ExBB Italia userstop.php远程文件包含漏洞

ExBB Italia是一款意大利语的论坛程序。 ExBB Italia在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞在服务器上以Web进程权限执行任意命令。 ExBB Italia的modules/userstop/userstop.php脚本没有正确验证exbbhomepath参数的输入： include$exbb'homepath'.'modules/userstop/data/userstopconf.php';...

ExBB_ITA_v2.txt

ExBB Italiano Patched! Thanks to Flippo. "; Exploits - http://localhost/forum/modules/threadstop/threadstop.php?newexbbhomepath=phpcmdpath - http://localhost/forum/modules/userstop/userstop.php?exbbhomepath=phpcmdpath -...

CVE-2006-4544

Multiple PHP remote file inclusion vulnerabilities in ExBB 1.9.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the exbbhomepath parameter in files in the modules directory including 1 birstday/birst.php 2 birstday/select.php, 3...

CVE-2006-4544

Multiple PHP remote file inclusion vulnerabilities in ExBB 1.9.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the exbbhomepath parameter in files in the modules directory including 1 birstday/birst.php 2 birstday/select.php, 3...

CVE-2006-4544

CVE-2006-4544 describes PHP remote file inclusion vulnerabilities in ExBB 1.9.1 where, if register_globals is enabled, an attacker can cause arbitrary PHP code execution by supplying a URL in the exbb[home_path] parameter to several module files (birstday/birst.php, birstday/select.php, birstday/...

CVE-2006-4544: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in ExBB 1.9.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the exbbhomepath parameter in files in the modules directory including 1 birstday/birst.php 2 birstday/select.php, 3...

CVE-2006-4488

PHP remote file inclusion vulnerability in modules/userstop/userstop.php in ExBB Italia 0.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the exbbhomepath parameter...

CVE-2006-4488

ExBB Italia

CVE-2006-4488: Undefined Security Weakness

PHP remote file inclusion vulnerability in modules/userstop/userstop.php in ExBB Italia 0.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the exbbhomepath parameter...

ExBB 1.9.1 - Home_Path Multiple Remote File Inclusions

ExBB 1.9.1 - HomePath Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/19787/info ExBB is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote...

ExBB 1.9.1 - 'Home_Path' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/19787/info ExBB is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in th...

[ECHO_ADV_46$2006] ExBB v1.9.1 (exbb[home_path]) Multiple Remote File Inclusion

ECHO.OR.ID ------------------------------------------------------------------------------ ECHOADV46$2006 ExBB v1.9.1 exbbhomepath Multiple Remote File Inclusion ------------------------------------------------------------------------------ Author : Ahmad Maulana a.k.a Matdhule Date Found : August...

ExBB Italian version <= v2.0 (home_path) Remote File Inclusion Exploit

============================================================================================== ExBB Italian version = v2.0 homepath Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor site...

ExBB.txt

============================================================================================== ExBB Italian version "Powered by ExBB " ================================================================================================ Discoverd By : SHiKaA Conatact : SHiKaA-athotmail.com GreetZ :...

ExBB Italiano 0.2 - exbb[home_path] Remote File Inclusion

============================================================================================== ExBB Italian version "Powered by ExBB " ================================================================================================ Discoverd By : SHiKaA Conatact : SHiKaA-athotmail.com GreetZ :...

ExBB Italiano 0.2 - exbb[home_path] Remote File Inclusion

ExBB Italiano 0.2 - exbbhomepath Remote File Inclusion ============================================================================================== ExBB Italian version "Powered by ExBB " ========...

ExBB Italiano <= 0.2 exbb[home_path] Remote File Include Vulnerability

No description provided by source. ============================================================================================== ExBB Italian version = v2.0 homepath Remote File Inclusion Exploit ===============================================================================================...

ExBB Italiano <= 0.2 exbb[home_path] Remote File Include Vulnerability

Exploit for unknown platform in category web applications ====================================================================== ExBB Italiano = 0.2 exbbhomepath Remote File Include Vulnerability ======================================================================...

FW: ExBB &lt;=1.1 XSS vuln.

Извиняюсь ExBB =1.9.1 XSS vuln. From: KeVRter mailto:[email protected] Sent: Monday, May 01, 2006 7:53 PM To: ' [email protected]' Subject: ExBB =1.1 XSS vuln. Cross Site Scripting При добавлении сообщения/темы/голосования осуществляется не достаточная фильтрация входных данных: Примеры...

Уязвимость в форуме ExBB

Здравствуйте! Хотел бы поделится уязвимостью в форуме ExBB. Пока нигде не видел, чтобы эта уязвимость была опубликована. Уязвимость вроде бы должна существовать в любых версиях но я тестировал ее на 1.9.1. Вот сама уязвимость, которая существует, если на форуме включена поддержка загрузки...