126 matches found
South Korea gnuboard Forum vulnerability EXP and the use of method-vulnerability warning-the black bar safety net
The machine is set up the PHP environment 2.将EXP程序保存为akt.php 3. CMD is executed under php akt.php 4. Generated akt. txt records in the success URL 5.http://目标URL/data/hardison.php password: akteam with PHP connection EXP: Copy the code ? php echo"...
Cback V3 Forum Cross Site Scripting
oo Cback v3 forum oo Download: http://www.cback.de/downloads.php Price 79 Eur oo Vendor: www.cback.de oo Author: s4r4d0 oo mail: [email protected] oo Bug: Cross site scripting has benn found on viewtopic.php file oo Exploit: http://host/viewtopic.php?t=Xss oo Demo:...
PHP Forum ohne My SQL Remote File Upload Vulnerability
Exploit for unknown platform in category web applications ====================================================== PHP Forum ohne My SQL Remote File Upload Vulnerability ====================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0...
Sql injection
SQL injection vulnerability in mainforum.php in PTCPay GeN3 forum 1.3 allows remote attackers to execute arbitrary SQL commands via the cat parameter...
RunCMS - forum SQL Injection
RunCMS - forum SQL Injection source: https://www.securityfocus.com/bid/36816/info RunCMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
CVE-2009-3436
Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal allow remote attackers to execute arbitrary SQL commands via the 1 FORUMID or 2 CATID parameter. NOTE: this might overlap CVE-2005-1417...
Escon SupportPortal Pro 3.0 (tid) Blind SQL Injection Vulnerability
No description provided by source. Autor : OzX Sitio : Foro.Undersecurity.net Cms : Escon SupportPortal Pro Version : 3.0 Sitio: http://www.e-supportportal.com Tipo Vulnz : Blind Sql Injection Archivo : forum.php Parametro Vulnerable 1 : cat Parametro Vulnerable 2 : tid Source Vulnz forum.php: 60...
CVE-2008-6443
SQL injection vulnerability in forumduzen.php in phpKF allows remote attackers to execute arbitrary SQL commands via the fno parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in the WEC Discussion Forum wecdiscussion extension 1.6.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Unfixed XSS vulnerability at www.labanlieuesexprime.org
Security researcher Mystick, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.labanlieuesexprime.org, which at the time of submission ranked 432828 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2008. It...
CVE-2008-2532
SQL injection vulnerability in forum/topicdetail.php in AJ Square aj-hyip aka AJ HYIP Acme allows remote attackers to execute arbitrary SQL commands via the id parameter...
sCssBoard (pwnpack) Multiple Versions Remote Exploit
No description provided by source. !/usr/bin/ruby inphex - i didnt include all of those bugs into the code,this code basicly checks if the forum is vulnerable and also exploits SQL Injection bug! all versions on sourceforge seem to be the same ;\ so check is beeing done on each version. - scb is...
ibproarcade-sql.txt
!/usr/bin/perl ibProArcade "r57ibProArcade" ; $mw-geometry '420x310' ; $mw-resizable0,0; $mw-Label-text = '!', -font = 'Webdings 22'-pack; $mw-Label-text = 'ibProArcade sql injection exploit by RST/GHC', -font = 'Verdana 7 bold',-foreground='red'-pack; $mw-Label-text = ''-pack;...
ibProArcade <= 3.3.0 Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================= ibProArcade "r57ibProArcade" ; $mw-geometry '420x310' ; $mw-resizable0,0; $mw-Label-text = '!', -font = 'Webdings 22'-pack; $mw-Label-text = 'ibProArcade sql injection exploit by RST/GHC',...
Code injection
Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inject arbitrary PHP code into a certain file in regged/ via the username parameter in a Register action, possibly related to the register function in forumfunctions.php...
CVE-2007-5822
Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inject arbitrary PHP code into a certain file in regged/ via the username parameter in a Register action, possibly related to the register function in forumfunctions.php...
CVE-2007-5823
CVE-2007-5823 affects Ben Ng Scribe 0.2 and earlier. The vulnerability is a directory traversal in forum.php, exploitable via the username parameter in a Register action, allowing remote attackers to create or overwrite arbitrary files by using .. (dot dot). The linked sources (NVD/NVD-processed ...
CVE-2007-0398
Multiple cross-site scripting XSS vulnerabilities in forum.php3 in Arnaud Guyonne aka Arnotic a-forum allow remote attackers to inject arbitrary web script or HTML via the 1 Sujet or 2 Pseudo field...
portixSQL.txt
product:Portix-PHP vendor site :http://portix2.be risk : medium log with : username: 'or''=' passwd : 'or''=' xss post on the forum , vulnerable fields : titre auteur laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected]...