Nuke - SQL Injection

=-==-==-==-==-==-==-==T==K==R==D==-==-==-==-==-==-==-==-==-==-==-==-= Nuke Remote SQL Injection Vulnerability =-==-==-==-==-==-==-==T==K==R==D==-==-==-==-==-==-==-==-==-==-==-==-= Found: FormatXFormaT contact: [email protected] Forum: Tkurd.com...

Nuke - SQL Injection

Nuke - SQL Injection =-==-==-==-==-==-==-==T==K==R==D==-==-==-==-==-==-==-==-==-==-==-==-= Nuke Remote SQL Injection Vulnerability =-==-==-==-==-==-==-==T==K==R==D==-==-==-==-==-==-==-==-==-==-==-==-= Found: FormatXFormaT contact: [email protected] Forum: Tkurd.com...

Snitz Forums 2000 Database Disclosure Vulnerability

Exploit for unknown platform in category web applications =================================================== Snitz Forums 2000 Database Disclosure Vulnerability =================================================== ============================================================================== »...

Snitz Forums 2000 - Database Disclosure

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== » Note : if the path of...

WordPress WP-Forum插件多个SQL注入漏洞

BUGTRAQ ID: 37357 CVE ID: CVE-2009-3703 WP-Forum是一款基于PHP的WordPress插件。 WP-Forum的wpf.class.php页面没有正确地过滤用户所提交的forum、topic和searchmax参数，以及在 editpost或viewtopic操作中所提交的id参数，远程攻击者可以通过提交恶意参数请求执行SQL注入攻击。以下是有漏洞的代码段： wpf.class文件 1836 $optionmaxdays = $POST'searchmax'; // - this line is not being sanitized 183...

PHP-Nuke Module Emporium 2.3.0 - 'id_catg' SQL Injection

||| PHP-Nuke Module Emporium 2.3.0 idcatg SQL Injection Vulnerability || Author: Hussin X || Home : WwW.IQ-TY.CoM || email: darkangelg85atYahooDoTcom ||| DorK : inurl:modules.php?name=ShoppingCart ||| more Module's Name: Emporium Module's Version: 2.3.0 Module's Description: eCommerce for PHP-Nuk...

PHP-Nuke Module Emporium 2.3.0 - id_catg SQL Injection

PHP-Nuke Module Emporium 2.3.0 - idcatg SQL Injection ||| PHP-Nuke Module Emporium 2.3.0 idcatg SQL Injection Vulnerability || Author: Hussin X || Home : WwW.IQ-TY.CoM || email: darkangelg85atYahooDoTcom ||| DorK : inurl:modules.php?name=ShoppingCart ||| more Module's Name: Emporium Module's...

Directory traversal

Directory traversal vulnerability in Pforum.php in Rocomotion P forum before 1.28 allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors...

CVE-2009-4383

Directory traversal vulnerability in Pforum.php in Rocomotion P forum before 1.28 allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors...

CVE-2009-4383

Directory traversal vulnerability in Pforum.php in Rocomotion P forum before 1.28 allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors...

CVE-2009-4383

The vulnerability concerns P forum (Rocomotion) before version 1.28, specifically in Pforum.php. It is a directory traversal flaw that could allow a remote attacker to read arbitrary files on the server via directory traversal sequences. The root cause is not explicitly detailed beyond the traver...

SMF (Simple Machine Forum) 1.1.11 XSS Vulnerabilities

No description provided by source. || Script : SMF Simple Machine Forum 1.1.11 || Vulnerability Type : Active XSS Active Cross Site Scripting || Risk : Low || Discovered By Khashayar Fereidani || http://ircrash.com http://bugtraq.ircrash.com || Note : For use this vulnerability you need access to...

CVE-2009-4383: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Pforum.php in Rocomotion P forum before 1.28 allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors...

SMF (Simple Machine Forum) 1.1.11 XSS - Discovered by : Khashayar Fereidani

|| Script : SMF Simple Machine Forum 1.1.11 || Vulnerability Type : Active XSS Active Cross Site Scripting || Risk : Low || Discovered By Khashayar Fereidani || http://ircrash.com http://bugtraq.ircrash.com || Note : For use this vulnerability you need access to censor words panel . 1.First login...

Simple Machines Forum 1.1.11 Cross Site Scripting

|| Script : SMF Simple Machine Forum 1.1.11 || Vulnerability Type : Active XSS Active Cross Site Scripting || Risk : Low || Discovered By Khashayar Fereidani || http://ircrash.com http://bugtraq.ircrash.com || Note : For use this vulnerability you need access to censor words panel . 1.First login...

Sql injection

Multiple SQL injection vulnerabilities in the WP-Forum plugin before 2.4 for WordPress allow remote attackers to execute arbitrary SQL commands via 1 the searchmax parameter in a search action to the default URI, related to wpf.class.php; 2 the forum parameter to an unspecified component, related...

CVE-2009-3703

Multiple SQL injection vulnerabilities in the WP-Forum plugin before 2.4 for WordPress allow remote attackers to execute arbitrary SQL commands via 1 the searchmax parameter in a search action to the default URI, related to wpf.class.php; 2 the forum parameter to an unspecified component, related...

CVE-2009-3703

CVE-2009-3703 concerns the WordPress WP-Forum plugin (

CVE-2009-3703

Multiple SQL injection vulnerabilities in the WP-Forum plugin before 2.4 for WordPress allow remote attackers to execute arbitrary SQL commands via 1 the searchmax parameter in a search action to the default URI, related to wpf.class.php; 2 the forum parameter to an unspecified component, related...

CVE-2009-3703: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the WP-Forum plugin before 2.4 for WordPress allow remote attackers to execute arbitrary SQL commands via 1 the searchmax parameter in a search action to the default URI, related to wpf.class.php; 2 the forum parameter to an unspecified component, related...