CVE-2007-1255

Unrestricted file upload vulnerability in admin.bbcode.php in Connectix Boards 0.7 and earlier allows remote authenticated administrators to execute arbitrary PHP code by uploading a crafted GIF smiley image with a .php extension via the uploadimage parameter to admin.php, which can be later...

Sql injection

SQL injection vulnerability in part.userprofile.php in Connectix Boards 0.7 and earlier allows remote authenticated users to execute arbitrary SQL commands and obtain privileges via the pskin parameter to index.php...

CVE-2007-1254

CVE-2007-1254 describes an SQL injection in part.userprofile.php of Connectix Boards

CVE-2007-1255

CVE-2007-1255 affects Connectix Boards 0.7 and earlier. An unrestricted file upload vulnerability in admin.bbcode.php allows remote authenticated administrators to execute arbitrary PHP code by uploading a crafted GIF image with a .php extension via the uploadimage parameter to admin.php, which c...

CVE-2007-1255

Unrestricted file upload vulnerability in admin.bbcode.php in Connectix Boards 0.7 and earlier allows remote authenticated administrators to execute arbitrary PHP code by uploading a crafted GIF smiley image with a .php extension via the uploadimage parameter to admin.php, which can be later...

CVE-2007-1254

SQL injection vulnerability in part.userprofile.php in Connectix Boards 0.7 and earlier allows remote authenticated users to execute arbitrary SQL commands and obtain privileges via the pskin parameter to index.php...

connectix-multi.txt

!/usr/bin/php URL: http://www.acid-root.new.fr/ ------------------------------------------------------------------- Usage: $argv0 -url -usr -pwd -type Options Params: -url For example http://victim.com/connectix/ -usr The username of your account -pwd The password of your account -type Privilege...

Connectix Boards <= 0.7 (p_skin) Multiple Vulnerabilities Exploit

No description provided by source. !/usr/bin/php ?php errorreportingEALL ^ ENOTICE; if$argc 9 print" Connectix Boards = 0.7 pskin Multiple Vulnerabilities Exploit ------------------------------------------------------------------- PHP conditions: none Credits: DarkFig [email protected] URL:...

Connectix Boards <= 0.7 (p_skin) Multiple Vulnerabilities Exploit

Exploit for unknown platform in category web applications ================================================================= Connectix Boards -usr -pwd -type Options Params: -url For example http://victim.com/connectix/ -usr The username of your account -pwd The password of your account -type...

CVE-2007-0661

Summary of CVE-2007-0661 : Intel Enterprise Southbridge 2 Baseboard Management Controller (BMC) and related Intel Server Boards (5000XAL, S5000PAL/S5000PSL/S5000XVN/S5000VCL/S5000VSA/SC5400RA) plus OEM firmware, prior to 20070119, are affected when IPMI is enabled. The vulnerability allows remote...

CVE-2006-6113

Monkey Boards 0.3.5 allows remote attackers to obtain sensitive information via direct requests to 1 include/adminauth.inc.php and 2 include/engine/class.compiler.php, which reveals the full path in an error message. NOTE: this issue is only an exposure if the administrator has changed the defaul...

CVE-2006-6113

Monkey Boards 0.3.5 and earlier are affected by path-disclosure flaws in include/admin_auth.inc.php and include/engine/class.compiler.php, which allow remote disclosure of the true server script path via error messages. The issue is exploitable remotely if an administrator has changed the default...

CVE-2006-6113

Monkey Boards 0.3.5 allows remote attackers to obtain sensitive information via direct requests to 1 include/adminauth.inc.php and 2 include/engine/class.compiler.php, which reveals the full path in an error message. NOTE: this issue is only an exposure if the administrator has changed the defaul...

CVE-2004-2600

The CVE-2004-2600 entry concerns firmware for Intel IPMI 1.5-based server boards/platforms. The vulnerability stems from an Authentication Type Enables parameter being set to an invalid None value, which could allow remote attackers to obtain sensitive information when LAN management is enabled. ...

phptb20.txt

Class: Input Validation Error CVE: CVE-MAP-NOMATCH Remote: Yes Local: Yes Credit: aLMaSTeR HaCKeR almasterathotmaildotcom Vulnerable: Powered by PHPTB Topic Boards 2.0 ITHINK WORK IN ALL VERSION info PHPTB BOARD IS VERY NICE BOARD U CAN FIND SOURCE OF FORUM IN http://www.phptb.com discussion SQL ...

CVE-2005-2587

PHPTB Topic Boards 2.0 is affected by a SQL injection in emailvalidate.php that allows remote attackers to execute arbitrary SQL commands via the mid parameter. Root cause is improper input handling in emailvalidate.php leading to SQL manipulation. Documented impact includes potential exposure or...

CVE-2005-2587

SQL injection vulnerability in emailvalidate.php in PHPTB Topic Boards 2.0 allows remote attackers to execute arbitrary SQL commands via the mid parameter...

CVE-2005-2587

SQL injection vulnerability in emailvalidate.php in PHPTB Topic Boards 2.0 allows remote attackers to execute arbitrary SQL commands via the mid parameter...

SQL in PHPTB Topic Boards 2.0

Class: Input Validation Error CVE: CVE-MAP-NOMATCH Remote: Yes Local: Yes Credit: aLMaSTeR HaCKeR almasterathotmaildotcom Vulnerable: Powered by PHPTB Topic Boards 2.0 ITHINK WORK IN ALL VERSION info PHPTB BOARD IS VERY NICE BOARD U CAN FIND SOURCE OF FORUM IN http://www.phptb.com discussion SQL ...

Invision Power Boards 1.3.1 FINAL XSS Exploit

Description: Lack of checking in the SML codes. Exploit: Put this into any signature or post on an invision forum: COLOR=IMGhttp://aaa.aa/=aaa.jpg/IMGstyle=background:url"javascript:document.location.replace'http://www.hackthissite.org';" /color Fix: I'm not good at regexes :...