CVE-2007-2942

SQL injection vulnerability in user.php in My Little Forum 1.7 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-2942

CVE-2007-2942 : A SQL injection vulnerability exists in the file user.php of My Little Forum 1.7 and earlier . The issue allows remote attackers to execute arbitrary SQL commands via the id parameter. The connected documents confirm the affected software and the attack vector, but do not provide ...

vBulletin vBGSiteMap 2.41 (root) Remote File Inclusion Vulnerabilities

No description provided by source. ============================================= vBulletin Google Site Map Creator base Remote File Include Vulnerability ============================================= Found by : Host4vb.com & Cold z3ro Contact : [email protected] , [email protected] Homepage :...

NavBoard 2.6.0 - Remote Code Execution

"; print ""; print ""; print "Main forum settings"; print ""; print "Board Title"; print ""; print ""; print ""; print "Admin email address blank will not display"; print ""; print "input type=text name="adminemail" value="$configarr...

Hacking techniques: Flash Trojans is how to practice into-vulnerability warning-the black bar safety net

On the site watch the Flash animation, received a“friend”sent to a Flash greeting card, even a QQ magic expression, a inattentive it is a Trojan! Flash animation Trojan can be said to be everywhere, attacking power and coverage is extremely broad. Many friends want to learn Flash Trojan the...

Experts dissect hacker how to pass the Google attacks-vulnerability warning-the black bar safety net

Google is a powerful search engine, through a predefined command or some special character search, you can query to the incredible results. Use Google to search the Smart Search, you can even enter the part of the remote server to obtain the secret, and search sensitive information, cause...

Easily bypass the PW Forum app high-risk vulnerabilities offensive and defensive explanation-vulnerability warning-the black bar safety net

Vulnerability description The PW forums have serious vulnerabilities, mainly because of the forum directory in the passportclient. php file inside the variable without initialization settings, so attackers can easily bypass those judgments. Exploit Due to the vulnerability of the program quickly...

CVE-2007-2546

Session fixation vulnerability in Simple Machines Forum SMF 1.1.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

Session fixation

Session fixation vulnerability in Simple Machines Forum SMF 1.1.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter...

Maran PHP Forum (forum_write.php) Remote Code Execution Vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- + + + Y! Underground Group + + + -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

BBSXP 论坛程序存在文件上传漏洞

文件保存类型是通过FileMIME判断FileMIME="image/pjpeg" 也就是说上传类型要是图片 然后第一段代码 if FileExt="asa" or FileExt="asp" or FileExt="cdx" or FileExt="cer" then error2"对不起，管理员设定本论坛不允许上传 "&FileExt&" 格式的文件" 的意思是：出错时候检查后缀.如果后缀是asa或者asp或者cdx或者cer的时候他就会提示错误。然后FileExt=文件后缀...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier, as used by TOSMO/Mambo 4.0.12 and probably other products, allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to bbplugins.php in 1 components/minibb/ or 2...

CVE-2007-2317

Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier, as used by TOSMO/Mambo 4.0.12 and probably other products, allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to bbplugins.php in 1 components/minibb/ or 2...

Sql injection

Multiple SQL injection vulnerabilities in Frogss CMS 0.7 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 dzial parameter to a katalog.php, or the 2 t parameter to b forum.php or c forum/viewtopic.php, different vectors than CVE-2006-4536...

CVE-2007-2317

CVE-2007-2317 describes multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier used with Tosmo/Mambo 4.0.12 and possibly other products. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a URL to the absolute_path parameter in bb_plugins....

CVE-2007-2317

Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier, as used by TOSMO/Mambo 4.0.12 and probably other products, allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to bbplugins.php in 1 components/minibb/ or 2...

CVE-2007-2182

Unrestricted file upload vulnerability in forumwrite.php in Maran PHP Forum allows remote attackers to upload and execute arbitrary PHP files via a trailing %00 in a filename in the page parameter...

Unrestricted file upload

Unrestricted file upload vulnerability in forumwrite.php in Maran PHP Forum allows remote attackers to upload and execute arbitrary PHP files via a trailing %00 in a filename in the page parameter...

CVE-2007-2182

Unrestricted file upload vulnerability in forumwrite.php in Maran PHP Forum allows remote attackers to upload and execute arbitrary PHP files via a trailing %00 in a filename in the page parameter...

CVE-2007-2182

The CVE concerns an unrestricted file upload vulnerability in Maran PHP Forum’s forum_write.php. The issue arises from allowing a trailing %00 in a filename in the page parameter, enabling remote attackers to upload and execute arbitrary PHP files. The documented impact is partial confidentiality...