woltlab233.txt

Woltlab Burning Board = 2.2.2/2.3.3 modcp.php SQL injection Discovered by R Vendor: WoltLab URL: http://www.woltlab.de/ Version: = 2.3.3 Type: SQL-injection Description: -------------------------------- The WoltLab Burning Board is a high customisable board software for every kind of use. SQL...

Ultimate PHP Board 1.9.6 GOLD Multiple Scripts XSS (2)

The remote host is running Ultimate PHP Board UPB. The remote version of this software is affected by several cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied input. %NASLMINLEVEL 70300 This script was written by Josh...

CVE-2005-2673

SQL injection vulnerability in modcp.php in WoltLab Burning Board 2.2.2 and 2.3.3 allows remote authenticated attackers to execute arbitrary SQL commands via the 1 x or 2 y parameters...

CVE-2005-2673

CVE-2005-2673 concerns a SQL injection in the modcp.php script of Wol tlab Burning Board, affecting versions 2.2.2 and 2.3.3. The vulnerability arises from unsafely using user-supplied input in the queries for parameters (1) x and (2) y without proper sanitization, allowing remote authenticated a...

CVE-2005-2673

SQL injection vulnerability in modcp.php in WoltLab Burning Board 2.2.2 and 2.3.3 allows remote authenticated attackers to execute arbitrary SQL commands via the 1 x or 2 y parameters...

CVE-2005-2673: Undefined Security Weakness

SQL injection vulnerability in modcp.php in WoltLab Burning Board 2.2.2 and 2.3.3 allows remote authenticated attackers to execute arbitrary SQL commands via the 1 x or 2 y parameters...

Woltlab Burning Board modcp.php Multiple Parameter SQL Injection

Binary data 3175.prm...

Woltlab Burning Board <= 2.2.2/2.3.3 modcp.php SQL injection

Woltlab Burning Board = 2.2.2/2.3.3 modcp.php SQL injection Discovered by R Vendor: WoltLab URL: http://www.woltlab.de/ Version: = 2.3.3 Type: SQL-injection Description: -------------------------------- The WoltLab Burning Board is a high customisable board software for every kind of use. SQL...

CVE-2005-2633

Multiple PHP file inclusion vulnerabilities in PHPTB Topic Board 2.0 and earlier affect the following scripts: admin_o.php, board_o.php, dev_o.php, file_o.php, and tech_o.php. The root cause is unsafely handling the absolutepath parameter, enabling remote attackers to execute arbitrary PHP code. ...

CVE-2005-2633: Undefined Security Weakness

Multiple PHP file inclusion vulnerabilities in 1 admino.php, 2 boardo.php, 3 devo.php, 4 fileo.php or 5 techo.php in PHPTB Topic Board 2.0 and earlier allow remote attackers to execute arbitrary PHP code via the absolutepath parameter...

bbcaffe20XSS.txt

BBCaffe 2.0 cross site scripting poc description: BBcaffe 2.0 is a fast, simple, easy and efficient bulletin board or message board program built in PHP/mySQL. Features include: posting, replying, deleting, editing, searching messages, sending notification emails , full templating. author site:...

BBCaffe 2.0 cross site scripting poc

BBCaffe 2.0 cross site scripting poc description: BBcaffe 2.0 is a fast, simple, easy and efficient bulletin board or message board program built in PHP/mySQL. Features include: posting, replying, deleting, editing, searching messages, sending notification emails , full templating. author site:...

PHPTB Topic Board <= 20: Multiple PHP injection vulnerabilities

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: PHPTB Topic Board - Multiple PHP injection vulnerabilities Version = 2.0 Homepage: htt://www.phptb.com/ Author: Filip Groszyсski VXSfx Date: 17 August 2005 -- == -- == -- == -- == -- == -- == -- == -- == -- == -- Background: PHPTB Top...

CVE-2005-2562

CVE-2005-2562 is an SQL injection vulnerability in Gravity Board X (GBX) 1.1 that allows remote attackers to bypass authentication via the login field and execute arbitrary SQL commands. Multiple connected documents corroborate injections affecting GBX 1.1, enabling credential bypass and potentia...

CVE-2005-2563

CVE-2005-2563 involves multiple XSS vulnerabilities in Gravity Board X (GBX) 1.1. The flaws allow remote attackers to inject arbitrary web script or HTML via (1) the board_id parameter to deletethread.php and (2) the template. The cited sources describe the affected software and the two attack ve...

CVE-2005-2565

CVE-2005-2565 concerns Gravity Board X (GBX) 1.1. The vulnerability is an information-disclosure in which error messages from several GBX pages (e.g., deletethread.php with a perm value, ban.php, addnews.php, banned.php, boardstats.php, adminform.php, /forms/admininfo.php, /forms/announcements.ph...

CVE-2005-2566

Open Bulletin Board (OpenBB) contains multiple SQL injection vulnerabilities in board.php (FID parameter) and member.php (UID parameter). The affected components are the OpenBB web application’s old board and member handlers, enabling remote attackers to execute arbitrary SQL commands. The CVE-20...

CVE-2005-2563

Multiple cross-site scripting XSS vulnerabilities in Gravity Board X GBX 1.1 allow remote attackers to inject arbitrary web script or HTML via 1 the boardid parameter to deletethread.php or 2 the template...

CVE-2005-2564

CVE-2005-2564 affects Gravity Board X (GBX) 1.1. It is a direct static code injection vulnerability in editcss.php where the csscontent parameter is directly inserted into gbxfinal.css, allowing remote attackers to execute arbitrary PHP code, HTML, and script. The NVD entry documents a network-ex...

CVE-2005-2565

Gravity Board X GBX 1.1 allows remote attackers to obtain sensitive information via 1 a 1 in the perm parameter to deletethread.php or a direct request to 2 ban.php, 3 addnews.php, 4 banned.php, 5 boardstats.php, 6 adminform.php, 7 /forms/admininfo.php, 8 /forms/announcements.php, 9...