7170 matches found
уязвимости smf 1.1.2
Simple Machines Forum 1.1.2 http://www.simplemachines.org/ 1 слабая реализация звуковой капчи в этом движке звуковая капча реализуется посредством посылания браузеру звукового фала в формате WAV, файл создается путем склеивания произвольным образом нескольких файлов с разными звуками, и служит...
Simple Machines Forum < 1.1.3 PHPSESSIONID Cookie Session Hijacking
Binary data 4101.prm...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in comments.cgi in Sporum Forum 3.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 view and 2 mode parameters...
CVE-2007-3213
Multiple cross-site scripting XSS vulnerabilities in comments.cgi in Sporum Forum 3.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 view and 2 mode parameters...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in links.php in Beehive Forum 0.7.1 allow remote attackers to inject arbitrary web script or HTML via the 1 viewmode, 2 fid, and 3 sortdir parameters, different vectors than CVE-2005-4460...
CVE-2007-3212
Multiple cross-site scripting XSS vulnerabilities in links.php in Beehive Forum 0.7.1 allow remote attackers to inject arbitrary web script or HTML via the 1 viewmode, 2 fid, and 3 sortdir parameters, different vectors than CVE-2005-4460...
CVE-2007-3213
CVE-2007-3213 concerns the Sporum Forum before or equal to 3.0.9, where) cross-site scripting (XSS) flaws exist in the comments.cgi script. The vulnerability arises from the ability of an attacker to craft requests that inject arbitrary web script or HTML through the parameters “view” and “mode,”...
CVE-2007-3212
CVE-2007-3212 documents multiple XSS vulnerabilities in Beehive Forum 0.7.1, specifically in links.php. The issue arises in the (1) viewmode, (2) fid, and (3) sort_dir parameters, representing vectors distinct from CVE-2005-4460. The vulnerability affects Beehive Forum’s links.php handling and pe...
CVE-2007-3213
Multiple cross-site scripting XSS vulnerabilities in comments.cgi in Sporum Forum 3.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 view and 2 mode parameters...
CVE-2007-3212
Multiple cross-site scripting XSS vulnerabilities in links.php in Beehive Forum 0.7.1 allow remote attackers to inject arbitrary web script or HTML via the 1 viewmode, 2 fid, and 3 sortdir parameters, different vectors than CVE-2005-4460...
Fuzzylime Forum 1.0 (low.php topic) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Fuzzylime Forum 1.0 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code low.php: $gettopicid = mysqlquery"SELECT FROM $tableprefixthreads WHERE...
[Full-disclosure] iDefense Security Advisory 06.12.07: YaBB Forum member.vars CRLF Injection Privilege Escalation Vulnerability
YaBB Forum member.vars CRLF Injection Privilege Escalation Vulnerability iDefense Security Advisory 06.12.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 12, 2007 I. BACKGROUND YaBB Yet another Bulletin Board is an Open Source community forum system written in Perl. More information...
Fuzzylime Forum 1.0 (low.php topic) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================ Fuzzylime Forum 1.0 low.php topic Remote SQL Injection Exploit ================================================================ !/usr/bin/perl -w Fuzzylime Forum 1.0 SQL...
Fuzzylime Forum 1.0 - 'low.php?topic' SQL Injection
!/usr/bin/perl -w Fuzzylime Forum 1.0 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code low.php: $gettopicid = mysqlquery"SELECT FROM $tableprefixthreads WHERE threadid='$GETtopic'"; PoC:...
Sporum Forum XSS vuln.
Sporum Forum XSS vuln. Vuln. discovered by : r0t Date: 12 June 2007 vendor:http://sporum.js-x.com/ affected versions: 3.0.9 and prior orginal advisory: http://pridels-team.blogspot.com/2007/06/sporum-forum-xss-vuln.html Sporum Forum contains a flaw that allows a remote Cross-Site Scripting...
Beehive Forum 0.7.1 - 'links.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/24413/info Beehive Forum is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage any of these issues to execute arbitrary script code in the browser of an...
Beehive Forum 0.7.1 - links.php Multiple Cross-Site Scripting Vulnerabilities
Beehive Forum 0.7.1 - links.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/24413/info Beehive Forum is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may levera...
Use the telnet method export, import, Forum mysql database-vulnerability warning-the black bar safety net
To 1. The method presented here is mainly applicable to VB and other forums. Use the TELNET method can be existing on the server database to export,then import this data to another server,use this method can achieve the Forum in two Server Migration; or the server existing on the forum moved to...
Unfixed XSS vulnerability at www.mjturkiye.net
Security researcher cyber, has submitted on 06/04/2007 a cross-site-scripting XSS vulnerability affecting www.mjturkiye.net, which at the time of submission ranked 17802 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/04/2007. It is currentl...