advancedelectron-exec.txt

GulfTech Security Research September 20, 2008 Vendor : Electron Inc. URL : http://www.anelectron.com/ Version : AEF Forum = 1.0.6 Risk : Remote Code Execution Description: Advanced Electron Forum also known as AEF Forum is a full featured online forum system written in php that allows webmasters...

Advanced Electron Forum 1.0.6 - Remote Code Execution

Advanced Electron Forum 1.0.6 - Remote Code Execution GulfTech Security Research September 20, 2008 Vendor : Electron Inc. URL : http://www.anelectron.com/ Version : AEF Forum = 1.0.6 Risk : Remote Code Execution Description: Advanced Electron Forum also known as AEF Forum is a full featured onli...

Advanced Electron Forum <= 1.0.6 Remote Code Execution

GulfTech Security Research September 20, 2008 Vendor : Electron Inc. URL : http://www.anelectron.com/ Version : AEF Forum = 1.0.6 Risk : Remote Code Execution Description: Advanced Electron Forum also known as AEF Forum is a full featured online forum system written in php that allows webmasters...

carsvehicle-sql.txt

|| | | Cars-Vehicle Script lnkid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script : http://rfaah.com/index.php?lngge=English.php...

XSS in RSS feed creation

URL http://localhost:8080/dashboard/doconfigurerssfeed.action The RSS feed creation process is vulnerable to XSS attacks. It is possible to inject javascript code into the page by changing the types field to: types="alertdocument.cookie complete example from the testenvironment:...

downline-sql.txt

|| | | Downline Goldmine Builder tr.php id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | WwW.TrYaG.CC | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.downlinegoldmine.com/ | |...

Simple Machines Forum Validation Code Prediction Arbitrary Password Reset

The remote host is running Simple Machines Forum SMF, an open source web forum application written in PHP. The version of Simple Machines Forum installed on the remote host generates validation codes for its password reset functionality with 'rand', which on Windows platforms has a maximum value ...

pforum-sql.txt

===================================================================================================== Powie's PHP Forum = v1.30 showprofil Remote SQL Injection Exploit ===================================================================================================== Critical Level : Dangerous...

CVE-2008-4047

Unspecified vulnerability in Novell Forum formerly SiteScape Forum 7.0, 7.1, 7.2, 7.3, and 8.0 allows remote attackers to execute arbitrary TCL code via a modified URL. NOTE: this might overlap CVE-2007-6515...

Code injection

Unspecified vulnerability in Novell Forum formerly SiteScape Forum 7.0, 7.1, 7.2, 7.3, and 8.0 allows remote attackers to execute arbitrary TCL code via a modified URL. NOTE: this might overlap CVE-2007-6515...

CVE-2008-4047

CVE-2008-4047 affects Novell Forum (SiteScape Forum) versions 7.0–8.0. It enables remote attackers to execute arbitrary TCL code by supplying a modified URL, as described in the CVE entry (note possible overlap with CVE-2007-6515). The provided documents confirm the existence of a TCL injection v...

CVE-2008-4047

Unspecified vulnerability in Novell Forum formerly SiteScape Forum 7.0, 7.1, 7.2, 7.3, and 8.0 allows remote attackers to execute arbitrary TCL code via a modified URL. NOTE: this might overlap CVE-2007-6515...

CVE-2008-3954

SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showcat action...

Sql injection

SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per Post Exchange allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showcat action...

CVE-2008-4047: Improper Control of Generation of Code

Unspecified vulnerability in Novell Forum formerly SiteScape Forum 7.0, 7.1, 7.2, 7.3, and 8.0 allows remote attackers to execute arbitrary TCL code via a modified URL. NOTE: this might overlap CVE-2007-6515...

Alstrasoft Forum (catid) Remote SQL Injection Vulnerability

No description provided by source. . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ \ / / // \ / \ |/| || \\ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -C1c4Tr1Z - beenu...

Alstrasoft Forum (cat) Remote SQL Injection Vulnerability

No description provided by source. . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ \ / / // \ / \ |/| || \\ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 - rsauron - baltazar - sinner01 - C1c4Tr1Z - beenu --- QKrun1x...

Vastal I-Tech Agent Zone (ann_id) SQL Injection Vulnerability

No description provided by source. The Real Estate Script viewann.php SQL Injection Vulnerability Author : DeViL iRaQ Email : guitarlover46atyahoodotcom Price : $399.99 : Script Home Page : http://www.vastal.com/agent-zone-real-estate-script.html Demo : http://www.vastal.com/real/ Dork : N/A...

Simple Machines Forum <= 1.1.5 Admin Reset Password Exploit (win32)

No description provided by source. ?php echo "---------------------------------------------------------------\n"; echo "SMF = 1.1.5 Admin Reset Password Exploit win32-based servers\n"; echo "coded by Raz0r http://Raz0r.name/\n"; echo...

CVE-2008-3954

CVE-2008-3954 describes a SQL injection in the AlstraSoft Forum Pay Per Post Exchange, exploitable via the cat parameter in the showcat action of index.php. The vulnerability allows remote attackers to execute arbitrary SQL commands, as stated in the NVD entry. Affected software is the AlstraSoft...