Vastal I-Tech - SQL Injection

IN THE NAME OF GOD Vastal I-Tech SQL Injection Vulnerability Author : HELLBOY Tested on Lunix CVE : N/A Email : [email protected] Dork : inurl:"viewgroup.php?groupid=" Exploit : http://site/viewgroup.php?groupid=SQLI EXAM:...

Vastal I-Tech - SQL Injection

Vastal I-Tech - SQL Injection IN THE NAME OF GOD Vastal I-Tech SQL Injection Vulnerability Author : HELLBOY Tested on Lunix CVE : N/A Email : [email protected] Dork : inurl:"viewgroup.php?groupid=" Exploit : http://site/viewgroup.php?groupid=SQLI EXAM:...

CVE-2010-2133: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in contact.php in My Little Forum allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-2942...

Keep Up With Malware Authors Via Twitter

Malware authors are increasingly willing — if not eager — to talk about what they’re working on in a public forum like Twitter. Read the full article. InfoWorld...

Open Forum Server 2.2 b005 Arbitrary File Write

============================================================================================================ //\ /\ /\ /\ /\ /\ ///\ //\ /\ /\///\ // \ // //\ \ / //\ \ / // //\ \ /\\ \ \ \ / / / / // \ \ // // // // \ // //\ \\ \ // /// \ \ / \ / // / // / / / / / \ \ / / / ...

phpBB < 3.0.5 Unspecified Vulnerability

phpBB is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpbb:phpbb"; ifdescription...

TinyBrowser Remote File upload Vulnerability

No description provided by source. TinyBrowser Remote File upload Vulnerability Prodcut: TinyBrowser Home : www.dz4all.com/cc Vunlerability : Remote File upload Risk : High Dork : inurl:"tinybrowser.php?" Discovred by: Ra3cH From : Algeria Contact : [email protected] Exploit:...

OpenForum 2.2 b005 - 'saveAsAttachment()' Method Arbitrary File Creation

source: https://www.securityfocus.com/bid/40364/info OpenForum is prone to a vulnerability that may allow remote attackers to create arbitrary files on a vulnerable system. Successful exploits will allow an attacker to create arbitrary files, which may then be executed to perform unauthorized...

Interactive Forum Script Remote File Inclusion

Tilte: Orca - Interactive Forum Script Remote File Inclusion Vulnerability. Date....................: 20-05-2010 Author..................: Ma3sTr0-Dz Location ...............: Algeria Software ...............: Orca Interactive Forum Script. Site Software ..........:...

CVE-2010-1630

Unspecified vulnerability in posting.php in phpBB before 3.0.5 has unknown impact and attack vectors related to the use of a "forum id" in circumstances related to a "global announcement."...

CVE-2010-1627

feed.php in phpBB 3.0.7 before 3.0.7-PL1 does not properly check permissions for feeds, which allows remote attackers to bypass intended access restrictions via unspecified attack vectors related to permission settings on a private forum...

Forum for Data Fraudsters, Criminals Hacked

Carders.cc, a German online forum dedicated to helping criminals trade and sell financial data stolen through hacking, has itself been hacked. Read the full article. KrebsonSecurity...

CVE-2010-1627: Undefined Security Weakness

feed.php in phpBB 3.0.7 before 3.0.7-PL1 does not properly check permissions for feeds, which allows remote attackers to bypass intended access restrictions via unspecified attack vectors related to permission settings on a private forum...

CVE-2010-1630: Undefined Security Weakness

Unspecified vulnerability in posting.php in phpBB before 3.0.5 has unknown impact and attack vectors related to the use of a "forum id" in circumstances related to a "global announcement."...

BBSMAX Forum program login any user, obtain the user password information vulnerability-vulnerability warning-the black bar safety net

BBSMAX is the domestic development of the earliest is based on the. net technology to build the bbs, in leobbs unrivaled in the world, Microsoft. net just the birth when BBSMAX began development of the then known as nowboard, and after years of development, from personal development to team...

BBSMAX 4.x 论坛程序登陆任意用户，取得用户密码信息漏洞

在文件 register.aspx.cs 中 protected void PageLoadobject sender, EventArgs e string str = string.Empty; str = base.Request.Get"active", Method.Get; if !string.IsNullOrEmptystr if BOBaseUserBO.Instance.ActivingUserstr //激活用户 base.ShowSuccess"恭喜！您的账号" + base.My.Username + "已成功激活。",...

Lokomedia CMS (sukaCMS) Local File Disclosure Vulnerability

Exploit for php platform in category web applications =========================================================== Lokomedia CMS sukaCMS Local File Disclosure Vulnerability =========================================================== Software Link: http://bukulokomedia.com Version: 2.0 Tested on: a...

Open Forum Server 2.2 b005 Directory Traversal

============================================================================================================ //\ /\ /\ /\ /\ /\ ///\ //\ /\ /\///\ // \ // //\ \ / //\ \ / // //\ \ /\\ \ \ \ / / / / // \ \ // // // // \ // //\ \\ \ // /// \ \ / \ / // / // / / / / / \ \ / / / ...

Lokomedia CMS - 'sukaCMS' Local File Disclosure

Software Link: http://bukulokomedia.com Version: 2.0 Tested on: all OS + Title : Local File Disclosure Vulnerability Lokomedia CMS sukaCMS + Vendor : http://bukulokomedia.com + Discovered : vir0e5 a.k.a banditc0de + Contact : vir0e5athackermaildotcom + Site : http://vir0e5.blogspot.com + DorK :...

动网论坛(DVBBS.NET 1.1)prompt.aspx页面存在跨站漏洞

动网论坛做为动网主要服务产品之一，自2001年投入推广并运营以来，得到了国内外广大互联网用户的广泛好评和支持。做为国内第一的互联网论坛服务品牌，占据了国内论坛服务市场的70％以上的用户，动网论坛服务在一些如电影、下载、网游等热门网站的占有率甚至高达80％以上，是中国论坛服务领域事实上的标准。 因为系统程序对用户提交的变量代码未进行有效的过滤或转换，允许攻击者插入恶意的WEB代码。 DVBBS.NET 1.1 厂商补丁： 动网论坛 -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://n.dvbbs.net/...