Sv(ADP) Forum 2.0.3 Remote Password Disclosure Vulnerablity

SvADP Forum 2.0.3 Remote Password Disclosure Vulnerablity S.name:ADP Forum Affected version:2.0.3 Download&Demo:http://www.linux.it/fedro/index.php?pag=scripts&lang=en Risk:Very Highly Critical Author:Dr Max Virus Location:Egypt POC: http:/target/path/users/admin.txt As We see Admin name and hash...

Vz (Adp) Forum 2.0.3 - Remote Password Disclosure

SvADP Forum 2.0.3 Remote Password Disclosure Vulnerablity S.name:ADP Forum Affected version:2.0.3 Download&Demo:http://www.linux.it/fedro/index.php?pag=scripts&lang=en Risk:Very Highly Critical Author:Dr Max Virus Location:Egypt POC: http:/target/path/users/admin.txt As We see Admin name and hash...

CVE-2006-6794

SQL injection vulnerability in default.asp in Efkan Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the grup parameter...

CVE-2006-6794

SQL injection vulnerability in default.asp in Efkan Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the grup parameter...

CVE-2006-6794

EFkan Forum 1.0 is affected by an SQL injection in default.asp, exploitable via the grup parameter. The vulnerability allows remote command execution on the database layer and is documented across CVE-2006-6794 and related entries (e.g., CVE-2006-6828) indicating multiple SQL injection vectors in...

fab-sql.txt

====================================================================== Forum AnyBoard - Sql Inyection By Firewall Application Affect: Forum AnyBoard Source Code: http://netbula.com/download/anyboardfree.zip Error : Sql inyecion in login user. ' or 'x'='x Contact: [email protected] GrEatZ :...

efkanforum10-sql.txt

LiderHack.Org & BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : Efkan Forum v1.0 Script Download : http://maxiasp.com/scyorum.asp?scno=797 Risk : High Found By : ShaFuck31 Thanks : | Dekolax | The RéD | DesquneR | f1r3b0y | BaZaL | SaboTaqe | ST@ReXT | BLaSTER | UNiKnoX | Vulnerable file :...

Forum AnyBoard - Sql Inyection By Firewall

====================================================================== Forum AnyBoard - Sql Inyection By Firewall Application Affect: Forum AnyBoard Source Code: http://netbula.com/download/anyboardfree.zip Error : Sql inyecion in login user. ' or 'x'='x Contact: [email protected] GrEatZ :...

Efkan Forum v1.0 SqL Inj. Vuln.

LiderHack.Org & BhhGroup.Org & Bilgi-Yonetimi.Org.Tr script name : Efkan Forum v1.0 Script Download : http://maxiasp.com/scyorum.asp?scno=797 Risk : High Found By : ShaFuck31 Thanks : | Dekolax | The RйD | DesquneR | f1r3b0y | BaZaL | SaboTaqe | ST@ReXT | BLaSTER | UNiKnoX | Vulnerable file :...

Ultimate PHP Board 2.0b1 - '/chat/login.php' Code Execution

!/usr/bin/perl +------------------------------------------------------------------------------------------- + Ultimate PHP Board +------------------------------------------------------------------------------------------- + Details: + Ultimate PHP Board chat/login.php does not sanatize the...

Efkan Forum 1.0 - Grup SQL Injection

Efkan Forum 1.0 - Grup SQL Injection source: https://www.securityfocus.com/bid/21726/info Efkan Forum is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Efkan Forum 1.0 - 'Grup' SQL Injection

source: https://www.securityfocus.com/bid/21726/info Efkan Forum is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

ms ;)

Hello vuln, char bug = "??C:"; forint i = 0; i 10; i ++ ::MessageBox0, bug, bug, MBSERVICENOTIFICATION; На 2-4 итерации - синий экран или ребут from forum kuban.ru; NULL -- Best regards, wins mailto:[email protected]...

eXtreme-fusion 4.02 - 'Fusion_Forum_View.php' Local File Inclusion

source: https://www.securityfocus.com/bid/21621/info eXtreme-fusion is prone to a local file-include vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. By combining thi...

CVE-2006-6588

The forum implementation in the ecommerce component in the Apache Open For Business Project OFBiz trusts the 1 dataResourceTypeId, 2 contentTypeId, and certain other hidden form fields, which allows remote attackers to create unauthorized types of content, modify content, or have other unknown...

CVE-2006-6587

CVE-2006-6587 is a Cross‑Site Scripting (XSS) flaw in the Apache OFBiz Open For Business (OFBiz) ecommerce forum component. The vulnerability allows remote attackers to inject arbitrary script or HTML by posting a message, targeting the forum implementation. The connected OpenVAS entry notes OFBi...

CVE-2006-6587

Cross-site scripting XSS vulnerability in the forum implementation in the ecommerce component in the Apache Open For Business Project OFBiz allows remote attackers to inject arbitrary web script or HTML by posting a message...

CVE-2006-6532

Multiple cross-site scripting XSS vulnerabilities in Vt-Forum Lite 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 StrMsg or 2 TopicID parameter to a vfinfo.asp, b vfnewtopic.asp, c vfsettings.asp, and d vfreplytopic.asp, different vectors than CVE-2006-644...

CVE-2006-6522

Multiple cross-site scripting XSS vulnerabilities in WikiTimeScale TwoZero before 2.31 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the 1 forum module and 2 event descriptions. NOTE: some of these details are obtained from third party information...

CVE-2006-6532

Multiple cross-site scripting XSS vulnerabilities in Vt-Forum Lite 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 StrMsg or 2 TopicID parameter to a vfinfo.asp, b vfnewtopic.asp, c vfsettings.asp, and d vfreplytopic.asp, different vectors than CVE-2006-644...