6327 matches found
Active Bulletin Board <= 1.1b2 Remote User Pass Change Exploit
Exploit for unknown platform in category web applications ============================================================== Active Bulletin Board Email: Password:: = ID Change: = UsrName Next to admin.asp ajann,Turkey ... Im Not Hacker! -- 0day.today 2018-03-09...
Active Bulletin Board 1.1b2 - Remote User Pass Change
Email: Password:: = ID Change: = UsrName Next to admin.asp ajann,Turkey ... Im Not Hacker! -- milw0rm.com 2006-10-18...
Debian DSA-1066-1 : phpbb2 - missing input sanitising
It was discovered that phpbb2, a web-based bulletin board, does insufficiently sanitise values passed to the 'Font Colour 3' setting, which might lead to the execution of injected code by admin users. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
Debian DSA-899-1 : egroupware - programming errors
Several vulnerabilities have been discovered in egroupware, a web-based groupware suite. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-0870 Maksymilian Arciemowicz discovered several cross site scripting problems in phpsysinfo, which are also...
CVE-2006-5281
PHP remote file inclusion vulnerability in naboardpnr.php in n@board 3.1.9e and earlier allows remote attackers to execute arbitrary PHP code via a URL in the skin parameter...
EUVD-2006-5266
PHP remote file inclusion vulnerability in naboardpnr.php in n@board 3.1.9e and earlier allows remote attackers to execute arbitrary PHP code via a URL in the skin parameter...
CVE-2006-5281
The CVE-2006-5281 entry concerns a PHP remote file inclusion in naboard_pnr.php of n@board 3.1.9e and earlier. The vulnerability arises from passing a URL in the skin parameter, allowing remote attackers to execute arbitrary PHP code. Affected component is naboard_pnr.php within n@board before/eq...
CVE-2006-5281: Undefined Security Weakness
PHP remote file inclusion vulnerability in naboardpnr.php in n@board 3.1.9e and earlier allows remote attackers to execute arbitrary PHP code via a URL in the skin parameter...
n@board <= 3.1.9e (naboard_pnr.php) Remote File Include Vulnerability
n@board v3.1.9e, 3.1.8cgb ,3.1.8tc skin Remote File Include Vulnerability Turkish Hacker's Discovered By : mdx and TheBatHacker ------------------------------------------------------ Cyber-Warrior TIM Ay ve Y.ld.zlar Geceye Yak...r... the moon and the stars suit the night Class : REmote File Code...
n@board <= 3.1.9e (naboard_pnr.php) Remote File Include Vulnerability
No description provided by source. n@board v3.1.9e, 3.1.8cgb ,3.1.8tc skin Remote File Include Vulnerability Turkish Hacker's Discovered By : mdx and TheBatHacker ------------------------------------------------------ Cyber-Warrior TIM Ay ve Y.ld.zlar Geceye Yak...r... the moon and the stars suit...
n@board 3.1.9e - naboard_pnr.php Remote File Inclusion
n@board 3.1.9e - naboardpnr.php Remote File Inclusion n@board v3.1.9e, 3.1.8cgb ,3.1.8tc skin Remote File Include Vulnerability Turkish Hacker's Discovered By : mdx and TheBatHacker ------------------------------------------------------ Cyber-Warrior TIM Ay ve Y.ld.zlar Geceye Yak...r... the moon...
n@board 3.1.9e - 'naboard_pnr.php' Remote File Inclusion
n@board v3.1.9e, 3.1.8cgb ,3.1.8tc skin Remote File Include Vulnerability Turkish Hacker's Discovered By : mdx and TheBatHacker ------------------------------------------------------ Cyber-Warrior TIM Ay ve Y.ld.zlar Geceye Yak...r... the moon and the stars suit the night Class : REmote File Code...
CVE-2006-5187
PHP remote file inclusion vulnerability in includes/functions.php in Bulletin Board Ace BBaCE 3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2006-5204
Cross-site scripting XSS vulnerability in actionadmin/member.php in Invision Power Board IPB 2.1.7 and earlier allows remote authenticated users to inject arbitrary web script or HTML via a reference to a script in the avatar setting, which can be leveraged for a cross-site request forgery CSRF...
CVE-2006-5203
CVE-2006-5203 affects Invision Power Board (IPB) 2.1.7 and earlier . A remote attacker with restricted admin rights can cause arbitrary web script/HTML or SQL commands to execute by supplying a crafted image containing PHP code in a forum description. The exploit triggers when a user visits the M...
CVE-2006-5204
The CVE-2006-5204 issue affects Invision Power Board (IPB) 2.1.7 and earlier, where a cross-site scripting (XSS) flaw in action_admin/member.php can be triggered via the avatar setting. This enables remote authenticated users to inject arbitrary script/HTML, and the description also notes a poten...
CVE-2006-5203
Invision Power Board IPB 2.1.7 and earlier allows remote restricted administrators to inject arbitrary web script or HTML, or execute arbitrary SQL commands, via a forum description that contains a crafted image with PHP code, which is executed when the user visits the "Manage Forums" link in the...
CVE-2006-5204
Cross-site scripting XSS vulnerability in actionadmin/member.php in Invision Power Board IPB 2.1.7 and earlier allows remote authenticated users to inject arbitrary web script or HTML via a reference to a script in the avatar setting, which can be leveraged for a cross-site request forgery CSRF...
CVE-2006-5204: Undefined Security Weakness
Cross-site scripting XSS vulnerability in actionadmin/member.php in Invision Power Board IPB 2.1.7 and earlier allows remote authenticated users to inject arbitrary web script or HTML via a reference to a script in the avatar setting, which can be leveraged for a cross-site request forgery CSRF...
CVE-2006-5203: Undefined Security Weakness
Invision Power Board IPB 2.1.7 and earlier allows remote restricted administrators to inject arbitrary web script or HTML, or execute arbitrary SQL commands, via a forum description that contains a crafted image with PHP code, which is executed when the user visits the "Manage Forums" link in the...