CVE-2008-1983

CVE-2008-1983 : In Advanced Electron Forum (AEF) 1.0.6, a Cross-site Scripting (XSS) vulnerability exists that allows remote attackers to inject arbitrary web script or HTML via the beg parameter in a members action to index.php. The provided sources state the issue but do not include exploitatio...

MegaBBS Forum 2.2 (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== MegaBBS Forum 2.2 SQL/XSS Multiple Remote Vulnerabilities =========================================================== AmnPardaz Security Research Team Title: MegaBBS Forum Multipl...

MegaBBS Forum 2.2 (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: MegaBBS Forum Multiple Vulnerabilities. Vendor: http://www.pd9soft.com/ Vulnerable Version: 2.2 Exploit: Available Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index.php?/37 1. Descriptio...

SMF 1.1.4 - Audio CAPTCHA Security Bypass

source: https://www.securityfocus.com/bid/28866/info SMF Simple Machine Forum is prone to a security-bypass vulnerability that occurs in the audio CAPTCHA protocol. Successfully exploiting this issue may allow attackers to send unsolicited spam or perform other automated attacks...

SMF 1.1.4 - Audio CAPTCHA Security Bypass

SMF 1.1.4 - Audio CAPTCHA Security Bypass source: https://www.securityfocus.com/bid/28866/info SMF Simple Machine Forum is prone to a security-bypass vulnerability that occurs in the audio CAPTCHA protocol. Successfully exploiting this issue may allow attackers to send unsolicited spam or perform...

Deciphering the Simple Machines Forum audio Captcha

The Simple Machine’s Forum audio Captcha that has been hardened from attack. I have contacted SMF about this flaw and it has been verified. I go into greater detail of how i am able to break this captcha here: http://www.rooksecurity.com/blog/?p=6 Exploit Code:...

Carbon Communities <= 2.4 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= Carbon Communities = 2.4 Multiple Remote Vulnerabilities ========================================================= www.BugReport.ir AmnPardaz Security Research Team Title: Multiple...

irforum-rfi.txt

Istant-Replay Forum Remote File Inclusion Vulnerability AUTHOR: THuGM4N Email : [email protected] Script : Istant-Replay Forum Site : http://www.chattaitaliano.com Vulnerable CODE : /read.php $a = $GET'data'; $b = $GET'post'; $foo = include "$a.txt"; BUT THE EXPLOIT IS LIKE THAT :...

Carbon Communities forum Multiple Vulnerabilities.

www.BugReport.ir AmnPardaz Security Research Team Title: Multiple Vulnerabilities in Carbon Communities forum. Vendor: www.carboncommunities.com Vulnerable Version: 2.4 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: http://bugreport.ir/index.php?/35 1. Description:...

remote file include

Istant-Replay Forum Remote File Inclusion Vulnerability AUTHOR: THuGM4N Email : [email protected] Script : Istant-Replay Forum Site : http://www.chattaitaliano.com Vulnerable CODE : /read.php $a = $GET'data'; $b = $GET'post'; $foo = include "$a.txt"; BUT THE EXPLOIT IS LIKE THAT :...

CVE-2008-1798

Directory traversal vulnerability in forum/kietu/libs/calendrier.php in Dragoon 0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the callng parameter...

CVE-2008-1789

SQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute arbitrary SQL commands via the forum parameter...

Directory traversal

Directory traversal vulnerability in forum/kietu/libs/calendrier.php in Dragoon 0.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the callng parameter...

Sql injection

SQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute arbitrary SQL commands via the forum parameter...

CVE-2008-1789

CVE-2008-1789 affects Prozilla Forum (forum.php) and is caused by an SQL injection vulnerability in the forum parameter. The issue allows remote attackers to execute arbitrary SQL commands, per the description. Connected sources confirm the vulnerability details in Prozilla Forum, but no remediat...

CVE-2008-1789

SQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute arbitrary SQL commands via the forum parameter...

NewsOffice 1.1 Remote File Inclusion Vulnerability

No description provided by source. -========================================== ViVa Islam + YeMeN ====================================- Name : NewsOffice 1.1 Remote File Include Vulnerabilitiy Download From : http://www.newanz.com/applications/NewsOffice/?page=download Found By : RoMaNcYxHaCkEr...

newsoffice-rfi.txt

-========================================== ViVa Islam + YeMeN ====================================- Name : NewsOffice 1.1 Remote File Include Vulnerabilitiy Download From : http://www.newanz.com/applications/NewsOffice/?page=download Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM BlackxHat , BlackBox ,...

prozillafs-sql.txt

--==+================================================================================+==-- --==+ Prozilla Forum Service SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: 7 April 2008...

easynetforum-sql.txt

--==+================================================================================+==-- --==+ Easynet Forum Host SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On: 5 April...