Lucene search
+L

7325 matches found

exploitpack
exploitpack
•added 2003/03/25 12:00 a.m.•18 views

PHP-Nuke 6.06.5 Forum Module - viewforum.php SQL Injection

PHP-Nuke 6.06.5 Forum Module - viewforum.php SQL Injection source: https://www.securityfocus.com/bid/7194/info It has been reported that an input validation error exists in the 'viewforum.php' script included with PHPNuke as part of the Forum module. Because of this, an attacker could send a...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2003/03/25 12:00 a.m.•31 views

PHP-Nuke 6.0/6.5 Forum Module - 'viewtopic.php' SQL Injection

source: https://www.securityfocus.com/bid/7193/info It has been reported that an input validation error exists in the 'viewtopic.php' script included with PHPNuke as part of the Forum module. Because of this, an attacker could send a malicious string through PHPNuke that would allow the attacker ...

5.8AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2003/03/25 12:00 a.m.•71 views

PHP-Nuke 6.0/6.5 Forum Module - 'viewforum.php' SQL Injection

source: https://www.securityfocus.com/bid/7194/info It has been reported that an input validation error exists in the 'viewforum.php' script included with PHPNuke as part of the Forum module. Because of this, an attacker could send a malicious string through PHPNuke that would allow the attacker ...

5.8AI score
SaveExploits0
CVE
CVE
•added 2003/03/18 5:00 a.m.•49 views

CVE-2002-1459

CVE-2002-1459 is a cross-site scripting vulnerability in L-Forum versions 2.40 and earlier, where the option “Enable HTML in messages” off allows remote insertion of script/HTML via From, E‑Mail, or Subject fields. Root cause: insufficient input validation/escaping in message fields. According to...

7.5CVSS6.6AI score0.0163EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2003/03/18 5:00 a.m.•42 views

CVE-2002-1459

Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is off, allows remote attackers to insert arbitrary script or HTML via message fields including 1 From, 2 E-Mail, and 3 Subject...

6.3AI score0.0163EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2003/03/18 5:00 a.m.•33 views

CVE-2002-1460

L-Forum 2.40 and earlier does not properly verify whether a file was uploaded or if the associated variables were set by POST attachment, attachmentname, attachmentsize and attachmenttype, which allows remote attackers to read arbitrary files...

6.8AI score0.01913EPSS
SaveExploits0References5
CVE
CVE
•added 2003/03/18 5:00 a.m.•55 views

CVE-2002-1458

CVE-2002-1458 is a cross-site scripting vulnerability in L-Forum 2.40 and earlier when the option “Enable HTML in messages” is enabled. The vulnerability allows remote attackers to inject arbitrary script or HTML via message fields such as From, E-Mail, Subject, and Body . The NVD entry assigns a...

7.5CVSS6.6AI score0.0163EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2003/03/18 5:00 a.m.•36 views

CVE-2002-1458

Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the "Enable HTML in messages" option is on, allows remote attackers to insert arbitrary script or HTML via message fields including 1 From, 2 E-Mail, 3 Subject and 4 Body...

6.3AI score0.0163EPSS
SaveExploits0References4
CVE
CVE
•added 2003/03/18 5:00 a.m.•58 views

CVE-2002-1457

CVE-2002-1457 targets L-Forum 2.40. It describes a SQL injection in search.php via the search parameter that could allow remote attackers to execute arbitrary SQL statements. The connected documents confirm the affected software (L-Forum 2.40) and the vulnerable component (search.php) with the un...

7.5CVSS8.6AI score0.01246EPSS
SaveExploits2References3Affected Software1
CVE
CVE
•added 2003/03/18 5:00 a.m.•54 views

CVE-2002-1460

CVE-2002-1460 affects L-Forum 2.40 and earlier. The issue is improper verification of uploaded files and associated POST variables (attachment, attachment_name, attachment_size, attachment_type), enabling remote attackers to read arbitrary files. The connected documents confirm the affected softw...

