XMB Forum 1.9.3 Post.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15267/info XMB Nexus Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

WordPress Mingle Forum plugin <= 1.0.31 SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Mingle Forum plugin = 1.0.31 SQL Injection Vulnerability Date: 2011-09-19 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/mingle-forum.1.0.31.zip Version: 1.0.31 tested...

QuickTalk Forum <= 1.6 - Remote Blind SQL Injection Exploit

No description provided by source. html head titleQuickTalk Forum = 1.6 Blind SQL Injection Exploit/title script language=Javascript type=text/javascript / ----------------------------------------------------------------------------------------------- - QuickTalk Forum Blind SQL Injection Exploit...

vBulletin misc.php Template Name Arbitrary Code Execution

No description provided by source. $Id: phpvbulletintemplate.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...

Phenix 3.5b - SQL Injection Vulnerability

No description provided by source. Dear Sir / Madam The ItSecTeam has discovered a new Multiple bug in phenix Lastest Version 35b and will be glad to report and public it . More information about this bug is listed below :...

YaBB 1.x/9.1.2000 YaBB.pl IMSend Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11215/info A cross-site scripting vulnerability is reported in the YaBB forum 'YaBB.pl' script. As a result, it is possible for a remote attacker to create a malicious link to the affected page of a site hosting the web...

React software [local file inclusion]

No description provided by source. React software local file inclusion - date: 29.03.2010 - author: SNK - language: php - page: http://react.nl - vuln: http://page/forum/listmessage/index.php?action=../../../../../../../../../../../../../etc/passwd%00 - dork: Powered by React - www.react.nl...

Simple Machines Forum <= 1.1.5 Password Reset Security Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33219/info Simple Machines Forum is prone to a security-bypass vulnerability because it fails to adequately restrict access to the password-reset feature. An attacker can exploit this issue to gain administrative access t...

PHPDocumentor 1.2/1.3 Forum Lib Variable Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16101/info phpDocumentor is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...

Web Wiz Forum 6.34/7.x Search.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20778/info Web Wiz Forum is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Multiple WebmasterSite Products Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30572/info Multiple WebmasterSite products are prone to a remote shell command-execution vulnerability because the applications fail to sufficiently sanitize user-supplied data. Successfully exploiting this issue will all...

Ultimate PHP Board 1.0/1.1 Image Tag Script Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4603/info Ultimate PHP Board UPB is web forum software. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. Ultimate PHP Board does not filter script code from image tags. This may...

Simple Machines Forum 1.1.6 HTTP POST Request Filter Security Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31594/info Simple Machines Forum SMF is prone to a security-bypass vulnerability because the application fails to sufficiently sanitize user-supplied input. Attackers can exploit this issue to bypass filter restrictions a...

gl-sh deaf forum <= 6.5.5 - Multiple Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: GL-SH Deaf Forum =6.5.5 Multiple Vulnerabilities Vendor: www.frank-karau.de Vulnerable Version: 6.5.5 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/46 1...

MiniBB Mambo Component <= 1.5a Remote File Include Vulnerabilities

No description provided by source. --------------------------------------------------------------------------------------------- MiniBB Forum Mambo Component = 1.5a Remote File Include Vulnerabilities -----------------------------------------------------------------------------------------------...

Invision Power Board 2.1 <= 2.1.6 - Remote SQL Injection Exploit (2)

No description provided by source. !/usr/bin/perl use LWP::UserAgent; $ua = LWP::UserAgent-new; &header; if @ARGV 2 &info; exit; $server = $ARGV0; $dir = $ARGV1; print + SERVER $server\r\n; print + DIR $dir\r\n; Step 1, detecting vulnerability print 1 Testing forum vulnerability...; $q = UNION...

Class-1 Forum <= 0.24.4 - Remote Code Execution Exploit

No description provided by source. ?php 6.44 08/09/2005 Class-1 Forum sql injection / remote code execution poc exploit coded by rgod - http://rgod.altervista.org make these changes in php.ini if you have troubles with this script: allowcalltimepassreference = on registerglobals = on this is my...

Zix Forum <= 1.12 (RepId) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl ZIXForum = v1.12 Exploit Vulnerability found by Chironex Fleckeri Created By: SlimTim10 [email protected] Google dork: intext:ZIXForum 1.12 by: ZixCom 2002 use IO::Socket::INET; usage unless @ARGV == 2; $host = shift@ARGV; $dir = shift@ARGV; $di...

MiniBB 1.2 Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4619/info MiniBB is web forum software. It is written in PHP and will run on most Unix and Linux variants as well as Microsoft Windows operating systems. MiniBB does not filter script code from URL parameters, making it...

Simple Machines Forum 1.0 Size Tag HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10281/info It has been reported that Simple Machines Forum SMF may be prone to an HTML injection vulnerability that may allow an attacker to execute arbitrary HTML or script code in a user's browser. The issue exists due ...