OpenForum 2.2 b005 - 'saveAsAttachment()' Method Arbitrary File Creation

source: https://www.securityfocus.com/bid/40364/info OpenForum is prone to a vulnerability that may allow remote attackers to create arbitrary files on a vulnerable system. Successful exploits will allow an attacker to create arbitrary files, which may then be executed to perform unauthorized...

Interactive Forum Script Remote File Inclusion

Tilte: Orca - Interactive Forum Script Remote File Inclusion Vulnerability. Date....................: 20-05-2010 Author..................: Ma3sTr0-Dz Location ...............: Algeria Software ...............: Orca Interactive Forum Script. Site Software ..........:...

CVE-2010-1630

Unspecified vulnerability in posting.php in phpBB before 3.0.5 has unknown impact and attack vectors related to the use of a "forum id" in circumstances related to a "global announcement."...

CVE-2010-1627

feed.php in phpBB 3.0.7 before 3.0.7-PL1 does not properly check permissions for feeds, which allows remote attackers to bypass intended access restrictions via unspecified attack vectors related to permission settings on a private forum...

Forum for Data Fraudsters, Criminals Hacked

Carders.cc, a German online forum dedicated to helping criminals trade and sell financial data stolen through hacking, has itself been hacked. Read the full article. KrebsonSecurity...

BBSMAX Forum program login any user, obtain the user password information vulnerability-vulnerability warning-the black bar safety net

BBSMAX is the domestic development of the earliest is based on the. net technology to build the bbs, in leobbs unrivaled in the world, Microsoft. net just the birth when BBSMAX began development of the then known as nowboard, and after years of development, from personal development to team...

BBSMAX 4.x 论坛程序登陆任意用户，取得用户密码信息漏洞

在文件 register.aspx.cs 中 protected void PageLoadobject sender, EventArgs e string str = string.Empty; str = base.Request.Get"active", Method.Get; if !string.IsNullOrEmptystr if BOBaseUserBO.Instance.ActivingUserstr //激活用户 base.ShowSuccess"恭喜！您的账号" + base.My.Username + "已成功激活。",...

Lokomedia CMS (sukaCMS) Local File Disclosure Vulnerability

Exploit for php platform in category web applications =========================================================== Lokomedia CMS sukaCMS Local File Disclosure Vulnerability =========================================================== Software Link: http://bukulokomedia.com Version: 2.0 Tested on: a...

Open Forum Server 2.2 b005 Directory Traversal

============================================================================================================ //\ /\ /\ /\ /\ /\ ///\ //\ /\ /\///\ // \ // //\ \ / //\ \ / // //\ \ /\\ \ \ \ / / / / // \ \ // // // // \ // //\ \\ \ // /// \ \ / \ / // / // / / / / / \ \ / / / ...

Lokomedia CMS - 'sukaCMS' Local File Disclosure

Software Link: http://bukulokomedia.com Version: 2.0 Tested on: all OS + Title : Local File Disclosure Vulnerability Lokomedia CMS sukaCMS + Vendor : http://bukulokomedia.com + Discovered : vir0e5 a.k.a banditc0de + Contact : vir0e5athackermaildotcom + Site : http://vir0e5.blogspot.com + DorK :...

动网论坛(DVBBS.NET 1.1)prompt.aspx页面存在跨站漏洞

动网论坛做为动网主要服务产品之一，自2001年投入推广并运营以来，得到了国内外广大互联网用户的广泛好评和支持。做为国内第一的互联网论坛服务品牌，占据了国内论坛服务市场的70％以上的用户，动网论坛服务在一些如电影、下载、网游等热门网站的占有率甚至高达80％以上，是中国论坛服务领域事实上的标准。 因为系统程序对用户提交的变量代码未进行有效的过滤或转换，允许攻击者插入恶意的WEB代码。 DVBBS.NET 1.1 厂商补丁： 动网论坛 -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://n.dvbbs.net/...

BBSGood Forum program multi-page SQL injection vulnerability-vulnerability warning-the black bar safety net

BBSGOOD is domestic first using the cache technology Forum, BBSGOOD posts and list home can generate a static HTML file. 1. In the file DelShortInFo. asp: selectid=trimRequestCStringSafeRequest"selectid" //the 1 Line 1 If selectid"" then selectid = replaceselectid, ", ", " or ID=" selectid="Where...

BBSGood论坛程序create_index_html.asp页面SQL注入漏洞

BBSGOOD是国内首创使用缓存技术的论坛，BBSGOOD的帖子和列表首页是可以生成静态HTML文件的。 在文件createindexhtml.asp中： sql="select top 1 Admin,UserName,Password from BBSGoodAdmin where UserName='"&Request.Cookiesbbsinfo&"adminuser"&"' " //第127行 程序没有验证用户是否登陆，导致cookies的值没有过滤而产生注入漏洞 BBSGood 5.0/5.0.2 厂商补丁： BBSGood.Speed -------...

forum (topic_detail.php) SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== forum topicdetail.php SQL Injection Vulnerability ==================================================== !===========================================================================! forum/...

DeluxeBB 1.3 newpost. php page SQL injection vulnerability-vulnerability warning-the black bar safety net

DeluxeBB is a PHP-based Forum application. DeluxeBB of newpost. php page does not properly filter user submitted the SQL query parameters: //inserting thread $db-unbufferedquery"INSERT INTO ".$ prefix."threads VALUES NULL, ’$infofid’, ’".$ COOKIE’memberid’."’, ’$subject’, ’$posticon’, ’0’, ’0’,...

DeluxeBB <= 1.3 newpost.php页面SQL注入漏洞

BUGTRAQ ID: 39962 CVE ID: CVE-2010-1859 DeluxeBB是一款基于PHP的论坛程序。 DeluxeBB的newpost.php页面没有正确地过滤用户所提交的SQL查询参数： //inserting thread $db-unbufferedquery"INSERT INTO ".$prefix."threads VALUES NULL, '$infofid', '".$COOKIE'memberid'."', '$subject', '$posticon', '0', '0', '$lock', '$pin', '0',...

TR Forum 1.5 - Multiple Vulnerabilities

TR Forum 1.5 - Multiple Vulnerabilities ======================================================================================== | Title : TR Forum 1.5 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Tested on: windows SP2 Français V.Pnx2...

UBB.threads 6.4.4 forum xss Vulnerability

Exploit for php platform in category web applications ========================================= UBB.threads 6.4.4 forum xss Vulnerability ========================================= ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! Title : UBB.threadsâ„¢ 6.4.4 forum xss Vulnerability ! Author :...

TR Forum 1.5 Multi Vulnerability

Exploit for php platform in category web applications ================================ TR Forum 1.5 Multi Vulnerability ================================ ======================================================================================== | Title : TR Forum 1.5 Mullti Vulnerability | Author :...

TR Forum 1.5 - Multiple Vulnerabilities

======================================================================================== | Title : TR Forum 1.5 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Tested on: windows SP2 Français V.Pnx2 2.0 + Lunix Français v.9.4 Ubuntu | Bug...