5CVSS7.2AI score0.01913EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2003/03/18 5:00 a.m.•33 views

CVE-2002-1457

SQL injection vulnerability in search.php for L-Forum 2.40 allows remote attackers to execute arbitrary SQL statements via the search parameter...

8.2AI score0.01246EPSS
SaveExploits2References3
exploitpack
exploitpack
•added 2003/03/12 12:00 a.m.•15 views

PHP-Nuke Splatt Forum 3.2 Module - Full Path Disclosure

PHP-Nuke Splatt Forum 3.2 Module - Full Path Disclosure source: https://www.securityfocus.com/bid/7080/info The Splatt Forum module for PHPNuke has been reported prone to a vulnerability which, when exploited, may disclose sensitive path information to a remote attacker. An attacker could use the...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2003/03/12 12:00 a.m.•29 views

PHP-Nuke Splatt Forum 3.2 Module - Full Path Disclosure

source: https://www.securityfocus.com/bid/7080/info The Splatt Forum module for PHPNuke has been reported prone to a vulnerability which, when exploited, may disclose sensitive path information to a remote attacker. An attacker could use the information gathered in this manner to mount further...

5.8AI score
SaveExploits0
securityvulns
securityvulns
•added 2003/03/11 12:00 a.m.•36 views

Forum Web Server multiple bugs

Crossite scripting, directory traversal on file upload, information leak...

1.8AI score
SaveExploits0References1Affected Software1
securityvulns
securityvulns
•added 2003/03/11 12:00 a.m.•36 views

PHP-Nuke 6.0 & 6.5RC2 SQL Injection Again

Informations : °°°°°°°°°°°°°° Language : PHP Website : http://www.phpnuke.org Version : 6.0 & 6.5 RC2 Modules : Forums, PrivateMessages Problem : SQL Injection PHP Code/Location : °°°°°°°°°°°°°°°°°°° /modules/Forums/viewtopic.php :...

7.8AI score
SaveExploits0
securityvulns
securityvulns
•added 2003/03/11 12:00 a.m.•37 views

[NT] Multiple Vulnerabilities Found in Forum Web Server

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion In the US? Contact Beyond Security at our new California office housewarming rates on automated network vulnerability scanning. We also...

6.3AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2003/03/07 12:00 a.m.•32 views

fws160.txt

Multible vulnerabilities found in Forum Web Server v1.60 http://www.minihttpserver.net Discovered by Dennis Rand www.Infowarfare.dk ------------------------------------------------------------------------ SUMMARY WebForums Server allows you to setup a bulletin board and photo/file xchange web...

7.4AI score
SaveExploits0
securityvulns
securityvulns
•added 2003/02/18 12:00 a.m.•146 views

D-Forum (PHP)

Informations : °°°°°°°°°°°°°° Website : http://www.adalis.fr/adalis.html Versions : 1.00 - 1.11 Problem : Include file PHP Code/Location : °°°°°°°°°°°°°°°°°°° /includes/header.php3 : --------------------------- ?php if $myheader!="" include $myheader; else ? ... --------------------------...

0.5AI score
SaveExploits0
exploitpack
exploitpack
•added 2003/02/18 12:00 a.m.•20 views

D-Forum 1 - header Remote File Inclusion

D-Forum 1 - header Remote File Inclusion source: https://www.securityfocus.com/bid/6879/info D-Forum is prone to an issue which may allow remote attackers to include files located on remote servers. This issue is present in the /includes/header.php3 and /includes/footer.php3 scripts. Under some...

0.3AI score
SaveExploits0
exploitpack
exploitpack
•added 2003/02/18 12:00 a.m.•15 views

D-Forum 1 - footer Remote File Inclusion

D-Forum 1 - footer Remote File Inclusion source: https://www.securityfocus.com/bid/6879/info D-Forum is prone to an issue which may allow remote attackers to include files located on remote servers. This issue is present in the /includes/header.php3 and /includes/footer.php3 scripts. Under some...

0.1AI score
SaveExploits0
Rows per page
Query Builder