Ascad Networks 5 - Products Insecure Cookie Handling

Ascad Networks 5 - Products Insecure Cookie Handling ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

Ascad Networks 5 Products Insecure Cookie Handling Vulnerability

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...

Ascad Networks 5 Products Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ================================================================ Ascad Networks 5 Products Insecure Cookie Handling Vulnerability ================================================================...

Discuz! < 5.50论坛preg_match()函数未初始化$onlineipmatches变量漏洞

Discuz!是一款华人地区非常流行的Web论坛程序。 在Discuz!论坛的include/common.inc.php文件中： $magicquotesgpc = getmagicquotesgpc; @extractdaddslashes$COOKIE; @extractdaddslashes$POST; @extractdaddslashes$GET; //覆盖变量,这里我们可以覆盖$SERVER if!$magicquotesgpc $FILES = daddslashes$FILES; ..... ifgetenv'HTTPCLIENTIP' &&...

CVE-2009-1512

Static code injection vulnerability in X-Forum 0.6.2 allows remote authenticated administrators to inject arbitrary PHP code into Config.php via the adminEMail parameter to SaveConfig.php...

Code injection

Static code injection vulnerability in X-Forum 0.6.2 allows remote authenticated administrators to inject arbitrary PHP code into Config.php via the adminEMail parameter to SaveConfig.php...

CVE-2009-1512

CVE-2009-1512 - Affected: X-Forum 0.6.2. Description: static code injection vulnerability where remote authenticated administrators can inject arbitrary PHP code into Config.php via the adminEMail parameter to SaveConfig.php. Impact: enables code execution under the attacker’s PHP context as auth...

CVE-2009-1512

Static code injection vulnerability in X-Forum 0.6.2 allows remote authenticated administrators to inject arbitrary PHP code into Config.php via the adminEMail parameter to SaveConfig.php...

Sql injection

SQL injection vulnerability in the xforumvalidateUser function in Common.php in X-Forum 0.6.2 allows remote attackers to execute arbitrary SQL commands, as demonstrated via the cookieusername parameter to Configure.php...

CVE-2009-1508

SQL injection vulnerability in the xforumvalidateUser function in Common.php in X-Forum 0.6.2 allows remote attackers to execute arbitrary SQL commands, as demonstrated via the cookieusername parameter to Configure.php...

CVE-2009-1508

CVE-2009-1508 affects X-Forum 0.6.2. The vulnerability is an SQL injection in the function xforum_validateUser in Common.php , allowing remote attackers to execute arbitrary SQL commands via the cookie_username parameter to Configure.php. The NVD entry and related records confirm the issue and im...

CVE-2008-6777

Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a confirm action, the 2 user parameter in a newconfirm action, and 3 reqpwd action to member.php; and the 4 quote parameter in a post action and...

Sql injection

Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a confirm action, the 2 user parameter in a newconfirm action, and 3 reqpwd action to member.php; and the 4 quote parameter in a post action and...

CVE-2008-6777

The vulnerability affects MyPHP Forum 3.0 and earlier (CVE-2008-6777). It includes multiple SQL injection paths: parameters (id) in confirm, (user) in newconfirm, and (reqpwd) in member.php, plus (quote) in post and (pid) in edit actions of post.php. Root cause is unsanitized user input allowing ...

CVE-2008-6777

Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a confirm action, the 2 user parameter in a newconfirm action, and 3 reqpwd action to member.php; and the 4 quote parameter in a post action and...

CVE-2009-1508: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the xforumvalidateUser function in Common.php in X-Forum 0.6.2 allows remote attackers to execute arbitrary SQL commands, as demonstrated via the cookieusername parameter to Configure.php...

CVE-2009-1512: Improper Control of Generation of Code

Static code injection vulnerability in X-Forum 0.6.2 allows remote authenticated administrators to inject arbitrary PHP code into Config.php via the adminEMail parameter to SaveConfig.php...

CVE-2008-6777: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in MyPHP Forum 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a confirm action, the 2 user parameter in a newconfirm action, and 3 reqpwd action to member.php; and the 4 quote parameter in a post action and...

Simple Machines Forum (SMF) <= 1.1.4 SQLi Vulnerability

Simple Machines Forum SMF is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Invision Power Board 3.0.0b5 Active XSS &amp; Path Disclosure Vulns

No description provided by source. ================================================================================ Found : brainpillow Dork : "Powered By IP.Board 3.0.0 Beta 5" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Greetz: slider, halkfild, m0nzt3r, c411k, ettee Mail :...