BBSGood Forum program multi-page SQL injection vulnerability-vulnerability warning-the black bar safety net

BBSGOOD is domestic first using the cache technology Forum, BBSGOOD posts and list home can generate a static HTML file. 1. In the file DelShortInFo. asp: selectid=trimRequestCStringSafeRequest"selectid" //the 1 Line 1 If selectid"" then selectid = replaceselectid, ", ", " or ID=" selectid="Where...

BBSGood论坛程序create_index_html.asp页面SQL注入漏洞

BBSGOOD是国内首创使用缓存技术的论坛，BBSGOOD的帖子和列表首页是可以生成静态HTML文件的。 在文件createindexhtml.asp中： sql="select top 1 Admin,UserName,Password from BBSGoodAdmin where UserName='"&Request.Cookiesbbsinfo&"adminuser"&"' " //第127行 程序没有验证用户是否登陆，导致cookies的值没有过滤而产生注入漏洞 BBSGood 5.0/5.0.2 厂商补丁： BBSGood.Speed -------...

forum (topic_detail.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== forum topicdetail.php SQL Injection Vulnerability ==================================================== !===========================================================================! forum/...

DeluxeBB 1.3 newpost. php page SQL injection vulnerability-vulnerability warning-the black bar safety net

DeluxeBB is a PHP-based Forum application. DeluxeBB of newpost. php page does not properly filter user submitted the SQL query parameters: //inserting thread $db-unbufferedquery"INSERT INTO ".$ prefix."threads VALUES NULL, ’$infofid’, ’".$ COOKIE’memberid’."’, ’$subject’, ’$posticon’, ’0’, ’0’,...

DeluxeBB <= 1.3 newpost.php页面SQL注入漏洞

BUGTRAQ ID: 39962 CVE ID: CVE-2010-1859 DeluxeBB是一款基于PHP的论坛程序。 DeluxeBB的newpost.php页面没有正确地过滤用户所提交的SQL查询参数： //inserting thread $db-unbufferedquery"INSERT INTO ".$prefix."threads VALUES NULL, '$infofid', '".$COOKIE'memberid'."', '$subject', '$posticon', '0', '0', '$lock', '$pin', '0',...

TR Forum 1.5 - Multiple Vulnerabilities

TR Forum 1.5 - Multiple Vulnerabilities ======================================================================================== | Title : TR Forum 1.5 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Tested on: windows SP2 Français V.Pnx2...

UBB.threads 6.4.4 forum xss Vulnerability

Exploit for php platform in category web applications ========================================= UBB.threads 6.4.4 forum xss Vulnerability ========================================= ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! Title : UBB.threadsâ„¢ 6.4.4 forum xss Vulnerability ! Author :...

TR Forum 1.5 Multi Vulnerability

Exploit for php platform in category web applications ================================ TR Forum 1.5 Multi Vulnerability ================================ ======================================================================================== | Title : TR Forum 1.5 Mullti Vulnerability | Author :...

TR Forum 1.5 - Multiple Vulnerabilities

======================================================================================== | Title : TR Forum 1.5 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4 Ubuntu | Bug...

TR Forum 1.5 Cross Site Scripting / SQL Injection

======================================================================================== | Title : TR Forum 1.5 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4 Ubuntu | Bug...

Onion CMS (XSS/RFI/URL Redirecting) Multiple Vulnerability

Exploit for php platform in category web applications ========================================================== Onion CMS XSS/RFI/URL Redirecting Multiple Vulnerability ==========================================================...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in SilverStripe before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via 1 the CommenterURL parameter to PostCommentForm, and in the Forum module before 0.2.5 in SilverStripe before 2.3.5 allow remote attackers to inject...

CVE-2010-1593

Multiple cross-site scripting XSS vulnerabilities in SilverStripe before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via 1 the CommenterURL parameter to PostCommentForm, and in the Forum module before 0.2.5 in SilverStripe before 2.3.5 allow remote attackers to inject...

CVE-2010-1593: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in SilverStripe before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via 1 the CommenterURL parameter to PostCommentForm, and in the Forum module before 0.2.5 in SilverStripe before 2.3.5 allow remote attackers to inject...

TR Forum 1.5 insert admin CSRF Vulnerability

Exploit for php platform in category web applications ============================================ TR Forum 1.5 insert admin CSRF Vulnerability ============================================ ======================================================================================== | Title : TR Forum...

CVE-2009-4782

Multiple cross-site scripting XSS vulnerabilities in Theeta CMS, possibly 0.01, allow remote attackers to inject arbitrary web script or HTML via the 1 start, 2 forum, and 3 cat parameters to community/thread.php; 4 start and 5 cat parameters to community/forum.php; and 6 start parameter to...

DBSite w/b CMS Multiple XSS Vulnerability

Exploit for php platform in category web applications ========================================= DBSite w/b CMS Multiple XSS Vulnerability ========================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ ...

Elite Gaming Ladders 3.5 SQL Injection

----------------------------Information------------------------------------------------ +Name : Elite Gaming Ladders = v3.5 SQL injection Vulnerability & Exploit +Autor : Easy Laster +Date : 11.04.2010 +Script : Elite Gaming Ladders = v3.5 +Demo : http://eliteladders.com/demo/ +Download :...

Joomla Papers SQL Injection

Exploit Title: joomla component papers SQL injection Vulnerability Author: bumblebe Software Link: N/A Tested on: Windows XP 2 ====================================================================== x author : bumblebe [email protected] x dork : inurl:option=compapers x myweb :...

vBulletin Cyb - Advanced Forum Statistics Denial Of Service

Exploit Title: vBulletin "Cyb - Advanced Forum Statistics" DOS Date: 10-4-2010 Author: Andhra Hackers Software Link: Version: Web Application Tested on: Apcahe/Unix CVE : if exists Code : PHP crashes existed from a long time back and there were several issues which were a reason for that. 1PHP pa...