6296 matches found
CVE-2006-0520
SQL injection vulnerability index.php in Dragoran Portal module 1.3 for Invision Power Board IPB allows remote attackers to execute arbitrary SQL commands via the site parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-0520
The CVE-2006-0520 entry concerns Invision Power Board’s Dragoran Portal module (IPB) version around 1.3. The vulnerability is an SQL injection in index.php via the site parameter, caused by inadequate sanitization before using the input in database queries. This allows remote attackers to inject ...
CVE-2006-0520
SQL injection vulnerability index.php in Dragoran Portal module 1.3 for Invision Power Board IPB allows remote attackers to execute arbitrary SQL commands via the site parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-0520: Undefined Security Weakness
SQL injection vulnerability index.php in Dragoran Portal module 1.3 for Invision Power Board IPB allows remote attackers to execute arbitrary SQL commands via the site parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Invision Power Board Dragoran Forum < 1.4 index.php site Parameter SQL Injection
Binary data 3397.prm...
Invision Power Board Dragoran Portal Module index.php site Parameter SQL Injection
The installation of Invision Power Board on the remote host contains an optional plugin module known as Dragoran Portal that fails to sanitize input to the 'site' parameter of the 'index.php' script before using it in database queries. An attacker may be able to leverage this issue to disclose...
Invision Power Board Dragoran Portal Mod 1.3 - SQL Injection
Invision Power Board Dragoran Portal Mod 1.3 - SQL Injection !/usr/bin/perl IPB Portal 1.3-Invision Power Board plugin Created By SkOd SED security Team , http://sed-team.be google: "Portal 1.3 by Dragoran" use IO::Socket; if @ARGV new Proto = "tcp", PeerAddr = "$serv", PeerPort = "80" || die...
Invision Power Board Dragoran Portal Mod <= 1.3 SQL Injection Exploit
No description provided by source. !/usr/bin/perl IPB Portal 1.3-Invision Power Board plugin Created By SkOd SED security Team , http://sed-team.be google: "Portal 1.3 by Dragoran" use IO::Socket; if @ARGV 3 print q IPB Portal 1.3 SQL injection Get Hash Exploit Tested on Invision Power Board 1.3....
Invision Power Board Dragoran Portal Mod 1.3 - SQL Injection
!/usr/bin/perl IPB Portal 1.3-Invision Power Board plugin Created By SkOd SED security Team , http://sed-team.be google: "Portal 1.3 by Dragoran" use IO::Socket; if @ARGV new Proto = "tcp", PeerAddr = "$serv", PeerPort = "80" || die "-Connect Failed\r\n"; print "+Connecting...\n"; print $socket...
kapda-22.txt
KAPDA::22 - Azbb v1.1.00 Cross Site Scripting KAPDA New advisory Vulnerable products : Azbb alert'XSS'"" NASL : -------------------- azbb1100XSS.nasl This script was written by Pedram Hayati pi3ch at kapda dot...
Cross site scripting
Cross-site scripting XSS vulnerability in post.php in AZ Bulletin Board AZbb 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 nickname parameter and 2 an iframe tag in the topic parameter. NOTE: the original disclosure specified the name parameter, but a...
CVE-2006-0407
Cross-site scripting XSS vulnerability in post.php in AZ Bulletin Board AZbb 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 nickname parameter and 2 an iframe tag in the topic parameter. NOTE: the original disclosure specified the name parameter, but a...
CVE-2006-0407
CVE-2006-0407 affects AZ Bulletin Board (AZbb) 1.1.00 and earlier. The vulnerability is a cross-site scripting (XSS) flaw in post.php, exploitable via the nickname parameter and an iframe tag in the topic parameter, enabling injection of arbitrary HTML/JavaScript by an attacker. The description n...
CVE-2006-0407
Cross-site scripting XSS vulnerability in post.php in AZ Bulletin Board AZbb 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 nickname parameter and 2 an iframe tag in the topic parameter. NOTE: the original disclosure specified the name parameter, but a...
CVE-2006-0407: Undefined Security Weakness
Cross-site scripting XSS vulnerability in post.php in AZ Bulletin Board AZbb 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 nickname parameter and 2 an iframe tag in the topic parameter. NOTE: the original disclosure specified the name parameter, but a...
Update Protection against phpBB and PHPGedView Remote Execution Vulnerabilities
phpBB is a widely used bulletin board software package. PhpGedView is a genealogy program which allows for genealogy viewing and editing on the Web. Several vulnerabilities reported in phpBB and in PhpGedView could allow an attacker to execute arbitrary PHP code...
[SA18565] AZ Bulletin Board Cross-Site Scripting Vulnerabilities
TITLE: AZ Bulletin Board Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA18565 VERIFY ADVISORY: http://secunia.com/advisories/18565/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: AZ Bulletin Board AZbb 1.x http://secunia.com/product/4938/ DESCRIPTIO...
Sql injection
SQL injection vulnerability in addpost.php3 in Venom Board 1.22 allows remote attackers to execute arbitrary SQL commands via the 1 parent, 2 root, and 3 topicid parameters to post.php3...
CVE-2006-0160
SQL injection vulnerability in addpost.php3 in Venom Board 1.22 allows remote attackers to execute arbitrary SQL commands via the 1 parent, 2 root, and 3 topicid parameters to post.php3...
CVE-2006-0160
CVE-2006-0160 affects Venom Board 1.22, with a SQL injection in add_post.php3/post.php3. The vulnerability allows a remote attacker to inject arbitrary SQL via the (1) parent, (2) root, and (3) topic_id parameters, enabling potential data compromise. No explicit exploit details are provided in th...