woltlabBB2x.txt

--Security Report-- Advisory: Woltlab Burning Board 2.x Datenbank MOD fileid Multiple Vulnerabilities. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 01/03/06 01:33 AM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: WbbCoderForum...

Woltlab Burning Board 2.x (Datenbank MOD fileid) Multiple Vulnerabilities.

--Security Report-- Advisory: Woltlab Burning Board 2.x Datenbank MOD fileid Multiple Vulnerabilities. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 01/03/06 01:33 AM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: WbbCoderForum...

[eVuln] Skate Board Multimple Vulnerabilities

New eVuln Advisory: Skate Board Multimple Vulnerabilities http://evuln.com/vulns/84/summary.html --------------------Summary---------------- eVuln ID: EV0084 CVE: CVE-2006-0809 CVE-2006-0810 CVE-2006-0811 Software: Skate Board Sowtware's Web Site: http://bb.jiraiya.se/main.php?content=start...

Active XSS in Invision Power Board 2.1.4

Здравствуйте. Очередная уязвимость найденна командой Cyber Lordswww.cyberlords.net. На этот раз в продукте Invision Power Board. Я бы посоветовал вам опубликовать данную уязвимость в отдельную новость. ------------------------------------------------------------- Advisory: Active XSS in Invision...

Woltlab Burning Board < 2.7.1 Multiple Script SQL Injection (deprecated)

Binary data 3452.prm...

Woltlab Burning Board 2.x Datenbank MOD (fileid) Remote SQL Injection

No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Usage: wbb.pl victim directory modpage dbnum userid Original Advisory: http://www.nukedx.com/?viewdoc=17 use IO::Socket; if@ARGV 5 print ...

Woltlab Burning Board 2.x - Datenbank MOD fileid SQL Injection

Woltlab Burning Board 2.x - Datenbank MOD fileid SQL Injection !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Usage: wbb.pl Original Advisory: http://www.nukedx.com/?viewdoc=17 use IO::Socket; if@ARGV + + Example: wbb.p...

Woltlab Burning Board 2.x Datenbank MOD (fileid) Remote SQL Injection

Exploit for unknown platform in category web applications ===================================================================== Woltlab Burning Board 2.x Datenbank MOD fileid Remote SQL Injection ===================================================================== !/usr/bin/perl Method found &...

Woltlab Burning Board 2.x - Datenbank MOD 'fileid' SQL Injection

!/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Usage: wbb.pl Original Advisory: http://www.nukedx.com/?viewdoc=17 use IO::Socket; if@ARGV + + Example: wbb.pl sux.com / infodb.php 1 1 + + Method found & Exploit scripted ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burning Board wBB 2.x allow remote attackers to inject arbitrary web script or HTML via the 1 userid parameter in a jgsgalerieslideshow.php and b jgsgaleriescroll.php, and the 2 katid...

CVE-2006-0910

Invision Power Board IPB 2.1.4 and earlier allows remote attackers to list directory contents via a direct request to multiple directories, including 1 sources/loginauth/convert/, 2 sources/portalplugins/, 3 cache/skincache/cacheid2/, 4 ipskernel/PEAR/, 5 ipskernel/PEAR/Text/, 6...

CVE-2006-0927

Multiple cross-site scripting XSS vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burning Board wBB 2.x allow remote attackers to inject arbitrary web script or HTML via the 1 userid parameter in a jgsgalerieslideshow.php and b jgsgaleriescroll.php, and the 2 katid...

CVE-2006-0909

Invision Power Board IPB 2.1.4 and earlier allows remote attackers to view sensitive information via a direct request to multiple PHP scripts that include the full path in error messages, including 1 PEAR/Text/Diff/Renderer/inline.php, 2 PEAR/Text/Diff/Renderer/unified.php, 3 PEAR/Text/Diff3.php,...

CVE-2006-0927

CVE-2006-0927 describes multiple XSS vulnerabilities in the JGS-XA/JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burning Board (wBB) 2.x. The issue arises in the parameters (1) userid of jgs_galerie_slideshow.php and jgs_galerie_scroll.php, and (2) katid of jgs_galerie_slideshow.php, allowing r...

CVE-2006-0909

Invision Power Board IPB 2.1.4 and earlier allows remote attackers to view sensitive information via a direct request to multiple PHP scripts that include the full path in error messages, including 1 PEAR/Text/Diff/Renderer/inline.php, 2 PEAR/Text/Diff/Renderer/unified.php, 3 PEAR/Text/Diff3.php,...

CVE-2006-0927

Multiple cross-site scripting XSS vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burning Board wBB 2.x allow remote attackers to inject arbitrary web script or HTML via the 1 userid parameter in a jgsgalerieslideshow.php and b jgsgaleriescroll.php, and the 2 katid...

CVE-2006-0909

IPB 2.1.4 and earlier versions are affected by CVE-2006-0909: an attacker can view sensitive information by making direct requests to many PHP scripts that disclose full file paths in error messages (e.g., ips_kernel, sources/sql, action_public, action_admin, and various post/editor/bbcode classe...

CVE-2006-0910

Invision Power Board IPB 2.1.4 and earlier allows remote attackers to list directory contents via a direct request to multiple directories, including 1 sources/loginauth/convert/, 2 sources/portalplugins/, 3 cache/skincache/cacheid2/, 4 ipskernel/PEAR/, 5 ipskernel/PEAR/Text/, 6...

CVE-2006-0927: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burning Board wBB 2.x allow remote attackers to inject arbitrary web script or HTML via the 1 userid parameter in a jgsgalerieslideshow.php and b jgsgaleriescroll.php, and the 2 katid...

CVE-2006-0910: Undefined Security Weakness

Invision Power Board IPB 2.1.4 and earlier allows remote attackers to list directory contents via a direct request to multiple directories, including 1 sources/loginauth/convert/, 2 sources/portalplugins/, 3 cache/skincache/cacheid2/, 4 ipskernel/PEAR/, 5 ipskernel/PEAR/Text/, 6...