WordPress Mingle Forum Plugin <= 1.0.31 - SQL Injection

Mingle Forum plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

WordPress Plugin Mingle Forum 1.0.31 - SQL Injection

Exploit Title: WordPress Mingle Forum plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 e.g. curl --data "wpfsecuritycheck=MhWNow%3D%3D&wpfsecuritycode=fail&editpostsubmit=1&message=test&editpostsubject=test&threadid=1&editpostid=-1 AND...

WordPress Plugin Mingle Forum 1.0.31 - SQL Injection

WordPress Plugin Mingle Forum 1.0.31 - SQL Injection Exploit Title: WordPress Mingle Forum plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 e.g. curl --data "wpfsecuritycheck=MhWNow%3D%3D&wpfsecuritycode=fail&editpostsubmit=1&message=test&editpostsubject=test&threadid=1&editpostid=-1 AND...

DZ forum to blast a path summary-vulnerability warning-the black bar safety net

1, The manyou/admincp. php? mysuffix=%0A%0DSlhack 2, the ucenter/control/admin/db.php 3, the ucserver/control/admin/db.php 4, the forum.php/admin.php’/XXXXXXX.php 5, the source/class/classcore.php Excerpt from: Little Dragon blog...

WordPress Mingle Forum plugin <= 1.0.31 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Mingle Forum plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 e.g. curl --data "wpfsecuritycheck=MhWNow%3D%3D&wpfsecuritycode=fail&editpostsubmit=1&message=test&editpostsubject=test&threadid=1&editpostid=-1 AN...

CVE-2011-3700

Advanced Electron Forum AEF 1.0.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by languages/english/deletetopiclang.php...

Information disclosure

Advanced Electron Forum AEF 1.0.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by languages/english/deletetopiclang.php...

CVE-2011-3700

Advanced Electron Forum AEF 1.0.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by languages/english/deletetopiclang.php...

CVE-2011-3700

Vulnerability: CVE-2011-3700 in Advanced Electron Forum (AEF) 1.0.8. Issue: Remote attackers can disclose sensitive information by making a direct request to a PHP file (languages/english/deletetopic_lang.php), causing an error message that reveals the installation path. Impact: Information discl...

PunBB PHP Forum 1.3.5 Cross Site Scripting

======================================================================= PunBB PHP Forum - Multiple XSS ======================================================================= Affected Software : PunBB PHP Forum Severity : Medium Local/Remote : Remote Author : @drk1wi Summary Just for those whom i...

PunBB PHP Forum 1.3.5 Cross Site Scripting

No description provided by source. Affected Software : PunBB PHP Forum Severity : Medium Local/Remote : Remote Author : @drk1wi Summary Just for those whom it might concern. These vulnerabilities have been identified for the latest clean version 1.3.5 during one of my penetration tests...

Simple Machines Forum (SMF) 2.0 Session Hijacking Vulnerability

Simple Machines Forum SMF is prone to session hijacking vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Plugin Forum Server 1.7 - SQL Injection

Exploit Title: WordPress WP Forum Server plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20&editpostsubject=test&message=dummy&threadid=1 e.g. curl --data "editpostsubmit=1&editpostid=-1 AND...

WordPress Plugin Forum Server 1.7 - SQL Injection

WordPress Plugin Forum Server 1.7 - SQL Injection Exploit Title: WordPress WP Forum Server plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20&editpostsubject=test&message=dummy&threadid=1 e.g. curl --data "editpostsubmit=1&editpostid=-1 AND...

WordPress Forum Server Plugin <= 1.7 - SQL Injection

This WordPress Forum Server plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

BitCoin Forum Hacked, Injected With Bill Cosby Images

A hacker compromised a digital currency forum, bitcointalk.org, stealing email addresses and hashed passwords, reading messages, and, of all things, peppering the site with images Bill Cosby, according to a report from SC Magazine. The report claims that the attacker gained root access and starte...

WordPress WP Forum Server plugin <= 1.7 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress WP Forum Server plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20&editpostsubject=test&message=dummy&threadid=1 e.g. curl --data "editpostsubmit=1&editpostid=-1 AND...

Notebooksbilliger Website - Persistent Web Vulnerability

Document Title: =============== Notebooksbilliger Website - Persistent Web Vulnerability Release Date: ============= 2011-09-07 Vulnerability Laboratory ID VL-ID: ==================================== 265 Product & Service Introduction: =============================== Die Firma wurde im Jahr 1989...

WordPress WP Forum Server 1.7 SQL Injection

Exploit Title: WordPress WP Forum Server plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20&editpostsubject=test&message=dummy&threadid=1 e.g. curl --data "editpostsubmit=1&editpostid=-1 AND...

Notebooksbilliger Website - Persistent Web Vulnerability

Document Title: =============== Notebooksbilliger Website - Persistent Web Vulnerability Release Date: ============= 2011-09-07 Vulnerability Laboratory ID VL-ID: ==================================== 265 Product & Service Introduction: =============================== Die Firma wurde im Jahr 1989...