Tag Board User-Agent PHP注入漏洞

CJ Tag Board是一款基于PHP的论坛程序。 CJ Tag Board不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题一是tag.php脚本对"User-Agent" HTTP头数据缺少过滤，可导致任意PHP代码注入，并通过请求all.php脚本执行。 问题二是adminindex.php脚本对用户提交的"banned"参数缺少过滤，可导致任意PHP代码注入。 CJ Tag Board 3.0 http://www.scriptsearch.com/cgi-bin/jump.cgi?ID=10068...

MensajeitorTagBoard验证绕过漏洞

Mensajeitor Tag Board是一款基于WEB的论坛程序。Mensajeitor Tag Board的验证机制存在问题，远程攻击者可以利用这个漏洞绕过COOKIE验证，未授权进行访问。其使用的验证代码如下： for$i=0;$icount$NicksRegs;$i++ list$adminnick,$adminpass = explode":",$NicksRegs$i; if $nick == $adminnick $cadenafinal .= "span class="admin"".$nick."/span"; $AdminNick = "si"; if...

Invision Power Board线状形式查看信息泄露漏洞

Invision Power Board是一款基于PHP的论坛程序。 Invision Power Board不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞获得敏感信息。 存在漏洞可导致在线状形式查看模式情况下，允许恶意用户查看主题之外的帖子，导致敏感信息泄露。 Invision Power Services Invision Board 2.1.7 + Invision Power Services Invision Board 2.1 Invision Power Services Invision Board 2.1.6 + Invision Power Services...

CVE-2006-6289

Woltlab Burning Board wBB Lite 1.0.2 does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary SQL commands via the wbbuserid parameter to the top-level URI...

CVE-2006-6289

Woltlab Burning Board wBB Lite 1.0.2 does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary SQL commands via the wbbuserid parameter to the top-level URI...

CVE-2006-6289

Technical details about CVE-2006-6289 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2006-6289

Woltlab Burning Board wBB Lite 1.0.2 does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary SQL commands via the wbbuserid parameter to the top-level URI...

InvisionPowerBoard非授权访问漏洞

Invision Power Board是一款流行的PHP论坛程序。Invision Power Board中存在非授权访问漏洞。攻击者可以通过HTTP GET请求未经充分认证就编辑其他用户的论坛张贴。 Invision Board 1.0-1.3 Final 厂商补丁： Invision PS ----------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：http://www.invisionboard.com/...

CVE-2006-6289: Undefined Security Weakness

Woltlab Burning Board wBB Lite 1.0.2 does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary SQL commands via the wbbuserid parameter to the top-level URI...

CVE-2006-6283

Multiple cross-site scripting XSS vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via the subject field of 1 a private message PM or 2 a bulletin board post...

CVE-2006-6280

SQL injection vulnerability in viewthread.php in Oxygen O2PHP Bulletin Board 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter, a different vector than CVE-2006-1572...