8125 matches found
PHPDocumentor 1.2/1.3 Forum Lib Variable Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16101/info phpDocumentor is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...
Web Wiz Forum 6.34/7.x Search.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20778/info Web Wiz Forum is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...
Multiple WebmasterSite Products Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30572/info Multiple WebmasterSite products are prone to a remote shell command-execution vulnerability because the applications fail to sufficiently sanitize user-supplied data. Successfully exploiting this issue will all...
Ultimate PHP Board 1.0/1.1 Image Tag Script Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4603/info Ultimate PHP Board UPB is web forum software. It will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. Ultimate PHP Board does not filter script code from image tags. This may...
Simple Machines Forum 1.1.6 HTTP POST Request Filter Security Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31594/info Simple Machines Forum SMF is prone to a security-bypass vulnerability because the application fails to sufficiently sanitize user-supplied input. Attackers can exploit this issue to bypass filter restrictions a...
gl-sh deaf forum <= 6.5.5 - Multiple Vulnerabilities
No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: GL-SH Deaf Forum =6.5.5 Multiple Vulnerabilities Vendor: www.frank-karau.de Vulnerable Version: 6.5.5 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/46 1...
MiniBB Mambo Component <= 1.5a Remote File Include Vulnerabilities
No description provided by source. --------------------------------------------------------------------------------------------- MiniBB Forum Mambo Component = 1.5a Remote File Include Vulnerabilities -----------------------------------------------------------------------------------------------...
Invision Power Board 2.1 <= 2.1.6 - Remote SQL Injection Exploit (2)
No description provided by source. !/usr/bin/perl use LWP::UserAgent; $ua = LWP::UserAgent-new; &header; if @ARGV 2 &info; exit; $server = $ARGV0; $dir = $ARGV1; print + SERVER $server\r\n; print + DIR $dir\r\n; Step 1, detecting vulnerability print 1 Testing forum vulnerability...; $q = UNION...
Class-1 Forum <= 0.24.4 - Remote Code Execution Exploit
No description provided by source. ?php 6.44 08/09/2005 Class-1 Forum sql injection / remote code execution poc exploit coded by rgod - http://rgod.altervista.org make these changes in php.ini if you have troubles with this script: allowcalltimepassreference = on registerglobals = on this is my...
Zix Forum <= 1.12 (RepId) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl ZIXForum = v1.12 Exploit Vulnerability found by Chironex Fleckeri Created By: SlimTim10 [email protected] Google dork: intext:ZIXForum 1.12 by: ZixCom 2002 use IO::Socket::INET; usage unless @ARGV == 2; $host = shift@ARGV; $dir = shift@ARGV; $di...
ITA Forum <= 1.49 SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; ITA Forum 1.49 sql injection exploit with one char bruteforce by 1dt.w0lf // r57 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: example: r57ita.pl http://127.0.0.1/ITA...
Powies pForum <= 1.29a (editpoll.php) SQL Injection Vulnerability
No description provided by source. ============================================================================================== Powie's PHP Forum = v1.29a editpoll Remote SQL Injection Exploit =============================================================================================== Critic...
MiniBB 1.2 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4619/info MiniBB is web forum software. It is written in PHP and will run on most Unix and Linux variants as well as Microsoft Windows operating systems. MiniBB does not filter script code from URL parameters, making it...
Simple Machines Forum 1.0 Size Tag HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10281/info It has been reported that Simple Machines Forum SMF may be prone to an HTML injection vulnerability that may allow an attacker to execute arbitrary HTML or script code in a user's browser. The issue exists due ...
XMB Forum 1.8 BBcode align Tag XSS
No description provided by source. source: http://www.securityfocus.com/bid/9726/info XMB Forum has been reported prone to multiple cross-site scripting, HTML injection and SQL injection vulnerabilities. The issues present themselves due to insufficient sanitization of remote user supplied data. ...
CarLine Forum Russian Board 4.2 memory.php Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/14045/info Forum Russian Board is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out SQL Injection, cross-site scripting, and HTML injection attacks. Forum Russian Board 4.2 ...
YaBB 1.40/1.41 Login Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6004/info A cross-site scripting vulnerability has been reported in the YaBB Yet Another Bulletin Board forum login script. HTML tags or script code are not sanitized from the error output of erroneous login attempts. As ...
OpenBB 1.0 .0 RC3 BBCode Cross Agent HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4819/info OpenBB is web forum software written in PHP. It will run on most Linux and Unix variants, in addition to Microsoft Windows operating systems. OpenBB is reportedly vulnerable to HTML injection attacks. The...
MyBB 1.0.2/1.0.3 Managegroup.PHP SQL Injection Vulnerability
No description provided by source...
Wordpress plugin WP-Forum 1.7.4 - Remote SQL Injection Vulnerability
No description provided by source. remote sql injection exploit -::DESCRIPTION== WordPress forum plugin by Fredrik Fahlstad. Version: 1.7.4. exploit: 1+union+select+null,concatuserlogin,0x2f,userpass,0x2f,useremail,null,null,null,null,null+from+wpusers where id=1/ wptbvusers google: Fredrik...