phpKF Forum 1.80 Cross Site Request Forgery

Exploit Title : phpKF Forum profildegistir.php CSRF Exploit. Google Dork : php Kolay Forum phpKF © 2007 - 2010 phpKF Ekibi Date : 05-12-2010 Author : FreWaL Software Link : http://www.phpkf.com/dosya.php?no=935 Version : 1.80 and tested on All version My Website : www.imhatimi.org & www.ihtilal.i...

PHPKF Forum 1.80 - profil_degistir.php Cross-Site Request Forgery

PHPKF Forum 1.80 - profildegistir.php Cross-Site Request Forgery Exploit Title : phpKF Forum profildegistir.php CSRF Exploit. Google Dork : php Kolay Forum phpKF © 2007 - 2010 phpKF Ekibi Date : 05-12-2010 Author : FreWaL Software Link : http://www.phpkf.com/dosya.php?no=935 Version : 1.80 and...

PHPKF Forum 1.80 - 'profil_degistir.php' Cross-Site Request Forgery

Exploit Title : phpKF Forum profildegistir.php CSRF Exploit. Google Dork : php Kolay Forum phpKF © 2007 - 2010 phpKF Ekibi Date : 05-12-2010 Author : FreWaL Software Link : http://www.phpkf.com/dosya.php?no=935 Version : 1.80 and tested on All version My Website : www.imhatimi.org & www.ihtilal.i...

Duhok Forum <= 1.1 Remote File Upload Vulnerability

Exploit for php platform in category web applications =================================================== Duhok Forum = 1.1 Remote File Upload Vulnerability =================================================== Exploit Title: Duhok Forum Remot upload Shell Vulnerability Date: 30-11-2010 Author:...

Duhok Forum 1.1 Remote Shell Upload

============================================== Duhok Forum Remot upload Vulnerability ============================================== Exploit Title: Duhok Forum Remot upload Shell Vulnerability Date: 30-11-2010 Author: BrOx-Dz email : [email protected] Software Link: http://www.duhoktimes.com/df/...

Duhok Forum 1.1 - Arbitrary File Upload

Duhok Forum 1.1 - Arbitrary File Upload ============================================== Duhok Forum Remot upload Vulnerability ============================================== Exploit Title: Duhok Forum Remot upload Shell Vulnerability Date: 30-11-2010 Author: BrOx-Dz email : [email protected] Softwar...

Duhok Forum 1.1 - Arbitrary File Upload

============================================== Duhok Forum Remot upload Vulnerability ============================================== Exploit Title: Duhok Forum Remot upload Shell Vulnerability Date: 30-11-2010 Author: BrOx-Dz email : [email protected] Software Link: http://www.duhoktimes.com/df/...

Проект WH+WHB закрыт

http://forum.web-hack.ru/ Цитата: Проект WH+WHB закрыт Всем привет! 21 ноября форуму WHB исполнилось 8 лет, а у сайта давно пошел уже девятый год. Это достаточно большой срок для проекта в Рунете, особенно данной тематики. В связи с ДР я и выбрал такую дату - дату для закрытия проекта в целом. За...

Chameleon Social Networking Software Persistent XSS Vulnerability

Exploit for php platform in category web applications ================================================================= Chameleon Social Networking Software Persistent XSS Vulnerability ================================================================= Exploit Title: AbleDating script 2010 Critica...

AbleDating Script 2010 Cross Site Scripting

Exploit Title: AbleDating script 2010 Critical XSS Vulnerability Date: 15.11.2010 Author: Dr-mosta Category: webapps/0day Script url: http://www.abk-soft.com/matchmakingsoftwaredemo.html Version: N/A Tested on: CVE : EXPL0!T IL vaut faut inscrire au site apres aller a la partie forum ou par le li...

Chameleon Social Networking Software - Persistent Cross-Site Scripting

Chameleon Social Networking Software - Persistent Cross-Site Scripting Exploit Title: AbleDating script 2010 Critical XSS Vulnerability Date: 15.11.2010 Author: Dr-mosta Category: webapps/0day Script url: http://www.abk-soft.com/matchmakingsoftwaredemo.html Version: N/A Tested on: CVE : EXPL0!T I...

Seo Panel 2.1.0 - Critical File Disclosure

Seo Panel - Critical File Disclosure Versions Affected: 2.1.0 previous versions were not checked. Info: A complete open source seo control panel for managing search engine optimization of your websites. Seo Panel is a seo tool kit includes latest hot seo tools to increase and track the performace...

Yuvraj Singh's forum was hacked by "Kashmiri Exploits Worms"

Yuvraj Singh's forum was hacked by "Kashmiri Exploits Worms". Indishell is thinking that its hacked by "DJ Haxor". Here is the proof of hacking.... Domain: Zone-H - https://zone-h.com/mirror/id/11899291 Shell Uploaded in Yuvraj Singh's site - Found this article interesting? Follow us on Twitter ...

CVE-2010-3713

CVE-2010-3713 affects UseBB up to version 1.0.10. RSS feeds (rss.php) do not correctly honor read vs. view permissions: a user with view permission but lacking read permission can bypass access restrictions by reading a forum feed together with a topic feed. This exposes restricted forum content ...

CVE-2010-3713

rss.php in UseBB before 1.0.11 does not properly handle forum configurations in which a user has the view permission but not the read permission, which allows remote attackers to bypass intended access restrictions by reading a forum feed in combination with a topic feed...

PHP Auction Forum Remote File Inclusion

===================================================== PHP AUCTION FORUM prefix Remote File Include Exploit ===================================================== =========================================================================== Archive : PHP AUCTION FORUM prefix Remote File Include Explo...

动 网 PHP 论坛 indivgroup_dispbbs.php sql injection vulnerability-vulnerability warning-the black bar safety net

Dynamic network DVBBS Forum system is a PHP and MYSQL data architecture, high-performance web forum solutions. In the file indivgroupdispbbs. php: if$groupboardid == 0 //8th line 6 ...... else //the 9 2 row $query=$db-query"select id boardid,rootid,boardname...

Chipmunk Board 1.3 (index.php?forumID) SQL Injection

Exploit for php platform in category web applications ==================================================== Chipmunk Board 1.3 index.php?forumID SQL Injection ==================================================== Exploit Title: Chipmunk Board index.php?forumID Remote SQL Injection Vulnerability Dat...

e107 0.7.23 Forum插件SQL注入漏洞

BUGTRAQ ID: 43511 e107是用php编写的内容管理系统。 e107没有正确地过滤提交给forumadmin.php脚本的GET请求便在SQL查询中使用，远程攻击者可以通过提交恶意查询请求执行SQL注入攻击。成功利用这个漏洞要求启用了Forum插件。 e107 website system 0.7.23 厂商补丁： e107.org -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://e107.org/...

e107 0.7.23 - SQL Injection

Vulnerability ID: HTB22604 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityine1072.html Product: e107 Website System Vendor: e107 http://www.e107.org/ Vulnerable Version: 0.7.23 and Probably Prior Versions Vendor Notification: 13 September 2010 Vulnerability Type: SQL Injectio...