Invision Power Board 2.* commands execution exploit

Exploit for php platform in category web applications !/usr/bin/perl Invision Power Board 2. commands execution exploit by RST/GHC vulnerable versions new Proto = "tcp", PeerAddr = "$host", PeerPort = "80" || die "- CONNECTION FAILED"; $login = s/./"%".ucsprintf"%2.2x",ord$1/eg; $password =...

TextFileBB 1.0.16 Multiple XSS

TextFileBB is a flat-file based bulletin board system written in PHP. There are 3 different XSS vulnerabilities in this software at the moment, which I found about half an hour ago =D Anyway, the XSS lies in these tags: color size url EXPLANATION: Firstly, we'll explain color. code.color=00'"0FFF...

Sql injection

SQL injection vulnerability in funcmsg.php in Invision Power Board IPB 2.1.4 allows remote attackers to execute arbitrary SQL commands via the fromcontact field in a private message PM...

CVE-2006-2097

SQL injection vulnerability in funcmsg.php in Invision Power Board IPB 2.1.4 allows remote attackers to execute arbitrary SQL commands via the fromcontact field in a private message PM...

CVE-2006-2097

CVE-2006-2097 concerns Invision Power Board (IPB) 2.1.4, where SQL injection is possible in func_msg.php via the from_contact field in a private message. The vulnerability could allow remote attackers to modify or extract data by injecting SQL commands. Documentation confirms the affected compone...

CVE-2006-2088

Multiple cross-site scripting XSS vulnerabilities in Devsyn Open Bulletin Board OpenBB 1.0.6 allow remote attackers to inject arbitrary web script or HTML via 1 the FID parameter in board.php and 2 the TID parameter in read.php. NOTE: the SQL injection issues are already covered by CVE-2005-1612...

CVE-2006-2088

Vulnerability summary (CVE-2006-2088) : OpenBB (Devsyn Open Bulletin Board) 1.0.6 is affected by multiple cross-site scripting (XSS) flaws. The vulnerabilities occur in the web interface through user-supplied input: the FID parameter in board.php and the TID parameter in read.php. The issue is ex...

CVE-2006-2097

SQL injection vulnerability in funcmsg.php in Invision Power Board IPB 2.1.4 allows remote attackers to execute arbitrary SQL commands via the fromcontact field in a private message PM...

CVE-2006-2097: Undefined Security Weakness

SQL injection vulnerability in funcmsg.php in Invision Power Board IPB 2.1.4 allows remote attackers to execute arbitrary SQL commands via the fromcontact field in a private message PM...

Invision Power Board 2.1.5 - search.php Remote Code Execution

Invision Power Board 2.1.5 - search.php Remote Code Execution !/usr/bin/perl Wed Apr 26 16:44:15 CEST 2006 [email protected] INVISION POWER BOARD 2.1.5 pr00f 0f c0ncept remote command execution. vuln credits goes to IceShaman. works only if you have perms to post a comment. Exploit with replye is...

CVE-2006-2088: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Devsyn Open Bulletin Board OpenBB 1.0.6 allow remote attackers to inject arbitrary web script or HTML via 1 the FID parameter in board.php and 2 the TID parameter in read.php. NOTE: the SQL injection issues are already covered by CVE-2005-1612...

Invision Power Board <= 2.1.5 search.php Remote Code Execution Exploit

Exploit for unknown platform in category web applications ====================================================================== Invision Power Board pr00f 0f c0ncept remote command execution. vuln credits goes to IceShaman. works only if you have perms to post a comment. Exploit with replye is i...

Open Bulletin Board &lt; Multiple Vulnerability

==================== Discovered by: Qex Date: 26 April 2006 ==================== Open Bulletin Board 1.0.6:- /board.php?FID=XSS /board.php?FID=SQL Open Bulletin Board 1.0.8:- /read.php?TID=XSS /read.php?TID=SQL...

Directory traversal

Directory traversal vulnerability in actionadmin/paysubscriptions.php in Invision Power Board IPB 2.1.x and 2.0.x before 20060425 allows remote authenticated administrators to include and execute arbitrary local PHP files via a .. dot dot in the name parameter, preceded by enough backspace %08...

Sql injection

SQL injection vulnerability in lib/functaskmanager.php in Invision Power Board IPB 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary SQL commands via the ck parameter, which can inject at most 32 characters...

CVE-2006-2059

actionpublic/search.php in Invision Power Board IPB 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary PHP code via a search with a crafted value of the lastdate parameter, which alters the behavior of a regular expression to add a "e" execute modifier...

CVE-2006-2060

Directory traversal vulnerability in actionadmin/paysubscriptions.php in Invision Power Board IPB 2.1.x and 2.0.x before 20060425 allows remote authenticated administrators to include and execute arbitrary local PHP files via a .. dot dot in the name parameter, preceded by enough backspace %08...

CVE-2006-2061

SQL injection vulnerability in lib/functaskmanager.php in Invision Power Board IPB 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary SQL commands via the ck parameter, which can inject at most 32 characters...

CVE-2006-2059

actionpublic/search.php in Invision Power Board IPB 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary PHP code via a search with a crafted value of the lastdate parameter, which alters the behavior of a regular expression to add a "e" execute modifier...

CVE-2006-2060

CVE-2006-2060 affects Invision Power Board (IPB) 2.0.x/2.1.x with the vulnerable PHP file action_admin/paysubscriptions.php . The issue is a directory-traversal via a leading ".." in the name parameter, when preceded by enough backspace characters (%08) to erase the initial static portion of a fi...