CVE-2008-6658

Directory traversal vulnerability in index.php in Simple Machines Forum SMF 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote authenticated administrators to install packages from arbitrary directories via a .. dot dot in the package parameter during an install2 action, as demonstrated by a...

CVE-2008-6657: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in index.php in Simple Machines Forum SMF 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote attackers to hijack the authentication of admins for requests that install packages via the package parameter in an install2 action...

CVE-2008-6658: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Simple Machines Forum SMF 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote authenticated administrators to install packages from arbitrary directories via a .. dot dot in the package parameter during an install2 action, as demonstrated by a...

iDB Detection

This host is running iDB, a free forum software written in PHP and MySQL. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-6659: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Simple Machines Forum SMF 1.0 before 1.0.15 and 1.1 before 1.1.7 allows remote authenticated users to configure arbitrary local files for execution via directory traversal sequences in the value of the themedir field during a jsoption action,...

phorum Detection

This host is running phorum, a PHP and MySQL based Open Source forum software. OpenVAS Vulnerability Test $Id: phorumdetect.nasl 5739 2017-03-27 14:48:05Z cfi $ phorum Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program is free software; you can...

Gravity Board X Detection

This host is running Gravity Board X, a free forum software written in PHP and MySQL. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

De-perimeterization and open standards

From Cnet, by Jon Oltsik The openness and universal connectivity that helped break down the barriers between coporate networks has also turned out to be a security liability. Jon Oltsik, an analyst at Enterprise Strategy Group, writes that there’s now a need for open standards in security Cnet...

TinyPHPForum Detection

This host is running TinyPHPForum, a 130K PHP simple Forum. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TinyPHPForum 3.61 - File Disclosure Code Execution

TinyPHPForum 3.61 - File Disclosure Code Execution =============================================================================================== Found : brainpillow Dork : "Powered by TinyPHPForum v3.61" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Mail : [email protected]...

Discuz! Forum the wap function module coding injection vulnerability-vulnerability warning-the black bar safety net

Information source: evil octal information security team www.eviloctal.com） Author: ainideX Affected version: Discuz! 4.0.0 Discuz! 4.1.0 Discuz! 5.0.0 Discuz! 5.5.0 Discuz! 6.0.0 Discuz! 6.1.0 Description: Discuz! The forum system is a PHP and MySQL such as a variety of other databases to build...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Simple Machines Forum SMF 1.1.4 allow remote attackers to execute arbitrary PHP code via a URL in the 1 settingsdefaultthemedir parameter to Sources/Subs-Graphics.php and 2 settingsdefaultthemedir parameter to Sources/Themes.php. NOTE: CVE and...

CVE-2008-6544

Multiple PHP remote file inclusion vulnerabilities in Simple Machines Forum SMF 1.1.4 allow remote attackers to execute arbitrary PHP code via a URL in the 1 settingsdefaultthemedir parameter to Sources/Subs-Graphics.php and 2 settingsdefaultthemedir parameter to Sources/Themes.php. NOTE: CVE and...

CVE-2008-6544

Multiple PHP remote file inclusion vulnerabilities in Simple Machines Forum SMF 1.1.4 allow remote attackers to execute arbitrary PHP code via a URL in the 1 settingsdefaultthemedir parameter to Sources/Subs-Graphics.php and 2 settingsdefaultthemedir parameter to Sources/Themes.php. NOTE: CVE and...

CVE-2008-6544

Concretely, CVE-2008-6544 affects Simple Machines Forum (SMF) 1.1.4. The vulnerability is described as PHP remote file inclusion via the settings[default_theme_dir] parameter to two endpoints: Sources/Subs-Graphics.php and Sources/Themes.php. The underlying issue involves allowing a URL to influe...

X-Forum 0.6.2 - Remote Command Execution

X-Forum 0.6.2 - Remote Command Execution !/usr/bin/perl Web App: X-Forum 0.6.2 Link : http://freefr.dl.sourceforge.net/sourceforge/x-forum/xforum-0.6.2.tar.gz Bug : Auth Bypass via Cookie Handling : There are also other SQL Injections Remote Command Execution Exploit Credits to Giovanni Buzzin,...

L-Forum 2.4.0 SQL Injection / Command Execution

!/usr/bin/perl Web App: L-Forum 2.4.0 Link : http://l-forum.sourceforge.net/ Bug : SQL INJECTIONS SQL Command Injection Exploit Needs MQ Off Dork: Copyright 2000-2001 Leszek 'Leon' Krupinski Credits to Giovanni Buzzin, "Osirys" Mail: osirysatautisticidotorg...

X-Forum 0.6.2 Authentication Bypass

!/usr/bin/perl Web App: X-Forum 0.6.2 Link : http://freefr.dl.sourceforge.net/sourceforge/x-forum/xforum-0.6.2.tar.gz Bug : Auth Bypass via Cookie Handling : There are also other SQL Injections Remote Command Execution Exploit Credits to Giovanni Buzzin, "Osirys" Mail osirysatautisticidotorg It...

X-Forum 0.6.2 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ============================================== X-Forum 0.6.2 Remote Command Execution Exploit ============================================== !/usr/bin/perl Web App: X-Forum 0.6.2 Link :...

PT-2009-2014 · Simple Machines · Simple Machines Forum

Name of the Vulnerable Software and Affected Versions: Simple Machines Forum SMF version 1.1.4 Description: The issue allows remote attackers to potentially execute arbitrary PHP code. This is achieved via a URL in the settingsdefault theme dir parameter to "Sources/Subs-Graphics.php" and...