Discussion Web v4 Remote Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ========================================================== Discussion Web v4 Remote Database Disclosure Vulnerability ========================================================== --------------------------------------------------------- Port...

Discussion Web 4 - Remote Database Disclosure

Discussion Web 4 - Remote Database Disclosure --------------------------------------------------------- Portal Name: Discussion Web Version : 4.0 Vendor : http://www.takempis.com/aboutdiscussion.htm Author : PouyaServer , [email protected] Vulnerability : DD...

CPCommerce 1.2.6 - URL Rewrite Input Variable Overwrite Authentication Bypass

CPCommerce 1.2.6 - URL Rewrite Input Variable Overwrite Authentication Bypass Author: girex Homepage: girex.altervista.org CMS: cpCommerce 1.2.6 Site: http://cpcommerce.cpradio.org/ Bug: URL Rewrite - Input variables overwrite PoC: Auth bypass - Shell upload Note: Works regardless php.ini setting...

Discussion Forums 2k v3.3 Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ Discussion Forums 2k v3.3 Multiple SQL Injection Vulnerabilities ================================================================...

discforums-sql.txt

Author: !DoktOR! Date found: 30.09.08 Product: Discussion Forums 2k Version: 3.3 URL: http://developer.berlios.de/projects/df2k/ Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit 1:...

Discussion Forums 2k 3.3 - Multiple SQL Injections

Discussion Forums 2k 3.3 - Multiple SQL Injections Author: !DoktOR! Date found: 30.09.08 Product: Discussion Forums 2k Version: 3.3 URL: http://developer.berlios.de/projects/df2k/ Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit 1:...

Discussion Forums 2k 3.3 - Multiple SQL Injections

Author: !DoktOR! Date found: 30.09.08 Product: Discussion Forums 2k Version: 3.3 URL: http://developer.berlios.de/projects/df2k/ Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off Exploit 1:...

Vikingboard <= 0.2 Beta (task) Local File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Vikingboard = 0.2 Beta Local File Inclusion Vulnerability Script: "Vikingboard is a PHP-based...

Vikingboard <= 0.2 Beta (task) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= Vikingboard = 0.2 Beta task Local File Inclusion Vulnerability ================================================================= :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;...

vikingboard-lfi.txt

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Vikingboard = 0.2 Beta Local File Inclusion Vulnerability Script: "Vikingboard is a PHP-based discussion forum..." Script site:...

Vikingboard 0.2 Beta - 'task' Local File Inclusion

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Vikingboard = 0.2 Beta Local File Inclusion Vulnerability Script: "Vikingboard is a PHP-based discussion forum..." Script site:...

D-iscussion Board 3.01 (topic) Local File Inclusion Vulnerability

No description provided by source. + D-iscussion Board 3.01 Local File Inclusion + Discovered By SirGod + MorTal TeaM + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,str0ke Download : http://dino.shiftedphase.com/comp/downloads/forum.zip + Local File Inclusion PoC :...

D-iscussion Board 3.01 (topic) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= D-iscussion Board 3.01 topic Local File Inclusion Vulnerability ================================================================= + D-iscussion Board 3.01 Local File Inclusi...

D-iscussion Board 3.01 - topic Local File Inclusion

D-iscussion Board 3.01 - topic Local File Inclusion + D-iscussion Board 3.01 Local File Inclusion + Discovered By SirGod + MorTal TeaM + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,str0ke Download : http://dino.shiftedphase.com/comp/downloads/forum.zip + Local File Inclusion...

D-iscussion Board 3.01 - 'topic' Local File Inclusion

D-iscussion Board 3.01 Local File Inclusion + Discovered By SirGod + MorTal TeaM + Greetz : E.M.I.N.E.M,Ras,Puscasmarin,ToxicBlood,HrN,kemrayz,007m,str0ke Download : http://dino.shiftedphase.com/comp/downloads/forum.zip + Local File Inclusion PoC :...

vanilla-xss.txt

GulfTech Security Research August 19, 2008 Vendor : Mark O'Sullivan URL : http://www.getvanilla.com/ Version : Vanilla alert document.cookie%3B The above example link would display the end users cookie to them. Of course this can also be used to steal the cookie data as mentioned earlier in this...

Design/Logic Flaw

Unspecified vulnerability in the sample Discussion Forum Portlet for the Oracle Portal component in Oracle Application Server, as available from OTN before 20080715, has unknown impact and remote attack vectors...

CVE-2008-2583

CVE-2008-2583 affects Oracle Portal’s sample Discussion Forum Portlet (Oracle Application Server 10g). The vulnerability resides in the Discussion Forum Portlet distributed via OTN prior to 20080715, enabling remote exploitation over a network with unknown impact per the initial description, but ...

CVE-2008-2583

Unspecified vulnerability in the sample Discussion Forum Portlet for the Oracle Portal component in Oracle Application Server, as available from OTN before 20080715, has unknown impact and remote attack vectors...

CVE-2008-2583: Undefined Security Weakness

Unspecified vulnerability in the sample Discussion Forum Portlet for the Oracle Portal component in Oracle Application Server, as available from OTN before 20080715, has unknown impact and remote attack vectors...