Invision Board Multiple XSS and SQL Injection

Binary data 2879.prm...

Horde Chora common-footer.inc Page Title XSS

According to its version, the remote installation of Chora fails to fully sanitize user-supplied input when setting the parent frame's page title by JavaScript in 'templates/common-footer.inc'. By leveraging this flaw, an attacker may be able to inject arbitrary HTML and script code into a user's...

Coppermine Gallery < 1.3.3 init.inc.php HTML Injection

Binary data 2839.prm...

Cross-site Scripting through global scope pollution — Mozilla

As you browse from site to site each new page should start with a clean slate. shutdown reports a technique that pollutes the global scope of a window in a way that persists from page to page. A malicious script could define a setter function for a variable known to be used by a popular site, and...

IBM WebSphere JSP Source Disclosure / XSS Vulnerabilities

Binary data 2825.prm...

PunBB 1.2.4 (change_email) SQL Injection Exploit

No description provided by source. !/usr/bin/python | || | | | | | | | || || \ | |/ || '|/ |/ -| ' \ / -/ |||| /| || / ||||,||| ,|||||||,| || |||||| Proof of concept code from the Hardened-PHP Project -= PunBB 1.2.4 =- changeemail SQL injection exploit user-supplied data within the database...

phpMyAdmin index.php convcharset Parameter XSS

The installed version of phpMyAdmin suffers from a cross-site scripting vulnerability due to its failure to sanitize user input to the 'convcharset' parameter of the 'index.php' script. A remote attacker may use these vulnerabilities to cause arbitrary code to be executed in a user's browser to...

Yet Another Forum.net XSS vulnerabilities

OVERVIEW ========= "Yet Another Forum.net http://www.yetanotherforum.net/ is a opensource discussion forum or bulletin board system for web sites running ASP.NET. It is ASP.NET based with a MS SQL backend database. The full C source code is available licensed as GPL. " Several Cross Site Scriptin...

Mailreader network.cgi enriched/richtext MIME Message XSS

According to its banner, the version of Mailreader installed on the remote host is affected by a remote HTML injection vulnerability due to its failure to properly sanitize messages using a 'text/enriched' or 'text/richtext' MIME type. An attacker can exploit this flaw by sending a specially...

PunBB 1.2.2 - Authentication Bypass

!/usr/bin/perl use IO::Socket; PunBB version 1 // Check if there's a user with the user ID and password hash from the cookie $result = $db-query'SELECT .... tra-la-la... ; $punuser = $db-fetchassoc$result; // If user authorisation failed if !isset$punuser'id' || md5$cookieseed.$punuser'password' ...

phpBB 2.0.12 - Change User Rights Authentication Bypass (C)

phpBB 2.0.12 - Change User Rights Authentication Bypass C / Paisterist's code was nice but heres mil's version. precompiled: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/897.rar Usage: bcc32 897.cpp and place the exe in your firefox profile dir. Usually...

phpBB 2.0.12 - Change User Rights Authentication Bypass

/ Paisterist's code was nice but heres mil's version. precompiled: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/897.rar Usage: bcc32 897.cpp and place the exe in your firefox profile dir. Usually C:\Documents and Settings\Application...

security flaw

Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages...

PHP-Fusion < 5.0.2 setuser.php HTML Injection Vulnerability

Binary data 2726.prm...

phpBB &lt;= 2.0.12 Change User Rights Authentication Bypass

No description provided by source. !/usr/bin/perl -w phpBB =2.0.12 session autologin exploit This script uses the vulerability in autologinid variable More: http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=267563 Just gives an user on vulnerable forum administrator rights. You should register the...

phpBB 2.0.12 - Change User Rights Authentication Bypass

phpBB 2.0.12 - Change User Rights Authentication Bypass !/usr/bin/perl -w phpBB new ; my $cookiejar = HTTP::Cookies-new ; $browser-cookiejar $cookiejar ; $cookiejar-setcookie "0","phpbb2mysqldata", "a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bb%3A1%3Bs%3A6%3A%22userid%22%3Bs%3A1%3A%222%22%3B%7D",...

[PersianHacker.NET 200503-10]PHP-Fusion v5.01 Html Injection Vulnerability

PersianHacker.NET 200503-10PHP-Fusion v5.01 Html Injection Vulnerability Date: 2005 March Bug Number: 10 PHP-Fusion a light-weight open-source content management system CMS written in PHP. It utilises a mySQL database to store your site content and includes a simple, comprehensive adminstration...

[PersianHacker.NET 200503-09]PHPOpenChat v3.x XSS Multiple Vulnerability

PersianHacker.NET 200503-09PHPOpenChat v3.X XSS Multiple Vulnerability Date: 2005 March Bug Number: 09 PHPOpenChat is a high performance php-based chat server software for a live chat-room or -module on every php-based site. More info @: http://phpopenchat.org/ Discussion: -------------------- Th...

phpBB2012.txt

Just a simple Perl Script for this exploit. I hope it is usefull for some of you ------------------------------------------------------------------------------------------------ !/usr/bin/perl phpBB 2.0.12 Session Handling Administrator Authentication Bypass EXPLOIT written by phuket The discover...

DEBIAN-CVE-2005-0626

Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies...