7173 matches found
millionpixel-sql.txt
|| | | Million Pixel Ad Script idcat Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.com | www.tryag.cc | | email: darkangelg85atYahooDoTcom | | | | | | | script...
PHP-Fusion <= 6.00.206 Forum SQL Injection Vulnerability
A vulnerability is reported in the forum module of PHP-Fusion 6.00.206 and some early released versions. SPDX-FileCopyrightText: 2008 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
PHP-Fusion <= 6.00.206 Forum SQL Injection Vulnerability
Description : A vulnerability is reported in the forum module of PHP-Fusion 6.00.206 and some early released versions. When the forum module is activated, a registered user can execute arbitrary SQL injection commands. The failure exists because the application does not properly sanitize...
CVE-2008-3722
SQL injection vulnerability in forum/neu.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via the kat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-3722
SQL injection vulnerability in forum/neu.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via the kat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
vanilla-xss.txt
GulfTech Security Research August 19, 2008 Vendor : Mark O'Sullivan URL : http://www.getvanilla.com/ Version : Vanilla alert document.cookie%3B The above example link would display the end users cookie to them. Of course this can also be used to steal the cookie data as mentioned earlier in this...
Vanilla <= 1.1.4 Script Injection/ XSS
GulfTech Security Research August 19, 2008 Vendor : Mark O'Sullivan URL : http://www.getvanilla.com/ Version : Vanilla = 1.1.4 Risk : Multiple Vulnerabilities Description: Vanilla is an open-source, standards-compliant, multi-lingual, fully extensible web based discussion forum. Unfortunately the...
Unfixed XSS vulnerability at seruv.nethost.co.il
Security researcher BlueMax, has submitted on 08/11/2008 a cross-site-scripting XSS vulnerability affecting seruv.nethost.co.il, which at the time of submission ranked 3043308 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2009. It is...
discuz obtain any administrator password vulnerability-vulnerability warning-the black bar safety net
The author of the article: The Frozen prodigal son Information source: evil octal information security team www.eviloctal.com） Vulnerability description: Discuz Forum system is a set of used php+mysql database running,which found a security vulnerability, successful exploitation of this...
CVE-2008-3555
This CVE (CVE-2008-3555) is a directory traversal/local-file-inclusion flaw in index.php across multiple WSN products (WSN Forum 4.1.43 and earlier; Gallery 4.1.30 and earlier; WSNKB 4.1.36 and earlier; Links 4.1.44 and earlier; possibly Classifieds before 4.1.30). The underlying issue is a vulne...
wsnprod-lfiexec.txt
Author: otmorozok428, http://forum.antichat.ru Products: Wsn Forum Enter to upload: http://www.site.com/forum/profile.php?action=editprofile&id=Your User ID See the avatar name at your profile. Upload evil avatar and go to: index.php?custom=yes&TID=../../attachments/avatars/Avatar...
Discuz! Forum the wap function module coding injection vulnerability-vulnerability warning-the black bar safety net
Author: The Frozen prodigal son Due to the hair in a blog on the vulnerability information to a bit beef up. Official has out patch. Since PHP for multibyte character sets support the existence of problem in various coding conversion process, it is possible to initiate a program overflow and...
WebmasterSite (Multiple Products) - Remote Command Execution
WebmasterSite Multiple Products - Remote Command Execution source: https://www.securityfocus.com/bid/30572/info Multiple WebmasterSite products are prone to a remote shell command-execution vulnerability because the applications fail to sufficiently sanitize user-supplied data. Successfully...
Wsn (Multiple Products) - Local File Inclusion / Code Execution
Author: otmorozok428, http://forum.antichat.ru Products: Wsn Forum Enter to upload: http://www.site.com/forum/profile.php?action=editprofile&id=Your User ID See the avatar name at your profile. Upload evil avatar and go to: index.php?custom=yes&TID=../../attachments/avatars/Avatar...
WebmasterSite (Multiple Products) - Remote Command Execution
source: https://www.securityfocus.com/bid/30572/info Multiple WebmasterSite products are prone to a remote shell command-execution vulnerability because the applications fail to sufficiently sanitize user-supplied data. Successfully exploiting this issue will allow an attacker to execute arbitrar...
phpwind任意修改管理员密码漏洞
PHPWind 论坛系统 是一套采用 php+mysql 数据库 方式运行并可生成 html 页面的全新且完善的强大系统。因具有非凡的访问速度和卓越的负载能力而深受国内外朋友的喜爱。但是80sec在其中发现了一个安全漏洞，成功利用此漏洞可以直接修改管理员的密码进入后台，取得管理员权限。...
Discuz!论坛wap功能模块编码的注射漏洞
Discuz!论坛系统是一个采用 PHP 和 MySQL 等其他多种数据库构建的高效论坛解决方案。Discuz! 在代码质量，运行效率，负载能力，安全等级，功能可操控性和权限严密性等方面都在广大用户中有良好的口碑 由于 PHP 对 多字节字符集的支持存在问题，在各种编码相互转换过程中，有可能引发程序溢出和程序错误 提交一个 ' 转意成 ' 然后转成gbk的，\和'就变成两个字符了 '就可以成功的引入 Discuz!4.0.0 Discuz!4.1.0 Discuz!5.0.0 Discuz!5.5.0 Discuz!6.0.0 Discuz!6.1.0...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Web Wiz Forum 9.5 allows remote attackers to log out a user via a link or IMG tag to logoffuser.asp...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Web Wiz Forum 9.5 allow remote attackers to inject arbitrary web script or HTML via the mode parameter to 1 admingroupdetails.asp and 2 admincategorydetails.asp...
CVE-2008-3391
Multiple cross-site scripting XSS vulnerabilities in Web Wiz Forum 9.5 allow remote attackers to inject arbitrary web script or HTML via the mode parameter to 1 admingroupdetails.asp and 2 admincategorydetails.asp...