7402 matches found
CVE-2006-4206
CVE-2006-4206 describes a Cross-site Scripting (XSS) vulnerability in ASPPlayground.NET Forum Advanced Edition 2.4.5 Unicode, and possibly earlier versions, where the calendar.asp script is vulnerable via the calendarID parameter. Attackers can inject arbitrary web script or HTML that is executed...
ASP backup into a picture of refinement-bug warning-the black bar safety net
For the reader: the script invasion lovers Pre-knowledge: sql injection ASP backup into a picture of refinement Text/figure luckyfeng Pictures and the database backup file into ASP or ASA Trojan is we often use to get WebShell means, however the ASP files back into a map Sheet file, there will al...
[Full-disclosure] TinyPHPForum Multiple Vulnerabilities
TinyPHPForum Multiple Vulnerabilities. http://sourceforge.net/projects/tinyphpforum/ ---------------------------------------------------- TinyPHPForum is a forum based on file handling. And has shown multiple vulnerabilities in several previous releases. Here I present the bugs for the actual...
TinyPHP Forum <= 3.6 (makeadmin) Remote Admin Maker Exploit
Exploit for unknown platform in category web applications =========================================================== TinyPHP Forum By SirDarckCat from elhacker.net Existing User: document.forms0.action=prompt"Path to forum","http://www.server.com/tpf/"+"updatepf.php"; 0day.today 2018-04-12...
TinyPHP Forum <= 3.6 (makeadmin) Remote Admin Maker Exploit
No description provided by source. TinyPHPForum 3.6 Admin Makerbr By SirDarckCat from elhacker.net FORM method=post enctype="multipart/form-data" Existing User:INPUT name=unamebr INPUT type=file name=userfile style="visibility:HIDDEN"br INPUT type=hidden name=email value="[email protected]" input type=hidden...
TinyPHP Forum 3.6 - makeAdmin Remote Admin Maker
TinyPHP Forum 3.6 - makeAdmin Remote Admin Maker TinyPHPForum 3.6 Admin Maker By SirDarckCat from elhacker.net Existing User: document.forms0.action=prompt"Path to forum","http://www.server.com/tpf/"+"updatepf.php"; milw0rm.com 2006-08-02...
[KAPDA::#53] MYBB XSS and Dir Traversal in usercp.php
Vulnerable products : MYBB 1.x Vendor: http://www.mybboard.net Risk: Low Vulnerabilities: MYBB XSS and Dir Traversal in usercp.php Date : -------------------- Found : Feb 22 2006 Vendor Contacted : N/A Release Date : N/A About : -------------------- MyBB is a powerful, efficient and free forum...
CVE-2006-3955
Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 news.php, 2 search.php, or 3 whosOnline.php...
CVE-2006-3955
CVE-2006-3955 affects MiniBB Forum 1.5a. The issue is multiple PHP remote file inclusion vulnerabilities allowing an attacker to execute arbitrary PHP code via a URL in the absolute_path parameter to (1) news.php, (2) search.php, or (3) whosOnline.php. The CVSSv2 base score is 7.5 (HIGH) with net...
CVE-2006-3773
PHP remote file inclusion vulnerability in smf.php in the SMF-Forum 1.3.1.3 Bridge Component comsmf For Joomla! and Mambo 4.5.3+ allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...
MiniBB Forum <= 1.5a Remote File Include Vulnerabilities
--------------------------------------------------------------------------------- MiniBB Forum = 1.5a Remote File Include Vulnerabilities --------------------------------------------------------------------------------- Author : Matdhule Contact : [email protected] Application : MiniBB Forum...
MiniBB Forum <= 1.5a Remote File Include (search.php-whosOnline.php)
Title : MiniBB Forum = 1.5a Remote File Include search.php-whosOnline.php Discovered By :::: AG-Spider & KaBaRa.HaCk .eGy ----------------------------------------------------------------------------- Affected software description : Application : MiniBB Forum 1.5a search.php-whosOnline.phpversion ...
MiniBB Forum <= 1.5a Remote File Include (news.php)
Title : MiniBB Forum = 1.5a Remote File Include news.php Discovered By AG-Spider ----------------------------------------------------------------------------- Affected software description : Application : MiniBB Forum 1.5a news.phpversion : version 1.5 exploit :Remote File Include...
CVE-2006-3773
The CVE-2006-3773 entry describes a PHP remote file inclusion in the SMF-Forum Bridge component (com_smf) used by SMF-Forum 1.3.1.3 for Joomla! and Mambo 4.5.3+. The vulnerability stems from the mosConfig_absolute_path parameter, which can be supplied via a URL to cause arbitrary PHP code executi...
CVE-2006-3773
PHP remote file inclusion vulnerability in smf.php in the SMF-Forum 1.3.1.3 Bridge Component comsmf For Joomla! and Mambo 4.5.3+ allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...
CVE-2006-3690
Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 components/comminibb.php or 2 components/minibb/index.php...
MiniBB-1.5a.txt
--------------------------------------------------------------------------------- MiniBB Forum = 1.5a Remote File Include Vulnerabilities --------------------------------------------------------------------------------- Author : Matdhule Contact : [email protected] Application : MiniBB Forum...
EUVD-2006-3685
Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 components/comminibb.php or 2 components/minibb/index.php...
CVE-2006-3690
CVE-2006-3690 : The provided documents describe multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier. The flaw allows remote attackers to execute arbitrary PHP code by supplying a crafted URL in the absolute_path parameter to (1) components/com_minibb.php or (2) com...
CVE-2006-3690
Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 components/comminibb.php or 2 components/minibb/index.php...