e107 0.7.23 - SQL Injection

e107 0.7.23 - SQL Injection Vulnerability ID: HTB22604 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityine1072.html Product: e107 Website System Vendor: e107 http://www.e107.org/ Vulnerable Version: 0.7.23 and Probably Prior Versions Vendor Notification: 13 September 2010...

SQL injection vulnerability in e107

Vulnerability ID: HTB22604 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityine1072.html Product: e107 Website System Vendor: e107 http://www.e107.org/ Vulnerable Version: 0.7.23 and Probably Prior Versions Vendor Notification: 13 September 2010 Vulnerability Type: SQL Injectio...

OvBB V0.16a Forum Reinstall login Vulnerability

Exploit for php platform in category web applications =============================================== OvBB V0.16a Forum Reinstall login Vulnerability =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 ...

OvBB V0.16a Forum Remote SQL Injection Exploit

Exploit for perl platform in category web applications ============================================== OvBB V0.16a Forum Remote SQL Injection Exploit ============================================== !/usr/bin/perl -w OvBB V0.16a Forum Remote SQL Injection Exploit Found & Coded: indoushka Date:...

Joomla Component com_estate blind Sql Injection Vulnerability

Exploit for php platform in category web applications ============================================================= Joomla Component comestate blind Sql Injection Vulnerability ============================================================= Author : Forza-Dz Version : All Versions Homepage :...

Star Forum 3.8 add Admin Exploit

Exploit for asp platform in category web applications ================================ Star Forum 3.8 add Admin Exploit ================================ Exploit Title: Star Forum 3.8 add Admin Exploit Author: BrOx-Dz email: email protected Software Link: http://www.Star4um.net Version: Star Forum...

UseBB Forum and Topic Feed Security Bypass Vulnerability

UseBB is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

UseBB Forum and Topic Feed Security Bypass Vulnerability

UseBB is prone to a security-bypass vulnerability. Remote attackers can exploit this issue to gain access to restricted forum and feed content. Versions prior to UseBB 1.0.11 are vulnerable. OpenVAS Vulnerability Test $Id: gbusebb43292.nasl 5388 2017-02-21 15:13:30Z teissa $ UseBB Forum and Topic...

Opencart 1.4.9.1 - Arbitrary File Upload

========================================== Opencart remote file Upload Vulnerability ========================================== Exploit Title: Opencart remote file uploade Author: Net.Edit0r Email: [email protected] [email protected] Google dork: inurl:Powered By OpenCart Software Link:...

Month Of Abysssec Undisclosed Bugs - Free Discussion Forum

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-14-freediscussionforums-multiple-remote-vulnerabilities/ ''' Abysssec Inc Public Advisory Title : FreeDiscussionForums Multiple Remote...

AlstraSoft AskMe Pro 2.1 SQL Injection

AlstraSoft AskMe Pro profile.php?id SQL Injection Vulnerability Author : CoBRa21 Author Web Page : null I've sold my website ipbul.org Dork : inurl:forumanswer.php?queid Script Page : http://www.alstrasoft.com/ Sql Injection : http://localhost/path/profile.php?id=-5 union select...

动网论坛 (DVBBS) PHP 2.0++ dispbbs.php sql注入漏洞

动网（DVBBS）论坛系统是一个采用PHP和MYSQL的数据架构的高性能网站论坛解决方案。 在文件dispbbs.php中： if $boardsettings55 != 0 && $TopicInfo'locktopic' == 0 && dateDiff'd',$TopicInfo'dateandtime',TIMENOW $boardsettings55 //第85行 $TopicInfo'locktopic' = 1; $setStmt = ',locktopic=1'; $db-query"UPDATE $dvtopic SET hits=CASE WHEN hits IS...

XSS vulnerability in ArtGK CMS forum

Vulnerability ID: HTB22587 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinartgkcms.html Product: ArtGK CMS Vendor: ArtGK http://artgk-cms.ru/ Vulnerable Version: 2009-08-28 16:00:00 and Probably Prior Versions Vendor Notification: 18 August 2010 Vulnerability Type: XSS Cross Site...

Microsoft Windows Movie Maker 2.6.4038.0 DLL Hijacking Exploit

/ Exploit Title: Microsoft Windows Movie Maker define DLLIMPORT declspec dllexport int evil WinExec"calc", 0; exit0; return 0; BOOL WINAPI DllMainHINSTANCE hinstDLL,DWORD fdwReason, LPVOID lpvReserved evil; return 0;...

Simple Forum PHP Cross Site Scripting

Exploit Title: Simple Forum PHP XSS/HTML Injection Vulnerabilities Date: August 25, 2010 Author: arnabs Software Link: http://www.simpleforumphp.com/forum/admin.php?act=topicoptions Price: $24.99 found bug on: http://server/demoguestbook.php?act=new details: you can insert html/javascript codes...

Simple Forum PHP - Multiple Vulnerabilities

Simple Forum PHP - Multiple Vulnerabilities Exploit Title: Simple Forum PHP XSS/HTML Injection Vulnerabilities Date: August 25, 2010 Author: arnabs Software Link: http://www.simpleforumphp.com/forum/admin.php?act=topicoptions Price: $24.99 found bug on: http://server/demoguestbook.php?act=new...

Simple Forum PHP Multiple Vulnerabilities

Exploit for php platform in category web applications ========================================= Simple Forum PHP Multiple Vulnerabilities ========================================= Exploit Title: Simple Forum PHP XSS/HTML Injection Vulnerabilities Date: August 25, 2010 Author: arnabs Software Link...

Simple Forum PHP - Multiple Vulnerabilities

Exploit Title: Simple Forum PHP XSS/HTML Injection Vulnerabilities Date: August 25, 2010 Author: arnabs Software Link: http://www.simpleforumphp.com/forum/admin.php?act=topicoptions Price: $24.99 found bug on: http://server/demoguestbook.php?act=new details: you can insert html/javascript codes...

vbbuletin 4.0.4 - Multiple Vulnerabilities

vbbuletin 4.0.4 - Multiple Vulnerabilities /======================================================================\ || || || Vurnerebility vBulletin - http://www.vbulletin.org || || Local or adserver Javascript,forumdisplay.php" Code Execution || || Version license 4.0.4 || || info set cookies,...

Script Insertion Vulnerabilities in ArtGK CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ArtGK CMS which could be exploited to perform script insertion attacks. 1 Script insertion vulnerabilities in ArtGK CMS 1.1 Input passed to the "content" parameter in cms/classes/CForm.php is not properly sanitiz...