7175 matches found
IP Board 3.x CSRF - Token hjiacking Vulnerability
Usage Info Latest and propabbly previous IPB verions suffers on vulnerability, which allows attacker to steal CSRF token of specific user. Function, which allows users to share forum links, does not properly sanitize user input. Mentioned token is attached in request as GET parameter, so it's abl...
CVE-2013-6124
The Qualcomm Innovation Center QuIC init scripts in Code Aurora Forum CAF releases of Android 4.1.x through 4.4.x allow local users to modify file metadata via a symlink attack on a file accessed by a 1 chown or 2 chmod command, as demonstrated by changing the permissions of an arbitrary file via...
Code injection
A certain Qualcomm Innovation Center QuIC patch to the NativeDaemonConnector class in services/java/com/android/server/NativeDaemonConnector.java in Code Aurora Forum CAF releases of Android 4.1.x through 4.3.x enables debug logging, which allows attackers to obtain sensitive disk-encryption...
Command injection
The Qualcomm Innovation Center QuIC init scripts in Code Aurora Forum CAF releases of Android 4.1.x through 4.4.x allow local users to modify file metadata via a symlink attack on a file accessed by a 1 chown or 2 chmod command, as demonstrated by changing the permissions of an arbitrary file via...
CVE-2013-6124
The Qualcomm Innovation Center QuIC init scripts in Code Aurora Forum CAF releases of Android 4.1.x through 4.4.x allow local users to modify file metadata via a symlink attack on a file accessed by a 1 chown or 2 chmod command, as demonstrated by changing the permissions of an arbitrary file via...
CVE-2013-2599
A certain Qualcomm Innovation Center QuIC patch to the NativeDaemonConnector class in services/java/com/android/server/NativeDaemonConnector.java in Code Aurora Forum CAF releases of Android 4.1.x through 4.3.x enables debug logging, which allows attackers to obtain sensitive disk-encryption...
MyBB 1.8 Beta 3 - Multiple Vulnerabilities
No description provided by source. Title: MyBB 1.8 Beta 3 - Cross Site Scripting & SQL Injection Google Dork: intext:"Powered By MyBB" Date: 15.08.2014 Author: DemoLisH Vendor Homepage: http://www.mybb.com/ Software Link: http://www.mybb.com/downloads Version: 1.8 - Beta 3 Contact: [email protected]...
DISCUZ EDITPOST file SQL injection vulnerability-vulnerability warning-the black bar safety net
Affected system: Discuz! Discuz! 7. x Discuz! Discuz! 6. x Discuz! Discuz! 5. x Not affected system: Discuz! Discuz! 7. x Description: -------------------------------------------------------------------------------- Discuz! Is with PHP the development of Internet forum software. Discuz! 5. x, 6...
SMF Flood Filter Issue
Exploit Title: SMF Incorrect Flood Filter Headers Date: 21/08/2014 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: Simple Machine Forum http://www.simplemachines.org Tested on: Linux DORK: Try yourself ; !/usr/bin/python...
MyBB 1.8 Beta 3 - Multiple Vulnerabilities
MyBB 1.8 Beta 3 - Multiple Vulnerabilities Title: MyBB 1.8 Beta 3 - Cross Site Scripting & SQL Injection Google Dork: intext:"Powered By MyBB" Date: 15.08.2014 Author: DemoLisH Vendor Homepage: http://www.mybb.com/ Software Link: http://www.mybb.com/downloads Version: 1.8 - Beta 3 Contact:...
MyBB 1.8 Beta 3 - Cross Site Scripting & SQL Injection Vulnerabilities
Exploit for php platform in category web applications Title: MyBB 1.8 Beta 3 - Cross Site Scripting & SQL Injection Google Dork: intext:"Powered By MyBB" Date: 15.08.2014 Author: DemoLisH Vendor Homepage: http://www.mybb.com/ Software Link: http://www.mybb.com/downloads Version: 1.8 - Beta 3...
MyBB 1.8 Beta 3 Cross Site Scripting / SQL Injection
Title: MyBB 1.8 Beta 3 - Cross Site Scripting & SQL Injection Google Dork: intext:"Powered By MyBB" Date: 15.08.2014 Author: DemoLisH Vendor Homepage: http://www.mybb.com/ Software Link: http://www.mybb.com/downloads Version: 1.8 - Beta 3 Contact: [email protected] a Cross Site Scripting in...
MyBB 1.8 Beta 3 - Multiple Vulnerabilities
Title: MyBB 1.8 Beta 3 - Cross Site Scripting & SQL Injection Google Dork: intext:"Powered By MyBB" Date: 15.08.2014 Author: DemoLisH Vendor Homepage: http://www.mybb.com/ Software Link: http://www.mybb.com/downloads Version: 1.8 - Beta 3 Contact: [email protected] a Cross Site Scripting in...
Simple Forum sf-profile.php u Parameter SQL Injection
The simple-forum WordPress plugin was affected by security vulnerability...
Simple Forum - File Upload
The simple-forum WordPress plugin was affected by a File Upload security vulnerability...
wp-forum - SQL Injection
The wp-forum WordPress plugin was affected by a SQL Injection security vulnerability...
Simple Forum 1.10-1.11 - SQL Injection
The sf-forum WordPress plugin was affected by a SQL Injection security vulnerability...
Simple Forum 2.0-2.1 - SQL Injection
The sf-forum WordPress plugin was affected by a SQL Injection security vulnerability...