6296 matches found
CVE-2006-0909: Undefined Security Weakness
Invision Power Board IPB 2.1.4 and earlier allows remote attackers to view sensitive information via a direct request to multiple PHP scripts that include the full path in error messages, including 1 PEAR/Text/Diff/Renderer/inline.php, 2 PEAR/Text/Diff/Renderer/unified.php, 3 PEAR/Text/Diff3.php,...
Woltlab Burning Board 1.1.12.x - galerie_index.php?Username Cross-Site Scripting
Woltlab Burning Board 1.1.12.x - galerieindex.php?Username Cross-Site Scripting source: https://www.securityfocus.com/bid/16843/info Woltlab Burning Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An...
Woltlab Burning Board 1.1.12.x - galerie_onfly.php Cross-Site Scripting
Woltlab Burning Board 1.1.12.x - galerieonfly.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16843/info Woltlab Burning Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker ma...
Woltlab Burning Board 1.1.1/2.x - 'galerie_onfly.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16843/info Woltlab Burning Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the...
Woltlab Burning Board 1.1.1/2.x - 'galerie_index.php?Username' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16843/info Woltlab Burning Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the...
woltlabbb2xXSS.txt
Dökümanlar »» Döküman oku --Security Report-- Advisory: Woltlab Burning Board 2.x JGS-Gallery MOD http://site/jgsgalerieslideshow.php?sid=&katid=&userid=XSS EXAMPLE - http://site/jgsgalerieslideshow.php?sid=&katid=&userid=alert'X'; GET - http://site/jgsgaleriescroll.php?userid=XSS EXAMPLE -...
PentacleBypass.txt
--Security Report-- Advisory: Pentacle In-Out Board http://site/ptdir/login.asp?username=any&password=' or '1'='1 -- Timeline: 25/02/2006: Vulnerability found. 25/02/2006: Contacted with vendor and waiting reply. -- Exploit: http://www.nukedx.com/?getxpl=13 -- Original advisory:...
Advisory: Pentacle In-Out Board <= 6.03 (newsdetailsview.asp newsid) Remote SQL Injection Vulnerability
--Security Report-- Advisory: Pentacle In-Out Board = 6.03 newsdetailsview.asp newsid Remote SQL Injection Vulnerability --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 25/02/06 06:08 AM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendo...
Advisory: Pentacle In-Out Board <= 6.03 (login.asp) Authencation ByPass Vulnerability
--Security Report-- Advisory: Pentacle In-Out Board = 6.03 login.asp Authencation ByPass Vulnerability --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 25/02/06 05:56 AM --- Contacts: ICQ: 10072 MSN/Email: nukedx at nukedx dot com Web: http://www.nukedx.com --- Vendor: G2SOFT...
Code injection
index.php in Invision Power Board IPB 2.0.1, with Code Confirmation disabled, allows remote attackers to cause an unspecified denial of service by registering a large number of users...
CVE-2006-0888
index.php in Invision Power Board IPB 2.0.1, with Code Confirmation disabled, allows remote attackers to cause an unspecified denial of service by registering a large number of users...
CVE-2006-0888
index.php in Invision Power Board IPB 2.0.1, with Code Confirmation disabled, allows remote attackers to cause an unspecified denial of service by registering a large number of users...
CVE-2006-0888
The CVE-2006-0888 entry concerns Invision Power Board (IPB) 2.0.1, where index.php with Code Confirmation disabled can lead to a denial of service by registering a large number of users. The vulnerability is triggered via a user-registration flood, but the public documents do not specify exact te...
Pentacle In-Out Board <= 6.03 (login.asp) Remote Auth Bypass
Exploit for unknown platform in category web applications ============================================================ Pentacle In-Out Board Pentacle In-Out Board function ptxpl ifdocument.xpl.victim.value=="" alert"Please enter site!"; return false; ifconfirm"Are you sure?"...
Pentacle In-Out Board <= 6.03 (login.asp) Remote Auth Bypass
No description provided by source. html titlePentacle In-Out Board = 6.03 login.asp Authencation ByPass Vulnerability/title script language=javascript function ptxpl ifdocument.xpl.victim.value=="" alert"Please enter site!"; return false; ifconfirm"Are you sure?"...
Pentacle In-Out Board 6.03 - login.asp Remote Authentication Bypass
Pentacle In-Out Board 6.03 - login.asp Remote Authentication Bypass Pentacle In-Out Board function ptxpl ifdocument.xpl.victim.value=="" alert"Please enter site!"; return false; ifconfirm"Are you sure?" xpl.action="http://"+document.xpl.victim.value+"/login.asp";...
Pentacle In-Out Board 6.03 - newsdetailsview SQL Injection
Pentacle In-Out Board 6.03 - newsdetailsview SQL Injection !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Usage: penta.pl Original Advisory: http://www.nukedx.com/?viewdoc=14 use IO::Socket; if@ARGV + + Example: penta.p...
Advisory: Woltlab Burning Board 2.x (JGS-Gallery MOD <= 4.0) multiple XSS vulnerabilities
Dkmanlar »» Dkman oku --Security Report-- Advisory: Woltlab Burning Board 2.x JGS-Gallery MOD = 4.0 multiple XSS vulnerabilities --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 24/02/06 04:43 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com -...
CVE-2006-0888: Undefined Security Weakness
index.php in Invision Power Board IPB 2.0.1, with Code Confirmation disabled, allows remote attackers to cause an unspecified denial of service by registering a large number of users...
Pentacle In-Out Board <= 6.03 (newsdetailsview) Remote SQL Injection
No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Usage: penta.pl victim directory Original Advisory: http://www.nukedx.com/?viewdoc=14 use IO::Socket; if@ARGV 3 print " ++ +Pentacle In-O...