PT-2015-3674

Name of the Vulnerable Software and Affected Versions FluxBB versions prior to 1.4.13 FluxBB versions 1.5.x prior to 1.5.7 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect url parameter in the...

PT-2015-3673

Name of the Vulnerable Software and Affected Versions FluxBB versions prior to 1.4.13 FluxBB versions 1.5.x prior to 1.5.7 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the req new email parameter in the "profile.php" file. Recommendations F...

CVE-2014-10029: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in profile.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to execute arbitrary SQL commands via the reqnewemail parameter...

Local PHP File Inclusion in FluxBB

High-Tech Bridge Security Research Lab discovered vulnerability in FluxBB, which can be exploited to compromise vulnerable system. 1 Local PHP File Inclusion in FluxBB: CVE-2014-9574 The vulnerability exists due to absence of filtration of the "installlang" HTTP GET parameter before including PHP...

FluxBB 1.5.6 SQL Injection Exploit

Exploit for php platform in category web applications !/usr/bin/env python Friday, November 21, 2014 - email protected FluxBB 80: sys.exit'SQL too long, max 80 chars' print "1st stage: %s %d chars" % sql, lensql r = urlopenRequest'%sprofile.php?action=changeemail&id=%s' % url, uid,...

FluxBB 1.5.6 SQL Injection

!/usr/bin/env python Friday, November 21, 2014 - [email protected] FluxBB 80: sys.exit'SQL too long, max 80 chars' print "1st stage: %s %d chars" % sql, lensql r = urlopenRequest'%sprofile.php?action=changeemail&id=%s' % url, uid,...

FluxBB 1.5.6 - SQL Injection

FluxBB 1.5.6 - SQL Injection !/usr/bin/env python Friday, November 21, 2014 - secthrowaway safe-mail net FluxBB 80: sys.exit'SQL too long, max 80 chars' print "1st stage: %s %d chars" % sql, lensql r = urlopenRequest'%sprofile.php?action=changeemail&id=%s' % url, uid,...

FluxBB < 1.5.6 - SQL Injection

!/usr/bin/env python Friday, November 21, 2014 - secthrowaway safe-mail net FluxBB 80: sys.exit'SQL too long, max 80 chars' print "1st stage: %s %d chars" % sql, lensql r = urlopenRequest'%sprofile.php?action=changeemail&id=%s' % url, uid,...

FluxBB 1.5.3 - Multiple Vulnerabilities

No description provided by source. !-- FluxBB 1.5.3 Multiple Remote Vulnerabilities Vendor: FluxBB Product web page: http://www.fluxbb.org Affected version: 1.5.3 Summary: FluxBB is fast, light, user-friendly forum software for your website. Desc: FluxBB suffers from a cross-site scripting,...

fluxbb presence of PHP local file inclusion vulnerability-vulnerability warning-the black bar safety net

2013-09-27: positive contact vendors and wait for manufacturers to claim, details not open to the public 2013-12-26: the vendors have actively ignored vulnerabilities, the details disclosed to the public Brief description: Obviously the local contains Detailed description: File: install.php // If...

fluxbb存在PHP本地文件包含漏洞

简要描述： 很明显的本地包含 详细说明： 文件：install.php // If we've been passed a default language, use it $installlang = isset$REQUEST'installlang' ? puntrim$REQUEST'installlang' : 'English'; // If such a language pack doesn't exist, or isn't up-to-date enough to translate this page, default to English if...

FluxBB 1.5.3 Multiple Remote Vulnerabilities

No description provided by source. !-- FluxBB 1.5.3 Multiple Remote Vulnerabilities Vendor: FluxBB Product web page: http://www.fluxbb.org Affected version: 1.5.3 Summary: FluxBB is fast, light, user-friendly forum software for your website. Desc: FluxBB suffers from a cross-site scripting,...

FluxBB 1.5.3 XSS / CSRF / URL Redirection

...

FluxBB 1.5.3 - Multiple Vulnerabilities

FluxBB 1.5.3 - Multiple Vulnerabilities !-- FluxBB 1.5.3 Multiple Remote Vulnerabilities Vendor: FluxBB Product web page: http://www.fluxbb.org Affected version: 1.5.3 Summary: FluxBB is fast, light, user-friendly forum software for your website. Desc: FluxBB suffers from a cross-site scripting,...

FluxBB 1.5.3 - Multiple Vulnerabilities

Exploit for php platform in category web applications !-- FluxBB 1.5.3 Multiple Remote Vulnerabilities Vendor: FluxBB Product web page: http://www.fluxbb.org Affected version: 1.5.3 Summary: FluxBB is fast, light, user-friendly forum software for your website. Desc: FluxBB suffers from a cross-si...

FluxBB 1.5.3 Multiple Remote Vulnerabilities

Summary FluxBB is fast, light, user-friendly forum software for your website. Description FluxBB suffers from a cross-site scripting, cross-site request forgery and URL redirect vulnerability. The application allows users to perform certain actions via HTTP requests without performing any validit...

FluxBB 1.5.3 - Multiple Vulnerabilities

F...

PT-2013-02: Password Reset Token Prediction in FluxBB

The specialists of Positive Technologies have detected a "Password Reset Token Prediction" vulnerability in FluxBB. The vulnerability was detected in password reset token generation algorithm. FluxBB generates weak random numbers using mtrand function: function randomkey$len, $readable = false,...