PHP-Nuke Module splattforum 4.0 RC1 Local File Inclusion Exploit

No description provided by source. !/usr/bin/perl Modulo Splatt Forum v4.0 RC1bbcoderef.php nameLocal File Include Exploit D.Script: http://sourceforge.net/projects/splattforum/ V.Code $modulename = $name; -------- Line : 17 include"modules/".$modulename."/functions.php"; -------- Line : 19 Dork:...

CVE-2007-1555

SQL injection vulnerability in forum.php in the Minerva mod 2.0.21 build 238a and earlier for phpBB allows remote attackers to execute arbitrary SQL commands via the c parameter...

CVE-2007-1555

SQL injection vulnerability in forum.php in the Minerva mod 2.0.21 build 238a and earlier for phpBB allows remote attackers to execute arbitrary SQL commands via the c parameter...

minerva-sql.txt

======================X=O=R=O=N===================== + + PHPBB Minerva Mod = 2.0.21 build 238a forum.php Remote SQL Injection Exploit + ======================X=O=R=O=N===================== + + Bulan: xoron + + xoron.biz + ======================X=O=R=O=N===================== + + SQL INJ: + +...

phpnukesplat-lfi.txt

!/usr/bin/perl Modulo Splatt Forum v4.0 RC1bbcoderef.php nameLocal File Include Exploit D.Script: http://sourceforge.net/projects/splattforum/ V.Code $modulename = $name; -------- Line : 17 include"modules/".$modulename."/functions.php"; -------- Line : 19 Dork: "Splatt Forum" Discovered & Coded ...

bind use-after-free

Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 Bind Forum only allows remote attackers to cause a denial of service named daemon crash via unspecified vectors that cause named to "dereference a freed fetch context."...

jgbbs-sql.txt

JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit Type : SQL Injection Release Date : 2007-03-13 Product / Vendor : JGBBS Is a Tree-style Online Forum System http://sourceforge.net/projects/jgbbs/ Bug : http://localhost/script/search.asp?author=-SQL Inj.-&bid=0 SQL Injection Exploi...

JGBBS 3.0beta1 (search.asp author) SQL Injection Exploit

No description provided by source. JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit SQL Injection Code input name="author" type="text" value="UniquE-Key'UNION SELECT...

JGBBS 3.0beta1 (search.asp author) SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== JGBBS 3.0beta1 search.asp author SQL Injection Exploit ======================================================== JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit JGBBS...

JGBBS 3.0beta1 - search.asp?author SQL Injection

JGBBS 3.0beta1 - search.asp?author SQL Injection JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit SQL Injection Code Search Board ALL UniquE-KeyUniquE-Cracker font face="Verdana" siz...

JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit

JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit Type : SQL Injection Release Date : 2007-03-13 Product / Vendor : JGBBS Is a Tree-style Online Forum System http://sourceforge.net/projects/jgbbs/ Bug : http://localhost/script/search.asp?author=-SQL Inj.-&bid=0 SQL Injection Exploi...

CVE-2006-7153

PHP remote file inclusion vulnerability in index.php in MiniBB Forum 2 allows remote attackers to execute arbitrary code via a URL in the pathToFiles parameter...

CVE-2006-7153

PHP remote file inclusion vulnerability in index.php in MiniBB Forum 2 allows remote attackers to execute arbitrary code via a URL in the pathToFiles parameter...

CVE-2006-7153

CVE-2006-7153 is a PHP remote file inclusion vulnerability in MiniBB Forum 2 (index.php) that allows an attacker to execute arbitrary code by supplying a URL in the pathToFiles parameter. The issue enables remote code execution with network access, with CVSS v2 base score 10.0 (HIGH) and impact o...

CVE-2007-1295

SQL injection vulnerability in topictitle.php in AJ Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the tdid parameter...

Sql injection

SQL injection vulnerability in topictitle.php in AJ Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the tdid parameter...

CVE-2007-1295

CVE-2007-1295: SQL injection in AJ Forum 1.0’s topic_title.php via the td_id parameter allows remote command execution. Affected software: AJ Forum 1.0 (topic_title.php). Root cause: input from td_id is used in SQL without proper sanitization, enabling arbitrary SQL execution. Exploitation detail...

CVE-2007-1295

SQL injection vulnerability in topictitle.php in AJ Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the tdid parameter...

CVE-2006-7127

Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the maindir parameter to 1 forum/main.php and 2 forum/headlines.php...

CVE-2006-7128

CVE-2006-7128 describes a PHP remote file inclusion in JAF CMS 4.0 RC1, exploitable via the URL in the website parameter of forum.php, allowing remote code execution. The NVD CVSSv2 base score is 7.5 (HIGH) with network access, low complexity, no authentication, and partial impact on confidential...