7170 matches found
wpsf20-sql.txt
Simple Forum Version 2.0-2.1sf-forum AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORKS 1 : Simple Forum - Version 2.0 Build 207 Simple Forum - Sürüm 2.1 Build 228 Simple Forum - Version 2.1 Build 236 DORK 2 : allinurl: "sf-forum?forum" example...
WordPress Plugin Simple Forum 1.10 1.11 - SQL Injection
WordPress Plugin Simple Forum 1.10 1.11 - SQL Injection Simple Forum Version 1.10-1.11 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] Simple Forum - Version 1.10 Simple Forum - Version 1.10 - 2.1.3 Simple Forum - Version 1.11...
WordPress Plugin Simple Forum 2.0 2.1 - SQL Injection
WordPress Plugin Simple Forum 2.0 2.1 - SQL Injection Simple Forum Version 2.0-2.1sf-forum AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORKS 1 : Simple Forum - Version 2.0 Build 207 Simple Forum - Sürüm 2.1 Build 228 Simple Forum - Version...
wpsf17-sql.txt
Simple Forum Version 1.7-1.9pagename AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: "index.php?pagename"forum DORK 2 : Simple Forum - Version 1.7 Simple Forum - Version 1.9 EXPLOIT :...
WordPress Plugin Simple Forum 1.10 < 1.11 - SQL Injection
Simple Forum Version 1.10-1.11 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] Simple Forum - Version 1.10 Simple Forum - Version 1.10 - 2.1.3 Simple Forum - Version 1.11 EXPLAÄ°N= sametimes password and username in error massege fo...
Cross site scripting
Cross-site scripting XSS vulnerability in sboxDB.php in Simple Machines Forum SMF Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shoutbox form that start with "&", contain the desired script, and end with ";"...
CVE-2008-0775
Cross-site scripting XSS vulnerability in sboxDB.php in Simple Machines Forum SMF Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shoutbox form that start with "&", contain the desired script, and end with ";"...
CVE-2008-0775
CVE-2008-0775 describes an XSS vulnerability in the SMF Shoutbox (versions 1.14–1.16b) where input to the shoutbox form that begins with "&#" and ends with ";" can inject arbitrary script/HTML. The root cause is insufficient input sanitization in sboxDB.php, allowing remote attackers to execute s...
CVE-2008-0775
Cross-site scripting XSS vulnerability in sboxDB.php in Simple Machines Forum SMF Shoutbox 1.14 through 1.16b allows remote attackers to inject arbitrary web script or HTML via strings to the shoutbox form that start with "&", contain the desired script, and end with ";"...
Simple Machines Forum "SMF Shoutbox" Mod Persistent XSS
Simple Machines Forum "SMF Shoutbox" Mod 1.16b-1.14 Reference: http://custom.simplemachines.org/mods/index.php?mod=412 Bug:Persistent XSS SMF Shoutbox is a popular shoutbox mod for Simple Machines Forum.The content of a post variable used to hold the user shout is stored in the database and then...
my little forum XSS
my little forum Cross-site scripting ----------------------------------------------------------- Product: my little forum Version: 2.0 beta 23, 1.75 Vendor: http://mylittleforum.net/ Date: 02/11/08 - Introduction "my little forum is a simple PHP and MySQL based web-forum that displays the message...
mlf-xss.txt
my little forum Cross-site scripting ----------------------------------------------------------- Product: my little forum Version: 2.0 beta 23, 1.75 Vendor: http://mylittleforum.net/ Date: 02/11/08 - Introduction "my little forum is a simple PHP and MySQL based web-forum that displays the message...
smfsb-xss.txt
Simple Machines Forum "SMF Shoutbox" Mod 1.16b-1.14 Reference: http://custom.simplemachines.org/mods/index.php?mod=412 Bug:Persistent XSS SMF Shoutbox is a popular shoutbox mod for Simple Machines Forum.The content of a post variable used to hold the user shout is stored in the database and then...
Debian DSA-1488-1 : phpbb2 - several vulnerabilities
Several remote vulnerabilities have been discovered in phpBB, a web-based bulletin board. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-0471 Private messaging allowed cross site request forgery, making it possible to delete all private messages of...
Blackboard (id) Remote SQL Injection
Bulan: Cr@zyKing Thanks : CrackersChild & Eno7 & Pablin77 & Sys7ech & Brond Crew & X-Tech .Inc & TheBekir AYYILDIZ SWAT TIM : Hoo0? Google Dork : "inurl:philboardforum.asp" ---------------------------------------------------- Exploit: philboardforum.asp?forumid=SQL...
Directory traversal
Directory traversal vulnerability in thumbnail.php in Gerd Tentler Simple Forum 3.2 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...
CVE-2008-0541
Multiple cross-site scripting XSS vulnerabilities in forum.php in Gerd Tentler Simple Forum 3.2 allow remote attackers to inject arbitrary web script or HTML via the 1 open and 2 dateshow parameters...
CVE-2008-0542
Directory traversal vulnerability in thumbnail.php in Gerd Tentler Simple Forum 3.2 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...
CVE-2008-0542
The CVE-2008-0542 entry concerns a directory traversal vulnerability in thumbnail.php of Gerd Tentler Simple Forum 3.2. The underlying issue is path traversal via a .. in the file parameter, allowing remote attackers to read arbitrary files. Affected software is Simple Forum 3.2; the exact root c...
CVE-2008-0541
CVE-2008-0541 affects Gerd Tentler Simple Forum 3.2. The vulnerability is a cross-site scripting (XSS) in forum.php, exploitable via the open and date_show parameters. Remote attackers can inject arbitrary scripts/HTML, leading to potential session or credential compromise on affected installatio...