7173 matches found
[ECHO_ADV_107$2009] FubarForum <= 1.6 Critical File Disclosure Vulnerability
ECHOADV107$2009 ----------------------------------------------------------------------------------------- ECHOADV107$2009 FubarForum = 1.6 Critical File Disclosure Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date : March, ...
FubarForum 1.6 File Disclosure
ECHOADV107$2009 ----------------------------------------------------------------------------------------- ECHOADV107$2009 FubarForum = 1.6 Critical File Disclosure Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date : March, ...
CelerBB多个输入验证和绕过认证漏洞
BUGTRAQ ID: 34014 CVECAN ID: CVE-2009-0851,CVE-2009-0852,CVE-2009-0853 CelerBB是使用PHP编写的开源论坛程序。 在禁用magicquotesgpc的时候，远程攻击者可以通过向CelerBB的login.php模块提交特制的Username参数请求绕过认证获得管理访问。 远程攻击者可以通过向CelerBB的showme.php模块提交特制的user参数请求读取敏感信息。...
phpBB Forum Detection (HTTP)
HTTP based detection of phpBB. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100033";...
CVE-2008-6443
SQL injection vulnerability in forumduzen.php in phpKF allows remote attackers to execute arbitrary SQL commands via the fno parameter...
CVE-2008-6443
SQL injection vulnerability in forumduzen.php in phpKF allows remote attackers to execute arbitrary SQL commands via the fno parameter...
CVE-2009-0768
SQL injection vulnerability in forumhop.php in YapBB 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the forumID parameter in a next action...
NovaBoard <= 1.0.1 (message) Persistent XSS Vulnerability
Exploit for unknown platform in category web applications ========================================================= NovaBoard alertdocument.cookie you can also send the user cookie to another site Non-persistent XSS:...
NovaBoard <= 1.0.1 (message) Persistent XSS Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= NovaBoard = 1.0.1 / XSS Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: NovaBoard $ Version: = 1.0.1 $ File affected: index.php $ Download: http://www.novaboard.net/ Found by Pepelux pepeluxatenye-sec.org...
Novaboard 1.0.1 - Cross-Site Scripting
Novaboard 1.0.1 - Cross-Site Scripting -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= NovaBoard eNYe-Sec - www.enye-sec.org -- About the program by the author's page -- NovaBoard is a free, feature rich community message board software written in PHP & MySQL that allows you to set up your own forum withi...
CVE-2008-6323
SQL injection vulnerability in forummessages.cfm in CFMSource CFAuction allows remote attackers to execute arbitrary SQL commands via the categorynbr parameter...
CVE-2008-6323
SQL injection vulnerability in forummessages.cfm in CFMSource CFAuction allows remote attackers to execute arbitrary SQL commands via the categorynbr parameter...
Google launching members-only security forum
internetnews.com’s Kenneth Corbin has the scoop on plans by Google to launch a members-only security forum for businesses, law enforcement, government agencies and others to combat malware and fraud on the Web. In addition to Google, the Internet Security Community will draw participation from...
Moodle Forum 'post.php' Unauthorized Post Deletion CSRF
The 'forum' code in the version of Moodle installed on the remote host is affected by a cross-site request forgery vulnerability due to a failure to properly validate requests before deleting forum posts. If an attacker can trick a Moodle user into clicking on a malicious link, this issue could b...
MyBB (FWS Mod) reflected XSS
MyBB FWS Mod reflected XSS Mod Name: Forum Warning System http://community.mybboard.net/attachment.php?aid=6814 Vulnerable piece of code: //USERCP AND PM CHANGES elseif$file == "usercp.php" || $file == "private.php" iffunctionexists"imagecreatefrompng" && $mybb-user'fwswarnings' != 0...
Graugon Forum v1 (id) SQL Command Injection Exploit
No description provided by source. !/usr/bin/perl |--------------------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...
Graugon Forum 1 SQL Injection
!/usr/bin/perl |--------------------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...
Graugon Forum 1 - id Command Injection SQL Injection
Graugon Forum 1 - id Command Injection SQL Injection !/usr/bin/perl |--------------------------------------------------------------------------------------------------------------------------------------------| | INFORMATIONS |...
Graugon Forum v1 (id) SQL Command Injection Exploit
Exploit for unknown platform in category web applications =================================================== Graugon Forum v1 id SQL Command Injection Exploit =================================================== !/usr/bin/perl...
phpBB 3 - 'autopost bot mod 0.1.3' Remote File Inclusion
phpBB 3 autopost bot mod cachetime = 0; // not used in this mod $rss-itemslimit = $config'lastrssapitemslimit'; // default limit of items to post $rss-type = $config'lastrsstype'; // connection type fopen / curl // init lastRSS autopost MOD ! // check if we have som...