7878 matches found
CVE-2007-6014
SQL injection vulnerability in post.php in Beehive Forum 0.7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the tdedupe parameter...
CVE-2007-6241
Multiple unspecified vulnerabilities in Beehive Forum 0.7.1 have unknown "critical" impact and attack vectors, different issues than CVE-2007-6014...
Sql injection
SQL injection vulnerability in post.php in Beehive Forum 0.7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the tdedupe parameter...
CVE-2007-6014
Beehive Forum 0.7.1 and earlier are affected by a SQL injection in post.php via the t_dedupe parameter. The vulnerability allows remote SQL commands to be executed and impacts Beehive Forum’s data. A patch/update has been released by the vendor (Beehive Forum 0.8), and the referenced recovery gui...
CVE-2007-6241
Beehive Forum 0.7.1 and earlier are affected by a SQL injection vulnerability in the post.php script, exploitable via the t_dedupe parameter to execute arbitrary SQL commands remotely. This is caused by insufficient input filtering in t_dedupe, allowing an attacker to manipulate SQL sent to the d...
CVE-2007-6241
Multiple unspecified vulnerabilities in Beehive Forum 0.7.1 have unknown "critical" impact and attack vectors, different issues than CVE-2007-6014...
CVE-2007-6014
SQL injection vulnerability in post.php in Beehive Forum 0.7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the tdedupe parameter...
CVE-2007-6241: Undefined Security Weakness
Multiple unspecified vulnerabilities in Beehive Forum 0.7.1 have unknown "critical" impact and attack vectors, different issues than CVE-2007-6014...
CVE-2007-6014: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in post.php in Beehive Forum 0.7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the tdedupe parameter...
SYMSA-2007-014: SQL Injection Vulnerability in Beehive Forum Software
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-014 Advisory Title: SQL Injection Vulnerability in Beehive Forum Software Author: Nick Bennett Robert Brown / [email protected] Release...
snitz-sql.txt
WwW.BugReport.IR AmnPardaz Security Research & Penetration Testing Group Title: A user can gain admin level in snitz 2000 by SQL Injection vendor: http://forum.snitz.com/ Googling: "Powered by Snitz" 2,440,000 victims Last bug report in 2007-02-16 with 4692 visitors Exploit: Available Fix...
Snitz Forum < 3.4.0.07 active.asp BuildTime Parameter SQL Injection
Binary data 4306.prm...
Snitz Forums 2000 - Active.asp SQL Injection
Snitz Forums 2000 - Active.asp SQL Injection WwW.BugReport.IR AmnPardaz Security Research & Penetration Testing Group Title: A user can gain admin level in snitz 2000 by SQL Injection vendor: http://forum.snitz.com/ Googling: "Powered by Snitz" 2,440,000 victims Last bug report in 2007-02-16 with...
Snitz Forums 2000 - 'Active.asp' SQL Injection
WwW.BugReport.IR AmnPardaz Security Research & Penetration Testing Group Title: A user can gain admin level in snitz 2000 by SQL Injection vendor: http://forum.snitz.com/ Googling: "Powered by Snitz" 2,440,000 victims Last bug report in 2007-02-16 with 4692 visitors Exploit: Available Fix...
jlmforo-xss.txt
JLMForo System modificarPerfil.php Cross-Site Scripting Vulnerability Download: http://www.miscodigos.com/aplicaciones/JLMForo%20System/ Bug found by Jose Luis Góngora Fernández / JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join...
JLMForo System (modificarPerfil.php) Cross-Site Scripting Vulnerability
JLMForo System modificarPerfil.php Cross-Site Scripting Vulnerability Download: http://www.miscodigos.com/aplicaciones/JLMForo20System/ Bug found by Jose Luis Gуngora Fernбndez / JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join...
pblang499-exec.txt
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg Original Here: http://www.inj3ct-it.org/exploit/pbl.txt...
smf-upload.txt
====================================================================== SMF Forum Exploit every Version ====================================================================== Author: masbloon Status: patch not available yet Works on : By Default, Admin always disable "encrypt filenames option"...
Softbiz Freelancers Script v.1 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Softbiz Freelancers Script V.1 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Dr.Crash &nb...
icebb-database.txt
./includes/functions.php, line 73 $ip = empty$SERVER'HTTPXFORWARDEDFOR' ? $SERVER'REMOTEADDR' : $SERVER'HTTPXFORWARDEDFOR'; $ip = $this-cleankey$ip; $input'ICEBBUSERIP' = $ip; ./icebb.php, line 169 $icebb-clientip = $input'ICEBBUSERIP'; ./admin/index.php, line 112 $icebb-adsess =...