6295 matches found
Ultimate PHP Board 1.81.9 - Multiple Cross-Site Scripting Vulnerabilities
Ultimate PHP Board 1.81.9 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/13971/info Ultimate PHP Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied inpu...
FusionBB Multiple Vulnerabilities
GulfTech Security Research June 6th, 2005 Vendor : InteractivePHP, Inc URL : http://www.fusionbb.com/ Version : Version .11 Beta And Earlier Risk : Multiple Vulnerabilities Description: FusionBB is a popular online message board written in php and developed by InteractivePHP, INC. There are sever...
Ultimate PHP Board < 1.9.7 Multiple XSS
Binary data 3017.prm...
Ultimate PHP Board <= 1.9.6 GOLD users.dat Password Decryptor
Exploit for unknown platform in category web applications ============================================================= Ultimate PHP Board = 1.9.6 GOLD users.dat Password Decryptor ============================================================= !/usr/bin/perl Passwords Decrypter for UPB = 1.9.6...
Ultimate PHP Board 1.8/1.9 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/13971/info Ultimate PHP Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script...
Ultimate PHP Board 1.8/1.9 - Weak Password Encryption
source: https://www.securityfocus.com/bid/13975/info Ultimate PHP Board is prone to a weak password encryption vulnerability. This issue is due to a failure of the application to protect passwords with a sufficiently effective encryption scheme. This issue may allow a malicious user to gain acces...
[EXPL] Invision Power Board SQL Injection (Cookie, Exploit 2)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
Invision Power Board <= 1.3.1 Login.PHP SQL Injection (working)
Exploit for unknown platform in category web applications =============================================================== Invision Power Board = 1.3.1 Login.PHP SQL Injection working =============================================================== ?php / = 1.3.1 Final /str0ke / $server = "SERVER";...
Invision Power Board <= 1.3.1 Login.PHP SQL Injection (working)
No description provided by source. ?php / = 1.3.1 Final /str0ke / $server = "SERVER"; $port = 80; $file = "PATH"; $target = 81; / User id and password used to fake-logon are not important. '10' is a random number. / $id = 10; $pass = ""; $hex = "0123456789abcdef"; for$i = 1; $i = 32; $i++ $idx = ...
Invision Power Board 1.3.1 - 'login.php' SQL Injection
?php / = 1.3.1 Final /str0ke / $server = "SERVER"; $port = 80; $file = "PATH"; $target = 81; / User id and password used to fake-logon are not important. '10' is a random number. / $id = 10; $pass = ""; $hex = "0123456789abcdef"; for$i = 1; $i = 32; $i++ $idx = 0; $found = false; while !$found...
[Full-disclosure] CastleCops phpBB bbcode Input Validation Disclosure
CASTLECOPS.COM SUMMARY bbcode input validation Severity: High CastleCops: http://castlecops.com/t123194-.html CVE: CAN-2005-1193 phpBB Security ID: 266 Bugtraq ID: 13545 Secunia : 15298 US-CERT VU: 113196 SecurityTracker : 1013918 Vulnerable: viewtopic.php, privmsg.php for phpBB 2.0.14 possible a...
CVE-2005-1817
Invision Power Board (IPB) versions 1.0–1.3 are affected by a vulnerability in index.php that allows remote attackers to edit arbitrary forum posts by sending a modified request. The issue is triggered via direct parameter manipulation in a HTTP request to index.php, enabling an attacker to alter...
CVE-2005-1816
Invision Power Board IPB 1.0 through 2.0.4 allows non-root admins to add themselves or other users to the root admin group via the "Move users in this group to" screen...
CVE-2005-1817
Invision Power Board IPB 1.0 through 1.3 allows remote attackers to edit arbitrary forum posts via a direct request to index.php with modified parameters...
CVE-2005-1816
Invision Power Board (IPB) versions 1.0–2.0.4 are affected by a privilege-escalation vulnerability where non-root admins can add themselves or other users to the root admin group via the “Move users in this group to” screen. This has been reported consistently across CVE-2005-1816 records (NVD, R...
CVE-2005-1816
Invision Power Board IPB 1.0 through 2.0.4 allows non-root admins to add themselves or other users to the root admin group via the "Move users in this group to" screen...
CVE-2005-1817
Invision Power Board IPB 1.0 through 1.3 allows remote attackers to edit arbitrary forum posts via a direct request to index.php with modified parameters...
CVE-2005-1817: Undefined Security Weakness
Invision Power Board IPB 1.0 through 1.3 allows remote attackers to edit arbitrary forum posts via a direct request to index.php with modified parameters...
php2014.txt
/ -------------------------------------------------------- Neo Security Team NST® - Advisory 14 - 17/04/05 -------------------------------------------------------- Program: phpBB 2.0.14 Homepage: http://www.phpbb.com Vulnerable Versions: phpBB 2.0.14 & Lower versions Risk: Low Risk!! Impact:...
CVE-2005-1816: Undefined Security Weakness
Invision Power Board IPB 1.0 through 2.0.4 allows non-root admins to add themselves or other users to the root admin group via the "Move users in this group to" screen...