6297 matches found
CVE-2006-2060
Directory traversal vulnerability in actionadmin/paysubscriptions.php in Invision Power Board IPB 2.1.x and 2.0.x before 20060425 allows remote authenticated administrators to include and execute arbitrary local PHP files via a .. dot dot in the name parameter, preceded by enough backspace %08...
CVE-2006-2059
Invision Power Board (IPB) 2.0.x and 2.1.x before 20060425 are affected. The vulnerability lies in action_public/search.php where a crafted lastdate parameter can cause a regular expression to add a #e (execute) modifier, allowing remote attackers to execute arbitrary PHP code. This is a remote c...
CVE-2006-2061
SQL injection vulnerability in lib/functaskmanager.php in Invision Power Board IPB 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary SQL commands via the ck parameter, which can inject at most 32 characters...
CVE-2006-2061
CVE-2006-2061 : SQL injection in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 via the ck parameter in lib/func_taskmanager.php allows remote attackers to execute arbitrary SQL commands. The vulnerability is triggered by input that is injected into database queries, with up to 32 cha...
Invision Power Board <= 2.1.5 (lastdate) Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl Invision Power Board 2. commands execution exploit by RST/GHC vulnerable versions = 2.1.5 tested on 2.1.4, 2.0.2 coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru use IO::Socket; use Getopt::Std; getopts"l:h:p:d:f:v:"; $host = $opth; $dir...
Invision Power Board <= 2.1.5 (lastdate) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ====================================================================== Invision Power Board new Proto = "tcp", PeerAddr = "$host", PeerPort = "80" || die "- CONNECTION FAILED"; $login = s/./"%".ucsprintf"%2.2x",ord$1/eg; $password =...
CVE-2006-2059: Undefined Security Weakness
actionpublic/search.php in Invision Power Board IPB 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary PHP code via a search with a crafted value of the lastdate parameter, which alters the behavior of a regular expression to add a "e" execute modifier...
Invision Power Board 2.1.5 - lastdate Remote Code Execution
Invision Power Board 2.1.5 - lastdate Remote Code Execution !/usr/bin/perl Invision Power Board 2. commands execution exploit by RST/GHC vulnerable versions new Proto = "tcp", PeerAddr = "$host", PeerPort = "80" || die "- CONNECTION FAILED"; $login = s/./"%".ucsprintf"%2.2x",ord$1/eg; $password =...
Invision Power Board 2.1.5 - 'lastdate' Remote Code Execution
!/usr/bin/perl Invision Power Board 2. commands execution exploit by RST/GHC vulnerable versions new Proto = "tcp", PeerAddr = "$host", PeerPort = "80" || die "- CONNECTION FAILED"; $login = s/./"%".ucsprintf"%2.2x",ord$1/eg; $password = s/./"%".ucsprintf"%2.2x",ord$1/eg; $post =...
CVE-2006-2061: Undefined Security Weakness
SQL injection vulnerability in lib/functaskmanager.php in Invision Power Board IPB 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary SQL commands via the ck parameter, which can inject at most 32 characters...
CVE-2006-2060: Undefined Security Weakness
Directory traversal vulnerability in actionadmin/paysubscriptions.php in Invision Power Board IPB 2.1.x and 2.0.x before 20060425 allows remote authenticated administrators to include and execute arbitrary local PHP files via a .. dot dot in the name parameter, preceded by enough backspace %08...
CVE-2006-1976
Cross-site scripting XSS vulnerability in addRequest.php in Prayer Request Board PRB Beta 1 before 20060320 allows remote attackers to inject arbitrary web script or HTML via the Request field...
CVE-2006-1976
PRB Beta 1’s addRequest.php is vulnerable to cross-site scripting (XSS) via the Request field, allowing remote attackers to inject arbitrary web script or HTML. Affected version: PRB Beta 1 before 20060320. The available documents do not provide exploit details, impact beyond script injection, or...
CVE-2006-1976
Cross-site scripting XSS vulnerability in addRequest.php in Prayer Request Board PRB Beta 1 before 20060320 allows remote attackers to inject arbitrary web script or HTML via the Request field...
CVE-2006-1976: Undefined Security Weakness
Cross-site scripting XSS vulnerability in addRequest.php in Prayer Request Board PRB Beta 1 before 20060320 allows remote attackers to inject arbitrary web script or HTML via the Request field...
IPB <= 2.1.5 SQL inj. vuln.
IPB = 2.1.5 SQL inj. vuln. Vuln. discovered by : r0t Date: 19 april 2006 vendorlink:http://www.invisionboard.com/ affected versions:2.1.5 and previous orginal advisory: http://pridels.blogspot.com/2006/04/ipb-215-sql-inj-vuln.html Vuln. Description: IPB contains a flaw that allows a remote sql...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in register.php in Tritanium Bulletin Board TBB 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 newuserrealname and 2 newusericq parameters, a different vector than CVE-2006-1768. NOTE: the provenance of this...
CVE-2006-1815
Multiple cross-site scripting XSS vulnerabilities in register.php in Tritanium Bulletin Board TBB 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 newuserrealname and 2 newusericq parameters, a different vector than CVE-2006-1768. NOTE: the provenance of this...
CVE-2006-1815
Multiple cross-site scripting XSS vulnerabilities in register.php in Tritanium Bulletin Board TBB 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 newuserrealname and 2 newusericq parameters, a different vector than CVE-2006-1768. NOTE: the provenance of this...
CVE-2006-1815
CVE-2006-1815 affects Tritanium Bulletin Board (TBB) 1.2.3: register.php is vulnerable to reflected XSS via the newuser_realname and newuser_icq parameters in the faction=register flow (index.php), allowing remote script/HTML injection. This vector is distinct from CVE-2006-1768. Root cause cited...