6296 matches found
SQL-Injection in MyBulletinBoard allows attacker to become a board admin.
Vendor: www.mybboard.com Version: 1.00 Preview Release 2, RC4 and mayb prior. Script: usercp.php Code: if$mybb-input'away' == "yes" && $mybb-settings'allowaway' != "no" ... $returndate = $mybb-input'awayday'."-".$mybb-input'awaymonth'."-".$mybb-input'awayyear'; ... $newprofile = array "website" =...
Woltlab Burning Board info_db.php multiple SQL injection
Woltlab Burning Board infodb.php multiple SQL injection -discovered by R Vendor: "Trooper" URL: www.wbbcoderforum.de Version: = 2.7 Type: SQL-injection Description: ------------------------ Info-DB is a very powerful and popular download-module with many features. Information:...
WoltlabSQL.txt
Woltlab Burning Board infodb.php multiple SQL injection -discovered by R Vendor: "Trooper" URL: www.wbbcoderforum.de Version: = 2.7 Type: SQL-injection Description: ------------------------ Info-DB is a very powerful and popular download-module with many features. Information:...
versatileBulletinBoard V1.0.0 RC2 (possibly prior versions) multiple SQL injection vulnerabilities / login bypass / board takeover
Software: ZeroBlog Vendor: http://www.sothq.net Version: 1.2a , 1.1f Bug: XSS Exploitation: Remote --------------------------- Introduction: Zeroblog: Feature ritch weblog, d-board, live webcam option, and requires 3th party software, calendar, poll system, photogallery, smileys, search engine, 8...
baalASPSQL.txt
------------------------------------------------------ Nightmare TeAmZ Advisory 002 ------------------------------------------------------ Date - 10/2005 BaalASP Free Bulletin Board Sql Injection Admin Login AFFECTED PRODUCTS ================= BaalASP Free Bulletin Board...
versatileBulletinBoard 1.00 RC2 (board takeover) SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================================== versatileBulletinBoard 1.00 RC2 board takeover SQL Injection Exploit ====================================================================== ?php --- versatilexpl.php 4....
versatileBulletinBoard 1.00 RC2 - Board Takeover (SQL Injection)
?php --- versatilexpl.php 4.08 11/10/2005 versatileBulletinBoard 1.00 RC2 possibly prior versions SQL injection / board takeover this exploit describes the vulnerability described here: http://rgod.altervista.org/versatile100RC2.html with a change: with magicquotes both on or off, you can reset...
Cyphor 0.19 SQL Injection / Board takeover / cross site scripting
Cyphor 0.19 SQL Injection / Board takeover / cross site scripting 1if magic quotes off - SQL Injection: by "Forgot your password?" feature you can send yourself a new admin password and reset it, poc: email: youremail nick: 'or'X'='X soon, you will receive an email like this: You have registered...
Cyphor <= 0.19 (board takeover) SQL Injection Exploit
Exploit for unknown platform in category web applications ===================================================== Cyphor SQL Injection:" /str0ke --- cyphor019xpl.php 7.36 08/10/2005 Cyphor 0.19 possibly prior versions SQL injection / board takeover by rgod make these changes in php.ini if you have...
Cyphor <= 0.19 (board takeover) SQL Injection Exploit
No description provided by source. ?php quoted from rgod "1if magic quotes off - SQL Injection:" /str0ke --- cyphor019xpl.php 7.36 08/10/2005 Cyphor 0.19 possibly prior versions SQL injection / board takeover by rgod site: http://rgod.altervista.org make these changes in php.ini if you have...
Cyphor 0.19 - Board Takeover (SQL Injection)
Cyphor 0.19 - Board Takeover SQL Injection SQL Injection:" /str0ke --- cyphor019xpl.php 7.36 08/10/2005 Cyphor 0.19 possibly prior versions SQL injection / board takeover by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles to launch this script:...
Cyphor 0.19 - Board Takeover (SQL Injection)
SQL Injection:" /str0ke --- cyphor019xpl.php 7.36 08/10/2005 Cyphor 0.19 possibly prior versions SQL injection / board takeover by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles to launch this script: allowcalltimepassreference = on registerglobals = on...
SEO borad: SQL injection
Product: SEO-Board Version: 1.02 Author: Hristo Hristov URL: http://seo-board.com VULNERABILITY CLASS: SQL injection through cookie PRODUCT DESCRIPTION SEO-Board is a forum software that's fast, free, and search engine friendly. It is written in PHP and use MySQL database. VULNERABILITY Vulnerabl...
CVE-2005-3082
SQL injection vulnerability in admin.php in SEO-Board 1.0.2 allows remote attackers to execute arbitrary SQL commands via the userpasssha1 value in a cookie...
CVE-2005-3082
SEO-Board 1.0.2 contains a SQL injection in admin.php exploitable via the user_pass_sha1 value in a cookie, allowing remote arbitrary SQL execution. The vulnerability details come from CVE-2005-3082/NVD; CVSS v2 base score 7.5 (HIGH) with network/low complexity, no authentication required, and pa...
CVE-2005-3082: Undefined Security Weakness
SQL injection vulnerability in admin.php in SEO-Board 1.0.2 allows remote attackers to execute arbitrary SQL commands via the userpasssha1 value in a cookie...
[SA16949] SEO-Board admin.php SQL Injection Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
[SA16934] IPB Riverdark RSS Syndicator Module Cross-Site Scripting
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
maildisgust.txt
MailGust 1.9 SQL injection / board takevor software: site: http://www.mailgust.org/ description: Mailgust is three softwares in one: Mailing list manager Newsletter distribution tool Message Board Mailgust is written in php and uses a mysql database. vulnerability: if magic quotes off - SQL...
