Snitz Forums 2000 - Database Disclosure

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== » Note : if the path of...

Phorum 5.2.11 Cross Site Scripting

//----- Advisory Program : Phorum 5.2.11 Homepage : http://www.phorum.org/ Discovery : 2009/07/16 Author Contacted : 2009/07/17 Found by : crashfr at sysdream dot com This Advisory : crashfr at sysdream dot com //----- Application description Started in 1998, Phorum was the original PHP and MySQL...

iDB Detection

This host is running iDB, a free forum software written in PHP and MySQL. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

phorum Detection

This host is running phorum, a PHP and MySQL based Open Source forum software. OpenVAS Vulnerability Test $Id: phorumdetect.nasl 5739 2017-03-27 14:48:05Z cfi $ phorum Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program is free software; you can...

Gravity Board X Detection

This host is running Gravity Board X, a free forum software written in PHP and MySQL. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

CVE-2009-0768

SQL injection vulnerability in forumhop.php in YapBB 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the forumID parameter in a next action...

Novaboard 1.0.1 - Cross-Site Scripting

Novaboard 1.0.1 - Cross-Site Scripting -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= NovaBoard eNYe-Sec - www.enye-sec.org -- About the program by the author's page -- NovaBoard is a free, feature rich community message board software written in PHP & MySQL that allows you to set up your own forum withi...

YapBB <= 1.2 (forumID) Blind SQL Injection Exploit

No description provided by source. --+++======================================================+++-- --+++====== YapBB = 1.2 Blind SQL Injection Exploit ======+++-- --+++======================================================+++-- !/usr/bin/perl use strict; use warnings; use IO::Socket; sub usage d...

YapBB 1.2 - 'forumID' Blind SQL Injection

--+++======================================================+++-- --+++====== YapBB ". "\n? Ex. : perl $0 localhost /YapBB root abcdefghijklmnopqrstuvwxyz". "\n\n"; sub query my $user, $chr, $pos = @; my $query = "123 OR IF ASCIISUBSTRINGSELECT password FROM ". "forumuser WHERE nickname =...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Yazd Forum Software 3.x allow remote attackers to inject arbitrary web script or HTML via the 1 q parameter to a search.jsp, and the 2 msg parameter to b error.jsp and c userAccount.jsp. NOTE: the provenance of this information is unknown; the...

CVE-2008-5172

CVE-2008-5172 describes multiple cross-site scripting (XSS) vulnerabilities in Yazd Forum Software 3.x . The affected components are the web pages and parameters: (1) the query parameter q to search.jsp , and (2) the message parameter msg to error.jsp and userAccount.jsp . The root cause is an in...

CVE-2008-5172

Multiple cross-site scripting XSS vulnerabilities in Yazd Forum Software 3.x allow remote attackers to inject arbitrary web script or HTML via the 1 q parameter to a search.jsp, and the 2 msg parameter to b error.jsp and c userAccount.jsp. NOTE: the provenance of this information is unknown; the...

[waraxe-2008-SA#069] - Multiple Sql Injection in vBulletin 3.7.4

waraxe-2008-SA069 - Multiple Sql Injection in vBulletin 3.7.4 =============================================================================== Author: Janek Vind "waraxe" Date: 17. November 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-69.html Description of vulnerable software:...

CVE-2008-4355

SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum aka PHP Forum or pForum 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Carbon Communities <= 2.4 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= Carbon Communities = 2.4 Multiple Remote Vulnerabilities ========================================================= www.BugReport.ir AmnPardaz Security Research Team Title: Multiple...

Elite Forum Full HTML ENject versin 1.0.0.0

c0ded: St@rExT From : Turkey exploit: titleElite Forum FULL HTML ENjocter-By St@rEXT/title style bodybackground:urlhttp://img523.imageshack.us/img523/7704/turkeyflag0xuhz9zc7uf0.jpg; color:FFFFFF; font-weight:bold; input background-color:darkred; color:FFFFFF; font-weight:bold; /style form...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in forum/include/error/autherror.cfm in FuseTalk Basic, Standard, Enterprise, and ColdFusion allow remote attackers to inject arbitrary web script or HTML via the 1 FTVARLINKP and 2 FTVARURLP parameters to a forum/include/error/autherror.cfm, and...

Update Protection against W-Agora 'inc_dir' Parameter Remote File Inclusion Vulnerabilities

W-Agora is an open source web publishing and forum software. It allows web administrators and their visitors to store and display messages, files, share discussions and other information on the web site. W-Agora is prone to multiple remote file inclusion vulnerabilities. An attacker can exploit...

Invision Power Board 2.1.7 - 'Debug' Remote Password Change

INSERT INTO \w?regantispam \regid,regcode,ipaddress,ctime\ VALUES\'\w32?',\d?,/', $page, $regs $prefix = $regs1; $regid = $regs2; $regcode = $regs3; else $suffix = "&debug=1"; $curl = curlinit$site.'act=Reg&CODE=10'.$suffix; curlsetopt$curl, CURLOPTPROXY, $proxy; curlsetopt$curl,...

YABBSE多个跨站脚本执行漏洞(CSS/XSS)

Yabb Se是一款基于PHP/MySQL的论坛程序。 YaBB SE由于不正确的过滤glow和shadow标记，远程攻击者可以利用这个漏洞进行跨站脚本执行攻击，导致敏感信息泄露。 在glow和shadow标记中加入恶意脚本代码，当浏览者读取包含此链接的页面，无需打开就会导致恶意脚本代码在用户浏览器上执行，可使目标用户敏感信息泄露。 YaBB Simple Machines SMF 1.0 b SE 1.5.1 Gold - SP 1.3 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： frog-m@n提供如下第三方补丁： 使用...