7170 matches found
Tribisur <= 2.0 Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================ Tribisur And now the bugged code :- : So we can exploit it with this simple PoC: forum.php?action=liste&cat=-1+union+select+0,concatpseudo,0x3a,passe,0,0,0,0,0,0,0,0+from+utiliz+where+id=1 Bug 2...
Tribisur 2.0 - SQL Injection
Tribisur 2.0 - SQL Injection !/usr/bin/php -q And now the bugged code :- : So we can exploit it with this simple PoC: forum.php?action=liste&cat=-1+union+select+0,concatpseudo,0x3a,passe,0,0,0,0,0,0,0,0+from+utiliz+where+id=1 Bug 2 in catmain.php : So like the first we can exploit it with:...
Invision Power Board (IP.Board) 2.1.7 - 'ACTIVE' Cross-Site Scripting / SQL Injection
---- INVISION POWER BOARD 2.1.7 EXPLOIT ... ITDefence.ru Antichat.ru INVISION POWER BOARD 2.1.7 ACTIVE XSS/SQL INJECTION Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ / / / / / / / / / / / //\ \ / / / / // / // / /\ / // 2007 ////...
CVE-2007-6657
PHP remote file inclusion vulnerability in source/includes/loadforum.php in Mihalism Multi Forum Host 3.0.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mfhrootpath parameter...
CVE-2007-6667
SQL injection vulnerability in faq.php in MyPHP Forum 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the member.php vector is already covered by CVE-2005-0413...
CVE-2007-6657
PHP remote file inclusion vulnerability in source/includes/loadforum.php in Mihalism Multi Forum Host 3.0.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mfhrootpath parameter...
CVE-2007-6667
SQL injection vulnerability in faq.php in MyPHP Forum 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the member.php vector is already covered by CVE-2005-0413...
Sql injection
SQL injection vulnerability in faq.php in MyPHP Forum 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the member.php vector is already covered by CVE-2005-0413...
Remote file inclusion
PHP remote file inclusion vulnerability in source/includes/loadforum.php in Mihalism Multi Forum Host 3.0.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mfhrootpath parameter...
CVE-2007-6657
Affected product: Mihalism Multi Forum Host 3.0.x and earlier. The vulnerability is a PHP remote file inclusion in load_forum.php triggered by a URL in the mfh_root_path parameter, allowing remote code execution. The CVSS-based assessment in the linked NVD entry indicates a HIGH base score (7.5) ...
CVE-2007-6667
The CVE-2007-6667 entry describes an SQL injection in MyPHP Forum 3.0 and earlier, exploitable via the id parameter in faq.php. The vulnerability allows remote execution of arbitrary SQL commands, with the attack surface limited to the FAQ handling path; the note indicates the member.php vector i...
CVE-2007-6657
PHP remote file inclusion vulnerability in source/includes/loadforum.php in Mihalism Multi Forum Host 3.0.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mfhrootpath parameter...
MyPHP Forum <= 3.0 (Final) Remote SQL Injection Vulnerability
No description provided by source. ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ &...
MyPHP Forum 3.0 - Final SQL Injection
MyPHP Forum 3.0 - Final SQL Injection ================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a Public...
MyPHP Forum 3.0 - 'search.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/27118/info MyPHP Forum is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access o...
MyPHP Forum 3.0 - 'Final' SQL Injection
================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a Public Exploit. Date: 03/01/2008 dd,mm,yyyy...
MyPHP Forum 3.0 - search.php Multiple SQL Injections
MyPHP Forum 3.0 - search.php Multiple SQL Injections source: https://www.securityfocus.com/bid/27118/info MyPHP Forum is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allo...
MyPHP Forum <= 3.0 (Final) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= MyPHP Forum | |||| /| / / ================================================================================================= This is a Public Exploit. Date: 03/01/2008...
myphp30-sql.txt
================================================================================================= / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / ================================================================================================= This is a Public Exploit. Date: 03/01/2008 dd,mm,yyyy...
MyPHP Forum <= 3.0 (Final) Multiple SQL Injection Vulnerabilities
No description provided by source. Name : MyPHP Forum = 3.0 Final Multiple Remote SQL Injection Vulnerability Author : x0kster Email : [email protected] Site : ihteam.net Script Download : http://www.myphp.ws/ Date : 31/12/2007 Dork : "Powered by: MyPHP Forum" Note: For work, magicquotesgpc must ...