7173 matches found
Vikingboard <= 0.2 Beta (task) Local File Inclusion Vulnerability
No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Vikingboard = 0.2 Beta Local File Inclusion Vulnerability Script: "Vikingboard is a PHP-based...
Simple Machines Forum (SMF) < 1.1.6 Password Reset Vulnerability
Simple Machines Forum SMF is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Vikingboard <= 0.2 Beta (task) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================= Vikingboard = 0.2 Beta task Local File Inclusion Vulnerability ================================================================= :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;...
ajauctionskin1-sql.txt
|| | | ajauction platinum Skin 1 cateid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | WwW.TrYaG.CC | | email: darkangelg85atYahooDoTcom | | | | | | | script : www.ajauctionpro.com | | DorK :...
Vikingboard 0.2 Beta - 'task' Local File Inclusion
:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Vikingboard = 0.2 Beta Local File Inclusion Vulnerability Script: "Vikingboard is a PHP-based discussion forum..." Script site:...
vikingboard-lfi.txt
:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Vikingboard = 0.2 Beta Local File Inclusion Vulnerability Script: "Vikingboard is a PHP-based discussion forum..." Script site:...
Vikingboard 0.2 Beta - task Local File Inclusion
Vikingboard 0.2 Beta - task Local File Inclusion :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl Vikingboard = 0.2 Beta Local File Inclusion Vulnerability Script: "Vikingboard is ...
ADN Forum 1.0b - Insecure Cookie Handling
ADN Forum 1.0b - Insecure Cookie Handling -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- adnforum eNYe-Sec - www.enye-sec.org Cookie is base64 based and the ascii format used is: user:23ed4e45887ad4311ff654bd4aab6540:user:0 user:md5 pass:user:0 Programmer forgot to check the pass and...
ADN Forum 1.0b - Insecure Cookie Handling
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- adnforum eNYe-Sec - www.enye-sec.org Cookie is base64 based and the ascii format used is: user:23ed4e45887ad4311ff654bd4aab6540:user:0 user:md5 pass:user:0 Programmer forgot to check the pass and only use the nick to autenticate the user...
MyBB 1.4.2存在多个安全漏洞
BUGTRAQ ID: 31295 CNCAN ID：CNCAN-2008092311 MyBB是一款基于PHP的论坛程序。 MyBB不正确处理用户提交的输入，远程攻击者可以利用漏洞进行跨站脚本等攻击。 -通过URL传递的输入在返回给用户前缺少过滤，可导致在目标用户浏览器上执行任意HTML和脚本代码。 -文件global.php, announcements.php, admin/inc/classpage.php, inc/functions.php, inc/datahandlers/post.php, inc/classerror.php, polls.php,...
ADN Forum <= 1.0b Insecure Cookie Handling Vulnerability
Exploit for unknown platform in category web applications ======================================================== ADN Forum = 1.0b Insecure Cookie Handling Vulnerability ======================================================== -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- adnforum =...
Invision Power Board 'name'参数SQL注入漏洞
BUGTRAQ ID: 31288 CNCAN ID：CNCAN-2008092307 Invision Power Board是一款基于PHP的论坛程序。 Invision Power Board不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或可操作数据库。 问题是脚本对'name'参数缺少过滤，构建恶意的SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 Invision Power Services Invision Power Board 2.3.5 Invision Power Services Invision Power Boa...
AvailScript Article Script - 'view.php' SQL Injection
|| | | Article Script view.php v Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | WwW.TrYaG.CC | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.availscript.com/articlescript.php | |...
Advanced Electron Forum <= 1.0.6 Remote Code Execution Vulnerability
No description provided by source. GulfTech Security Research September 20, 2008 Vendor : Electron Inc. URL : http://www.anelectron.com/ Version : AEF Forum = 1.0.6 Risk : Remote Code Execution Description: Advanced Electron Forum also known as AEF Forum is a full featured online forum system...
Advanced Electron Forum <= 1.0.6 Remote Code Execution Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Advanced Electron Forum = 1.0.6 Remote Code Execution Vulnerability ==================================================================== GulfTech Security Research...
advancedelectron-exec.txt
GulfTech Security Research September 20, 2008 Vendor : Electron Inc. URL : http://www.anelectron.com/ Version : AEF Forum = 1.0.6 Risk : Remote Code Execution Description: Advanced Electron Forum also known as AEF Forum is a full featured online forum system written in php that allows webmasters...
Advanced Electron Forum 1.0.6 - Remote Code Execution
Advanced Electron Forum 1.0.6 - Remote Code Execution GulfTech Security Research September 20, 2008 Vendor : Electron Inc. URL : http://www.anelectron.com/ Version : AEF Forum = 1.0.6 Risk : Remote Code Execution Description: Advanced Electron Forum also known as AEF Forum is a full featured onli...
Advanced Electron Forum <= 1.0.6 Remote Code Execution
GulfTech Security Research September 20, 2008 Vendor : Electron Inc. URL : http://www.anelectron.com/ Version : AEF Forum = 1.0.6 Risk : Remote Code Execution Description: Advanced Electron Forum also known as AEF Forum is a full featured online forum system written in php that allows webmasters...
carsvehicle-sql.txt
|| | | Cars-Vehicle Script lnkid Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script : http://rfaah.com/index.php?lngge=English.php...
XSS in RSS feed creation
URL http://localhost:8080/dashboard/doconfigurerssfeed.action The RSS feed creation process is vulnerable to XSS attacks. It is possible to inject javascript code into the page by changing the types field to: types="alertdocument.cookie complete example from the testenvironment:...