phpBB 3 (autopost bot mod <= 0.1.3) Remote File Include Vulnerability

No description provided by source. phpBB 3 autopost bot mod = 0.1.3 Remote File Include Vulnerability Vulnerability author: Kacper Greetz: all DEVIL TEAM forum members. Author Website: http://devilteam.pl/ http://polskihacking.pl/ Mod Description: This mod automatically post content from RSS feed...

XMB Forum 1.6 Magic Lantern Cross Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/4721/info XMB Forum 1.6 Magic Lantern is a web-based discussion forum. It is vulnerable to a number of cross-site scripting issues because of improper filtering of user input. 1. The first involves 'member.php'; submittin...

RunCMS 'forum' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36816/info RunCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Benjamin Lefevre Dobermann Forum 0.x newtopic.php subpath Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/6057/info Dobermann Forum is prone to an issue which may allow remote attackers to include arbitrary files located on remote servers. This issue is present in several PHP script files provided with Dobermann. An attacker...

Wizz Forum ForumAuthDetails.php AuthID Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15410/info Wizz Forum is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

Leszek Krupinski L-Forum 2.4 Search Script SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5468/info Reportedly, L-Forum is vulnerable to SQL injection attacks. The vulnerability lies in the file 'search.php' L-Forum does not properly sanitize user input that is used as part of the search parameter in the...

outreach project tool <= 1.2.6 - Remote File Inclusion Vulnerability

No description provided by source. Discovered by cr4wl3r \ Indonesian Hacker OPT Outreach Project Tool = 1.2.6 CRMpath Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/outreach Dork : Adhan Handsome :D Vuln : ./OPT1-2-7MAX/opt/forums/ForumInclude/index.php line ...

Myiosoft EasyGallery (catid) Blind SQL Injection Vulnerability

No description provided by source. Myiosoft easygallery catid Blind SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.comhttp://www.IQ-TY.com MaiL : [email protected] script : http://myiosoft.com/?1.105.0.0 Exploit : true & false...

php-addressbook 3.1.5 - (edit.php) SQL Injection Vulnerability

No description provided by source. @ php-addressbook v3.1.5edit.php SQL Injection Vulnerability @ Author: Hussin X @ Home : www.iq-ty.comhttp://www.iq-ty.com, @ email: darkangelg85atYahoodotcom @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ script :...

Basic Forum <= 1.1 (edit.asp) Remote SQL Injection Vulnerability

No description provided by source. Title : basicforum v 1.1 edit.asp Remote SQL Injection Vulnerability Author : bolivar Dork : This script created by www.script.canavari.com ---------------------------------------------------------------------------...

Clickcess ChitChat.NET name XSS

No description provided by source. source: http://www.securityfocus.com/bid/8417/info It has been reported that a html injection issue exists in the Clickcess ChitChat.NET discussion forum software. The vulnerability is reported to be present in the Name and Topic Title text boxes. The problem ma...

Vanilla Forum 2.0.17.9 LFI Vulnerability

No description provided by source. ------------------------------------------------------------------------ Software................Vanilla Forum 2.0.17.9 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.vanillaforums.com/...

iyzi Forum <= 1.0 Beta 3 (uye_ayrinti.asp) Remote SQL Injection

No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + iyzi Forum s1 b2 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download &...

Poster 2.0 Unauthorized Privileged User Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8426/info A vulnerability has been reported for Poster.version:two. The problem occurs due to the application failing to lock the 'setup' variable after initialization. As a result, an attacker may access this variable to...

Web Wiz Forum 6.34 Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7380/info Web Wiz Forum has been reported prone to sensitive information disclosure vulnerability. An attacker may make a request for and download the underlying Access database file that is used by the Forum application...

MyPHP Forum 1.0 - SQL Injection Exploit

No description provided by source...

phpoutsourcing zorum 3.5 - Multiple Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/12777/info Zorum is a freely available, open source Web-based forum application implemented in PHP. It is available for UNIX, Linux, and any other platform that supports PHP script execution. Multiple remote vulnerabiliti...

Clickcess ChitChat.NET topic title XSS

No description provided by source. source: http://www.securityfocus.com/bid/8417/info It has been reported that a html injection issue exists in the Clickcess ChitChat.NET discussion forum software. The vulnerability is reported to be present in the Name and Topic Title text boxes. The problem ma...

Simple Forum PHP Multiple Vulnerabilities

No description provided by source. Exploit Title: Simple Forum PHP XSS/HTML Injection Vulnerabilities Date: August 25, 2010 Author: arnabs Software Link: http://www.simpleforumphp.com/forum/admin.php?act=topicoptions Price: $24.99 found bug on: http://server/demoguestbook.php?act=new details: you...

XMB Forum 1.8 Member.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7406/info XMB Forum Member.PHP has been reported prone to an SQL injection vulnerability, under certain conditions. The SQL injection vulnerability has been reported to affect the registration page of XMB Forum. This is...