7907 matches found
NovaBoard <= 1.0.1 (message) Persistent XSS Vulnerability
Exploit for unknown platform in category web applications ========================================================= NovaBoard alertdocument.cookie you can also send the user cookie to another site Non-persistent XSS:...
Novaboard 1.0.1 - Cross-Site Scripting
Novaboard 1.0.1 - Cross-Site Scripting -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= NovaBoard eNYe-Sec - www.enye-sec.org -- About the program by the author's page -- NovaBoard is a free, feature rich community message board software written in PHP & MySQL that allows you to set up your own forum withi...
CVE-2008-6323
SQL injection vulnerability in forummessages.cfm in CFMSource CFAuction allows remote attackers to execute arbitrary SQL commands via the categorynbr parameter...
CVE-2008-6323
SQL injection vulnerability in forummessages.cfm in CFMSource CFAuction allows remote attackers to execute arbitrary SQL commands via the categorynbr parameter...
Google launching members-only security forum
internetnews.com’s Kenneth Corbin has the scoop on plans by Google to launch a members-only security forum for businesses, law enforcement, government agencies and others to combat malware and fraud on the Web. In addition to Google, the Internet Security Community will draw participation from...
Moodle Forum 'post.php' Unauthorized Post Deletion CSRF
The 'forum' code in the version of Moodle installed on the remote host is affected by a cross-site request forgery vulnerability due to a failure to properly validate requests before deleting forum posts. If an attacker can trick a Moodle user into clicking on a malicious link, this issue could b...
MyBB (FWS Mod) reflected XSS
MyBB FWS Mod reflected XSS Mod Name: Forum Warning System http://community.mybboard.net/attachment.php?aid=6814 Vulnerable piece of code: //USERCP AND PM CHANGES elseif$file == "usercp.php" || $file == "private.php" iffunctionexists"imagecreatefrompng" && $mybb-user'fwswarnings' != 0...
Graugon Forum v1 (id) SQL Command Injection Exploit
No description provided by source. !/usr/bin/perl |--------------------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...
Graugon Forum 1 SQL Injection
!/usr/bin/perl |--------------------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...
Graugon Forum 1 - id Command Injection SQL Injection
Graugon Forum 1 - id Command Injection SQL Injection !/usr/bin/perl |--------------------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...
Graugon Forum v1 (id) SQL Command Injection Exploit
Exploit for unknown platform in category web applications =================================================== Graugon Forum v1 id SQL Command Injection Exploit =================================================== !/usr/bin/perl...
phpBB 3 - 'autopost bot mod 0.1.3' Remote File Inclusion
phpBB 3 autopost bot mod cachetime = 0; // not used in this mod $rss-itemslimit = $config'lastrssapitemslimit'; // default limit of items to post $rss-type = $config'lastrsstype'; // connection type fopen / curl // init lastRSS autopost MOD ! // check if we have som...
Sql injection
Multiple SQL injection vulnerabilities in the WEC Discussion Forum wecdiscussion extension 1.7.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the WEC Discussion Forum wecdiscussion extension 1.7.0 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-3029...
CVE-2008-6144
Multiple cross-site scripting XSS vulnerabilities in the WEC Discussion Forum wecdiscussion extension 1.7.0 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-3029...
CVE-2008-6145
The CVE-2008-6145 entry concerns the TYPO3 WEC Discussion Forum (wec_discussion) extension, version 1.7.0 and earlier. The root cause is multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via unspecified vectors. The impact is remote code-like dat...
CVE-2008-6145
Multiple SQL injection vulnerabilities in the WEC Discussion Forum wecdiscussion extension 1.7.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2008-6144: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in the WEC Discussion Forum wecdiscussion extension 1.7.0 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-3029...
CVE-2008-6145: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in the WEC Discussion Forum wecdiscussion extension 1.7.0 and earlier for TYPO3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors...
Vlinks 1.1.6 (id) Remote SQL Injection Vulnerability
No description provided by source. !x! Informations: Name : vlinks Download : http://www.vlinks.org/ =http://www.vlinks.org/vlinks-v1.1.6.rar Vulnerability : Sql Injection Author : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM/Forum langague arabic Notes : 3arabi Muslim Maghribi...