Alpha B Forum Cross Site Scripting

============================================================================== / \ / \ \ \ / / / \ / \ / /\ / /\ \ \ \ / / / /\ / /\ \ / / \ / \ \ \ / / / / \ / \ \ // \ / // \ ============================================================================== » Note : Tribute to the martyrs of...

Espace De Reflexion Cross Site Scripting

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== » Note : Tribute to the martyrs of...

TRIBISUR CMS [xss] Cross Site Scripting Vulnerability

No description provided by source. ============================================================================== » TRIBISUR CMS xss Cross Site Scripting Vulnerability ============================================================================== » Script: Triburom » Language: PHP » Site page: Ce...

South Korea gnuboard Forum vulnerability EXP and method of use-vulnerability warning-the black bar safety net

Excerpt from: the Red section of the network security http://bbs.honkwin.com 1. The machine is set up the PHP environment 2.将EXP程序保存为akt.php 3. CMD is executed under php akt.php 4. Generated akt. txt records in the success URL 5.http://目标URL/data/hardison.php password: akteam with PHP connection...

Hacking tip: provide the right technical study _Discuz! Administrator a copy-and-vulnerability warning-the black bar safety net

Crossday Discuz! Board Forum systemDiscuz! Forumis the one using PHP and MySQL, and other various databases to build efficient forum to resolvethe programme. As a commercial software product, Discuz! In code quality, operational efficiency, load capacity, security level, functional control and...

Todoo Forum 2.0 Cross Site Scripting

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== » Note : Tribute to the martyrs of...

vBulletin adminCP Cross-Site Scripting

No description provided by source. .::vBulletin adminCP Cross-Site Scripting ::. Exploit Title: vBulletin adminCP Cross-Site Scripting Date: 2009 Author: Ashiyane Digital Security Members Cair3x Software Link: http://www.vbulletin.com/ Version: 3.8.4 and all Version Tested on: vBulletin 3.8.4 CVE...

vBulletin adminCP Cross Site Scripting

.::vBulletin adminCP Cross-Site Scripting ::. Exploit Title: vBulletin adminCP Cross-Site Scripting Date: 2009 Author: Ashiyane Digital Security Members Cair3x Software Link: http://www.vbulletin.com/ Version: 3.8.4 and all Version Tested on: vBulletin 3.8.4 CVE : Code : -::Forum Manager = Add Ne...

phpwind 7.5 apps/share/index.php远程包含漏洞

PHPWind 论坛系统 是一套采用 php+mysql 数据库 方式运行并可生成 html 页面的全新且完善的强大系统。因具有非凡的访问速度和卓越的负载能力而深受国内外朋友的喜爱。 Zoomeye Dork apps/share/index.php 里$route和$basePath变量没有初始化,导致远程包含或者本地包含php文件,导致执行任意php代码 ?php if $route == "share" requireonce $basePath . '/action/mshare.php'; elseif $route == "sharelink" requireonce...

MyBB adodb_mktime()日期参数远程拒绝服务漏洞

CVE ID：CVE-2009-4448 MyBB是一款流行的基于PHP的论坛程序。 MyBB inc/functionstime.php文件中包含的adodbmktime函数在处理部分日期值时存在漏洞，攻击者提交包含超大的year参数值的报文就会触发大量循环，导致CPU负载过高造成拒绝服务攻击。 MyBB 1.4.10 用户可参考如下安全公告获得补丁信息： http://dev.mybboard.net/projects/mybb/repository/revisions/4613/diff/branches/1.4-stable/inc/functionstime.php...

MercuryBoard 1.1.5 Cross Site Scripting

======================================================================================== | Title : MercuryBoard v1.1.5 Cross Site Scripting Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Total alerts...

Sql injection

SQL injection vulnerability in the Kunena Forum comkunena component 1.5.3 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the func parameter to index.php...

CVE-2009-4548

Multiple cross-site scripting XSS vulnerabilities in ViArt Helpdesk 3.x allow remote attackers to inject arbitrary web script or HTML via the categoryid parameter to 1 products.php, 2 article.php, 3 productdetails.php, or 4 reviews.php; the 5 forumid parameter to forum.php; or the 6...

CVE-2009-4550

SQL injection vulnerability in the Kunena Forum comkunena component 1.5.3 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the func parameter to index.php...

CVE-2009-4550

SQL injection vulnerability in the Kunena Forum comkunena component 1.5.3 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the func parameter to index.php...

CVE-2009-4550

The vulnerability CVE-2009-4550 affects the Kunena Forum extension for Joomla! (com_kunena) in versions 1.5.3 and 1.5.4. The issue is a SQL injection in index.php via the func parameter, enabling remote attackers to execute arbitrary SQL commands. The exposure is practical given the remote, unaut...

List Web SQL Injection

| | list Web addlink.php id Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | script : http://maker.ir | | DorK : inurl:"ir/addlink.php?id=" or...

Mega ADS Portal SQL Injection

Mega ADS Portal cid Remote SQL Injection Vulnerability ======================================================== Author: Hussin X Home : iq-ty.com/vb email: darkangelg85atYahooDoTcom Vendor : http://www.preprojects.com/ads.asp Exploit:...

PHP-Addressbook 3.1.5 SQL Injection

@ php-addressbook v3.1.5edit.php SQL Injection Vulnerability @ Author: Hussin X @ Home : www.iq-ty.com, @ email: darkangelg85atYahoodotcom @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ script : http://sourceforge.net/project/showfiles.php?groupid=157964 @ DorK : php-addressbook v3.1...

PHP-MySQL-Quiz SQL Injection

PHP-MySQL-Quiz SQL Injection Vulnerability Author: Hussin X Home : www.iq-ty.com email: darkangelg85atYahooDoTcom HomE script : http://www.widgetmonkey.com/ Download : http://www.getfreesofts.com/scriptdownload.php?id=18744&id1=881 DorK : inurl:quizinfo.php Exploit:...