6296 matches found
Pentacle In-Out Board 6.03 - 'login.asp' Remote Authentication Bypass
Pentacle In-Out Board function ptxpl ifdocument.xpl.victim.value=="" alert"Please enter site!"; return false; ifconfirm"Are you sure?" xpl.action="http://"+document.xpl.victim.value+"/login.asp"; xpl.username.value=document.xpl.username.value; xpl.userpassword.value=document.xpl.userpassword.valu...
Pentacle In-Out Board <= 6.03 (newsdetailsview) Remote SQL Injection
Exploit for unknown platform in category web applications ==================================================================== Pentacle In-Out Board use IO::Socket; if@ARGV + + Example: penta.pl sux.com / 1 + + Method found & Exploit scripted by nukedx + ++ "; exit; Local variables $pentaserver =...
PunBB1.2.10.txt
/ --------------------------------------------------------------- Neo Security Team NST® PunBB 1.2.10 Multiple DoS Vulnerabilities --------------------------------------------------------------- Program : PunBB 1.2.10 Homepage: http://www.punbb.org Vulnerable Versions: PunBB 1.2.10 & lower ones...
Invision Power Board 2.1.4 Multiple Vulnerabilities
/ -------------------------------------------------------- Neo Security Team NSTВ® - Advisory 16 - 18/02/06 -------------------------------------------------------- Program: Invision Power Board 2.1.4 Homepage: http://www.invisionboard.com Vulnerable Versions: 2.1.4 & Lower versions Risk: Low...
Sql injection
Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the 1 usern parameter in a sendpass.php, and the 2 usern and 3 passwd parameters and 4 sfcookie cookie in b login.php and c logged.php...
Cross site scripting
Cross-site scripting XSS vulnerability in reguser.php in Skate Board 0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters involved with the registration form...
CVE-2006-0811
Cross-site scripting XSS vulnerability in reguser.php in Skate Board 0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters involved with the registration form...
CVE-2006-0809
Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the 1 usern parameter in a sendpass.php, and the 2 usern and 3 passwd parameters and 4 sfcookie cookie in b login.php and c logged.php...
CVE-2006-0810
Unspecified vulnerability in config.php in Skate Board 0.9 allows remote authenticated administrators to execute arbitrary PHP code by causing certain variables in config.php to be modified, possibly due to XSS or direct static code injection...
CVE-2006-0809
The CVE-2006-0809 issue affects Skate Board 0.9. Vulnerable components are includes/root/sendpass.php and includes/root/login.php/logged.php; the adversary can exploit via input fields (POST: usern, passwd) and the cookie sf_cookie, as well as related server-side usage of these values in SQL quer...
CVE-2006-0810
Skate Board 0.9 is affected by CVE-2006-0810 via a PHP code injection vulnerability in config.php. Remote authenticated administrators can modify variables in config.php, potentially enabling arbitrary PHP code execution. This is described as a vulnerability in Skate Board 0.9 related to config.p...
CVE-2006-0809
Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the 1 usern parameter in a sendpass.php, and the 2 usern and 3 passwd parameters and 4 sfcookie cookie in b login.php and c logged.php...
CVE-2006-0811
Skate Board 0.9 contains a Cross-site scripting (XSS) vulnerability in reguser.php. The issue arises from unsanitized input in the registration form, allowing remote attackers to inject arbitrary web script or HTML via unspecified parameters. Connected sources corroborate XSS in reguser.php (e.g....
CVE-2006-0810
Unspecified vulnerability in config.php in Skate Board 0.9 allows remote authenticated administrators to execute arbitrary PHP code by causing certain variables in config.php to be modified, possibly due to XSS or direct static code injection...
CVE-2006-0811
Cross-site scripting XSS vulnerability in reguser.php in Skate Board 0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters involved with the registration form...
CVE-2006-0811: Undefined Security Weakness
Cross-site scripting XSS vulnerability in reguser.php in Skate Board 0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters involved with the registration form...
CVE-2006-0809: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the 1 usern parameter in a sendpass.php, and the 2 usern and 3 passwd parameters and 4 sfcookie cookie in b login.php and c logged.php...
CVE-2006-0810: Undefined Security Weakness
Unspecified vulnerability in config.php in Skate Board 0.9 allows remote authenticated administrators to execute arbitrary PHP code by causing certain variables in config.php to be modified, possibly due to XSS or direct static code injection...
CVE-2006-0750
CVE-2006-0750 describes a SQL injection vulnerability in army.php of the Supersmashbrothers (SSB) Army System 2.1.0 for Invision Power Board (IPB). The issue arises from the userstat parameter used in an army action to index.php, enabling remote attackers to execute arbitrary SQL commands (root c...
Gravity Board X <= 1.1 (csscontent) Remote Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================= Gravity Board X new or die; $res = $gr-get$path.'editcss.php?csscontent='; if$res-asstring = /unable to save changes/ print "Forum unable to save changes in css template...