PHPNuke Splatt Forum 3.2 Module Path Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7080/info The Splatt Forum module for PHPNuke has been reported prone to a vulnerability which, when exploited, may disclose sensitive path information to a remote attacker. An attacker could use the information gathered ...

Powie PForum 1.1x Username Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4165/info Powie PForum is web forum software, written in PHP and back-ended by MySQL. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. PForum is prone to cross-site scripting...

XMB Forum 1.6 pre-beta Image Tag Script Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4167/info The Extreme Message Board XMB 1.6 Magic Lantern pre-beta version reportedly allows JavaScript and HTML to be entered in messages. This can be achieved by entering script or HTML between img and /img tags in a...

Simple Machines Forum <= 1.1 rc2 (lngfile) Remote Exploit (windows)

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- Simple Machines Forum = 1.1 rc2 lngfile ZendHashDelKeyOrIndex/arbitrary local inclusion exploit Win boxes by rgod [email protected]...

philboard 1.02 - SQL Injection Vulnerability

No description provided by source. + + |ViRuSHiMa@YouR SyS|\ + ||||\ + |||||, + |||||||| + @''@|@@@ % + philboard v1.02 sql injection Vulnerability +===========================================================================|| Script : philboard v1.02 || ! Author : ViRuSHiMa || ! Site :...

dynamic flash forum 1.0 beta Multiple Vulnerabilities

No description provided by source. Salvatore drosophila Fresta + Application: Dynamic Flash Forum + Version: 1.0 Beta + Website: http://df2.sourceforge.net/ + Bugs: A Information Disclosure B Authentication Bypass C Multiple SQL Injection + Exploitation: Remote + Date: 09 Apr 2009 + Discovered by...

Ikonboard 2.17/3.0/3.1 Image Tag Cross-Agent Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4182/info Ikonboard is a Web Bulletin Board Service BBS software package written in Perl which runs on Unix and Linux variants. Ikonboard allows users to include images in forum messages using image tags, with the followi...

Geeklog <= 1.6.0sr2 - Remote File Upload

No description provided by source. ============================================================================== Geeklog = v1.6.0sr2 - Remote File Upload Discovered: JaL0h Software Site: http://www.geeklog.net Dork: By Geeklog Created this page in +seconds +powered...

ViArt CMS forum_topic_new.php forum_id Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/36003/info ViArt CMS is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context ...

Forum 5 PM.PHP Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18967/info Forum 5 is prone to a local file-include vulnerability. The application fails to sanitize user input when executing the script. In particular the script fails to check for the presence of a directory-traversal...

Miniweb 2.0 Business Portal and Social Networking Platform SQL Injection

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Miniweb 2.0 Business Portal and Social Networking Platform SQL Injection Vulnerability Vendor url:http://www.miniweb2.com/ Version:2.0 Price:250$ Published: 2010-06-10 Greetz to:Sid3^effects, MaYu...

Ultra Light Forum Persistant XSS Vulnerability

No description provided by source. Ultra Light Forum Persistant XSS Vulnerability By cr4wl3r http://bastardlabs.info http://bastardlabs.info/advisories/?id=86 Script: http://sourceforge.net/projects/ultralightforum/files/ Tested: Win 7 Description : Ultra Light Forum developed in PHP and MySQL as...

simple forum 3.2 (fd/xss) Multiple Vulnerabilities

No description provided by source. SIMPLE FORUM v 3.2 MULTIPLE VULNERABILITIES author : tomplixsee my email : [email protected] software : SIMPLE FORUM v3.2 download : http://www.gerd-tentler.de/tools/forum/ 1.XSS vulnerable code on forum.php ? ..... ifisset$REQUEST'dateshow' $dateshow =...

TR Forum 1.5 Mullti Vulnerability

No description provided by source...

Vegas Forum 1.0 Forumlib.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17079/info Vegas Forum is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could all...

WSN Forum <= 1.3.4 (prestart.php) Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+:...

Simple Machines Forum <= 1.1 rc2 Lock Topics Remote Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- Simple Machines Forum = 1.1.RC2 lock/ZendHashDelKeyOrIndex Vulnerability by rgod [email protected] site: http://retrogod.altervista.or...

phpscripte24 Preisschlacht Liveshop System SQL Injection (seite&aid) index.php

No description provided by source. ----------------------------Information------------------------------------------------ +Name : phpscripte24 Preisschlacht Liveshop System SQL Injection seite&aid index.php +Autor : Easy Laster +Date : 19.03.2010 +Script : phpscripte24 Preisschlacht Liveshop...

Snitz Forums 2000 3.0/3.1/3.3 Image Tag Cross-Agent Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4192/info Snitz Forums 2000 is ASP-based web forum software. It runs on Microsoft Windows operating systems. Snitz Forums 2000 allows users to include images in forum messages using image tags, with the following syntax:...

PHP-Nuke 6.0 - Multiple Cross Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/6409/info It has been discovered that multiple PHP scripts used by PHP-Nuke are vulnerable to cross-sitescripting attacks. Due to insufficient sanitization of web requests it is possible for script code to be embedded in...