BBaCE <= 3.5 (includes/functions.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================================= BBaCE | | \ \ / / '..' Author: SpiderZ BBaCE Remote File Inclusion Vulnerability For: BBaCE v3 Bulletin Board Ace...

CVE-2006-5029

SQL injection vulnerability in thread.php in WoltLab Burning Board wBB 2.3.x allows remote attackers to obtain the version numbers of PHP, MySQL, and wBB via the page parameter. NOTE: this issue might be a forced SQL error. Also, the original report was disputed by a third party for 2.3.3 and 2.3...

CVE-2006-5029

The CVE-2006-5029 entry describes an SQL injection in thread.php of WoltLab Burning Board (wBB) 2.3.x, allowing remote attackers to obtain the PHP, MySQL, and wBB version numbers via the page parameter. The report notes the issue may be a forced SQL error and that the original report was disputed...

CVE-2006-5029

SQL injection vulnerability in thread.php in WoltLab Burning Board wBB 2.3.x allows remote attackers to obtain the version numbers of PHP, MySQL, and wBB via the page parameter. NOTE: this issue might be a forced SQL error. Also, the original report was disputed by a third party for 2.3.3 and 2.3...

CVE-2006-5029: Undefined Security Weakness

SQL injection vulnerability in thread.php in WoltLab Burning Board wBB 2.3.x allows remote attackers to obtain the version numbers of PHP, MySQL, and wBB via the page parameter. NOTE: this issue might be a forced SQL error. Also, the original report was disputed by a third party for 2.3.3 and 2.3...

Woltlab Burning Board 2.3.X SQL Injection Vulnerability

Use it like this: http://127.0.0.1/wbb2/thread.php?threadid=1&page=-1 Ok, its kinda useless 'cause it's an "ORDER BY", but u can see: - the PHP Version - the MySQL version - the wBB Version when it has been faked or removed Greets, 666 - www.sr-crew.de.tt...

CVE-2006-4918

Multiple PHP remote file inclusion vulnerabilities in Simple Discussion Board 0.1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 envdir parameter to a blank.php, b admin.php, or c builddb.php, and the 2 scriptroot parameter to blank.php...

CVE-2006-4918

Multiple PHP remote file inclusion vulnerabilities in Simple Discussion Board 0.1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 envdir parameter to a blank.php, b admin.php, or c builddb.php, and the 2 scriptroot parameter to blank.php...

CVE-2006-4918: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Simple Discussion Board 0.1.0 allow remote attackers to execute arbitrary PHP code via a URL in the 1 envdir parameter to a blank.php, b admin.php, or c builddb.php, and the 2 scriptroot parameter to blank.php...

Simple Discussion Board Multiple F.le Inclusion Vulnerability

Simple Discussion Board Multiple F.le Inclusion Vulnerability credit: CeNGiZ-HaN mail: [email protected] team: www.system-defacers.org Script: Simple Discussion Board sdb Download Adress:http://prdownloads.sourceforge.net/sdb/sdb-0.1.0.tar.gz class: Remote Risk: High Exploit:...

Simple Discussion Board 0.1.0 Remote File Include Vulnerability

Exploit for unknown platform in category web applications =============================================================== Simple Discussion Board 0.1.0 Remote File Include Vulnerability =============================================================== Simple Discussion Board Multiple F.le Inclusion...

Simple Discussion Board 0.1.0 - Remote File Inclusion

Simple Discussion Board 0.1.0 - Remote File Inclusion Simple Discussion Board Multiple F.le Inclusion Vulnerability credit: CeNGiZ-HaN mail: [email protected] team: www.system-defacers.org Script: Simple Discussion Board sdb Download...

Simple Discussion Board 0.1.0 Remote File Include Vulnerability

No description provided by source. Simple Discussion Board Multiple F.le Inclusion Vulnerability credit: CeNGiZ-HaN mail: [email protected] team: www.system-defacers.org Script: Simple Discussion Board sdb Download Adress:http://prdownloads.sourceforge.net/sdb/sdb-0.1.0.tar.gz class:...

Simple Discussion Board 0.1.0 - Remote File Inclusion

Simple Discussion Board Multiple F.le Inclusion Vulnerability credit: CeNGiZ-HaN mail: [email protected] team: www.system-defacers.org Script: Simple Discussion Board sdb Download Adress:http://prdownloads.sourceforge.net/sdb/sdb-0.1.0.tar.gz class: Remote Risk: High Exploit:...

CVE-2006-4835

Bluview Blue Magic Board BMB aka BMForum 5.5 allows remote attackers to obtain sensitive information via a direct request to 1 footer.php, 2 header.php, 3 dbmysqlerror.php, 4 langlist.php, 5 sendmail.php, or 6 style.php, which reveals the path in various error messages...

CVE-2006-4835

The CVE-2006-4835 entry affects Bluview Blue Magic Board (BMB)/BMForum version 5.5. The issue allows remote attackers to obtain sensitive information through direct requests to several PHP scripts (footer.php, header.php, db_mysql_error.php, langlist.php, sendmail.php, style.php). Error messages ...

CVE-2006-4835

Bluview Blue Magic Board BMB aka BMForum 5.5 allows remote attackers to obtain sensitive information via a direct request to 1 footer.php, 2 header.php, 3 dbmysqlerror.php, 4 langlist.php, 5 sendmail.php, or 6 style.php, which reveals the path in various error messages...

Fullpath disclosure in Blue Magic Board 5.5

Blue Magic Board BMB is nice forum system written by http://bmforum.com Some file error and show fullpath. I test newest version, maybe all older versions are infected. http://domain.ext/bmbpath/footer.php http://domain.ext/bmbpath/header.php http://domain.ext/bmbpath/include/db/dbmysqlerror.php...

CVE-2006-4835: Undefined Security Weakness

Bluview Blue Magic Board BMB aka BMForum 5.5 allows remote attackers to obtain sensitive information via a direct request to 1 footer.php, 2 header.php, 3 dbmysqlerror.php, 4 langlist.php, 5 sendmail.php, or 6 style.php, which reveals the path in various error messages...

CVE-2006-4797

Cross-site scripting XSS vulnerability in tag.php in CloudNine Interactive CJ Tag Board 3.0 allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a url BBcode tag in the cjmsg parameter...