7907 matches found
CVE-2008-6544: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in Simple Machines Forum SMF 1.1.4 allow remote attackers to execute arbitrary PHP code via a URL in the 1 settingsdefaultthemedir parameter to Sources/Subs-Graphics.php and 2 settingsdefaultthemedir parameter to Sources/Themes.php. NOTE: CVE and...
X-Forum 0.6.2 - Remote Command Execution
!/usr/bin/perl Web App: X-Forum 0.6.2 Link : http://freefr.dl.sourceforge.net/sourceforge/x-forum/xforum-0.6.2.tar.gz Bug : Auth Bypass via Cookie Handling : There are also other SQL Injections Remote Command Execution Exploit Credits to Giovanni Buzzin, "Osirys" Mail osirysatautisticidotorg It...
6KBBS system to break the back door file-vulnerability warning-the black bar safety net
From:Dream an end Hello, I'm Dream an end. See the September the the hackers Handbook the lone water around the city, my brother wrote that article, the alarm bells ringing-the vigilant hidden in the web site behind the trap of feeling quite a lot. In this crazy Internet era, made a rookie your o...
CVE-2008-6527
SQL injection vulnerability in forum.asp in GO4I.NET ASP Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the iFor parameter...
CVE-2008-6527
CVE-2008-6527 is a SQL injection vulnerability in GO4I.NET ASP Forum 1.0, specifically in forum.asp via the iFor parameter. Remote attackers can execute arbitrary SQL commands; impact includes partial confidentiality, integrity, and availability with network access and no authentication. Public r...
CVE-2008-6527
SQL injection vulnerability in forum.asp in GO4I.NET ASP Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the iFor parameter...
CVE-2008-6527: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in forum.asp in GO4I.NET ASP Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the iFor parameter...
CVE-2008-6507
Unspecified vulnerability in phpBB before 3.0.4 allows attackers to obtain sensitive information via unknown vectors related to the lack of password prompts for a private message that quotes a post in a password-protected forum...
CVE-2008-6507
Unspecified vulnerability in phpBB before 3.0.4 allows attackers to obtain sensitive information via unknown vectors related to the lack of password prompts for a private message that quotes a post in a password-protected forum...
CVE-2008-6507: Undefined Security Weakness
Unspecified vulnerability in phpBB before 3.0.4 allows attackers to obtain sensitive information via unknown vectors related to the lack of password prompts for a private message that quotes a post in a password-protected forum...
deluxeBB Detection
This host is running deluxeBB a widely installed Open Source forum solution. OpenVAS Vulnerability Test $Id: deluxeBBdetect.nasl 5721 2017-03-24 14:42:01Z cfi $ deluxeBB Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program is free software; you can...
deluxeBB Detection
This host is running deluxeBB a widely installed Open Source forum solution. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
[ECHO_ADV_107$2009] FubarForum <= 1.6 Critical File Disclosure Vulnerability
ECHOADV107$2009 ----------------------------------------------------------------------------------------- ECHOADV107$2009 FubarForum = 1.6 Critical File Disclosure Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date : March, ...
FubarForum 1.6 File Disclosure
ECHOADV107$2009 ----------------------------------------------------------------------------------------- ECHOADV107$2009 FubarForum = 1.6 Critical File Disclosure Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date : March, ...
CelerBB多个输入验证和绕过认证漏洞
BUGTRAQ ID: 34014 CVECAN ID: CVE-2009-0851,CVE-2009-0852,CVE-2009-0853 CelerBB是使用PHP编写的开源论坛程序。 在禁用magicquotesgpc的时候,远程攻击者可以通过向CelerBB的login.php模块提交特制的Username参数请求绕过认证获得管理访问。 远程攻击者可以通过向CelerBB的showme.php模块提交特制的user参数请求读取敏感信息。...
phpBB Forum Detection (HTTP)
HTTP based detection of phpBB. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100033";...
CVE-2008-6443
SQL injection vulnerability in forumduzen.php in phpKF allows remote attackers to execute arbitrary SQL commands via the fno parameter...
CVE-2008-6443
SQL injection vulnerability in forumduzen.php in phpKF allows remote attackers to execute arbitrary SQL commands via the fno parameter...
CVE-2009-0768
SQL injection vulnerability in forumhop.php in YapBB 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the forumID parameter in a next action...
NovaBoard <= 1.0.1 (message) Persistent XSS Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= NovaBoard = 1.0.1 / XSS Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: NovaBoard $ Version: = 1.0.1 $ File affected: index.php $ Download: http://www.novaboard.net/ Found by Pepelux pepeluxatenye-sec.org...