SSL Certificate Chain Contains RSA Keys Less Than 2048 bits (PCI DSS)

At least one of the X.509 certificates sent by the remote host has a key that is shorter than 2048 bits. According to industry standards set by the Certification Authority/Browser CA/B Forum, certificates issued after January 1, 2014 must be at least 2048 bits. Some browser SSL implementations ma...

Woltlab Burning Board 3.9.1 - Persistent Web Vulnerability

Document Title: =============== Woltlab Burning Board 3.9.1 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1256 Video: http://www.vulnerability-lab.com/getcontent.php?id=1257 Release Date: ============= 2014-04-10...

Woltlab Burning Board 3.9.1 - Persistent Web Vulnerability

Document Title: =============== Woltlab Burning Board 3.9.1 - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1256 Video: http://www.vulnerability-lab.com/getcontent.php?id=1257 Release Date: ============= 2014-04-10...

CVE-2011-5278

SQL injection vulnerability in signature.php in Advanced Forum Signatures plugin aka afsignatures 2.0.4 for MyBB allows remote attackers to execute arbitrary SQL commands via the afsbarright parameter...

CVE-2011-5277

Multiple SQL injection vulnerabilities in signature.php in the Advanced Forum Signatures aka afsignatures plugin 2.0.4 for MyBB allow remote attackers to execute arbitrary SQL commands via the 1 afstype, 2 afsbackground, 3 afsshowonline, 4 afsbarleft, 5 afsbarcenter, 6 afsfullline1, 7 afsfullline...

Sql injection

Multiple SQL injection vulnerabilities in signature.php in the Advanced Forum Signatures aka afsignatures plugin 2.0.4 for MyBB allow remote attackers to execute arbitrary SQL commands via the 1 afstype, 2 afsbackground, 3 afsshowonline, 4 afsbarleft, 5 afsbarcenter, 6 afsfullline1, 7 afsfullline...

Sql injection

SQL injection vulnerability in signature.php in Advanced Forum Signatures plugin aka afsignatures 2.0.4 for MyBB allows remote attackers to execute arbitrary SQL commands via the afsbarright parameter...

CVE-2011-5277

Multiple SQL injection vulnerabilities in signature.php in the Advanced Forum Signatures aka afsignatures plugin 2.0.4 for MyBB allow remote attackers to execute arbitrary SQL commands via the 1 afstype, 2 afsbackground, 3 afsshowonline, 4 afsbarleft, 5 afsbarcenter, 6 afsfullline1, 7 afsfullline...

CVE-2011-5278

SQL injection vulnerability in signature.php in Advanced Forum Signatures plugin aka afsignatures 2.0.4 for MyBB allows remote attackers to execute arbitrary SQL commands via the afsbarright parameter...

CVE-2011-5277

The CVE-2011-5277 issue concerns the MyBB Advanced Forum Signatures (afsignatures) plugin, specifically version 2.0.4 for MyBB. The vulnerability is an SQL injection in signature.php, exploitable via the parameters (afs_type, afs_background, afs_showonline, afs_bar_left, afs_bar_center, afs_full_...

CVE-2011-5278

CVE-2011-5278 describes an SQL injection in the MyBB plugin MyBB Advanced Forum Signatures (afsignatures), specifically in signature.php for version 2.0.4. An attacker can remotely exploit the afs_bar_right parameter to execute arbitrary SQL commands. The vulnerability, classified with a base CVS...

CVE-2011-5278: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in signature.php in Advanced Forum Signatures plugin aka afsignatures 2.0.4 for MyBB allows remote attackers to execute arbitrary SQL commands via the afsbarright parameter...

CVE-2011-5277: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in signature.php in the Advanced Forum Signatures aka afsignatures plugin 2.0.4 for MyBB allow remote attackers to execute arbitrary SQL commands via the 1 afstype, 2 afsbackground, 3 afsshowonline, 4 afsbarleft, 5 afsbarcenter, 6 afsfullline1, 7 afsfullline...

PT-2014-2193

Name of the Vulnerable Software and Affected Versions Advanced Forum Signatures plugin version 2.0.4 for MyBB Description The issue concerns SQL injection vulnerabilities in the signature.php file of the Advanced Forum Signatures plugin for MyBB. Remote attackers can execute arbitrary SQL command...

PT-2014-2194

Name of the Vulnerable Software and Affected Versions Advanced Forum Signatures plugin version 2.0.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the afs bar right parameter in the signature.php file of the Advanced Forum Signatures plugin...

CVE-2012-4920

Directory traversal vulnerability in the zingforumoutput function in forum.php in the Zingiri Forum aka Forums plugin before 1.4.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the url parameter to index.php...

Directory traversal

Directory traversal vulnerability in the zingforumoutput function in forum.php in the Zingiri Forum aka Forums plugin before 1.4.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the url parameter to index.php...

CVE-2012-4920

CVE-2012-4920 affects the WordPress Zingiri Forum plugin (Zingiri Forum) prior to 1.4.4. The vulnerability is in the forum.php function zing_forum_output, allowing a crafted url parameter to trigger a directory traversal via .. in index.php, enabling remote attackers to read arbitrary files. Impa...

CVE-2012-4920

Directory traversal vulnerability in the zingforumoutput function in forum.php in the Zingiri Forum aka Forums plugin before 1.4.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the url parameter to index.php...

CVE-2012-4920: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the zingforumoutput function in forum.php in the Zingiri Forum aka Forums plugin before 1.4.4 for WordPress allows remote attackers to read arbitrary files via a .. dot dot in the url parameter to index.php...