7169 matches found
portixSQL.txt
product:Portix-PHP vendor site :http://portix2.be risk : medium log with : username: 'or''=' passwd : 'or''=' xss post on the forum , vulnerable fields : titre auteur laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected]...
Portix-PHP [login bypass & xss (post)]
product:Portix-PHP vendor site :http://portix2.be risk : medium log with : username: 'or''=' passwd : 'or''=' xss post on the forum , vulnerable fields : titre auteur laurent gaffiй & benjamin mossй http://s-a-p.ca/ contact: [email protected]...
CVE-2006-5802
SQL injection vulnerability in messagedetails.php in The Web Drivers Simple Forum, dated 20060318, allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-5802
SQL injection vulnerability in messagedetails.php in The Web Drivers Simple Forum, dated 20060318, allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-5802
The CVE-2006-5802 entry describes an SQL injection vulnerability in The Web Drivers Simple Forum, specifically in message_details.php. The vulnerability can be exploited by remote attackers via the id parameter to execute arbitrary SQL commands. The NVD summary confirms the flaw as a SQL injectio...
CVE-2006-5729
Yazd Discussion Forum before 3.0 beta does not properly manage forum permissions, which allows remote authenticated users to 1 reply to a message in an arbitrary forum, if authorized to create a message in any forum; and 2 perform certain unauthorized forum actions, related to an "error in how th...
CVE-2006-5729
Yazd Discussion Forum before 3.0 beta does not properly manage forum permissions, which allows remote authenticated users to 1 reply to a message in an arbitrary forum, if authorized to create a message in any forum; and 2 perform certain unauthorized forum actions, related to an "error in how th...
CVE-2006-5729
The CVE-2006-5729 entry concerns Yazd Discussion Forum prior to version 3.0 beta, where a mismanaged permission model allows remote authenticated users to (1) reply to a message in an arbitrary forum if they can create a message in any forum, and (2) perform certain unauthorized forum actions due...
Webdrivers Simple Forum (message_details.php) SQL Injection Exploit
No description provided by source. !perl use IO::Socket; Download:http://www.thewebdrivers.com/forum.zip By:Bl0od3r Germany = if @ARGV3 else &get; sub get $host=$ARGV0; $path=$ARGV1; $id=$ARGV2; $socket=IO::Socket::INET-newProto="tcp",PeerAddr="$host",PeerPort=80 or die "-Error\n"; print...
Webdrivers Simple Forum (message_details.php) SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================================== Webdrivers Simple Forum messagedetails.php SQL Injection Exploit =================================================================== !perl use IO::Socket; By:Bl0od3r Germa...
Webdrivers Simple Forum - 'message_details.php' SQL Injection
!perl use IO::Socket; Download:http://www.thewebdrivers.com/forum.zip By:Bl0od3r Germany = if @ARGVnewProto="tcp",PeerAddr="$host",PeerPort=80 or die "-Error\n"; print "Connecting!\n"; print "Getting Data!\n"; print $socket "GET...
Webdrivers Simple Forum - message_details.php SQL Injection
Webdrivers Simple Forum - messagedetails.php SQL Injection !perl use IO::Socket; Download:http://www.thewebdrivers.com/forum.zip By:Bl0od3r Germany = if @ARGVnewProto="tcp",PeerAddr="$host",PeerPort=80 or die "-Error\n"; print "Connecting!\n"; print "Getting Data!\n"; print $socket "GET...
CVE-2006-5713
Cross-site scripting XSS vulnerability in Easy File Sharing EFS Web Server 4.0 allows remote attackers to inject arbitrary web script or HTML via the 1 author, 2 content, or 3 title parameters when posting a forum thread. NOTE: the provenance of this information is unknown; the details are obtain...
CVE-2006-5713
Cross-site scripting XSS vulnerability in Easy File Sharing EFS Web Server 4.0 allows remote attackers to inject arbitrary web script or HTML via the 1 author, 2 content, or 3 title parameters when posting a forum thread. NOTE: the provenance of this information is unknown; the details are obtain...
CVE-2006-5635
CVE-2006-5635 is a SQL injection vulnerability affecting Web Wiz Forums, specifically in forum/search.asp where the KW parameter is not properly sanitized. The available connected documents confirm the issue allows remote attackers to manipulate the underlying database and potentially execute arb...
Invision Power Board 2.1.7 - 'Debug' Remote Password Change
INSERT INTO \w?regantispam \regid,regcode,ipaddress,ctime\ VALUES\'\w32?',\d?,/', $page, $regs $prefix = $regs1; $regid = $regs2; $regcode = $regs3; else $suffix = "&debug=1"; $curl = curlinit$site.'act=Reg&CODE=10'.$suffix; curlsetopt$curl, CURLOPTPROXY, $proxy; curlsetopt$curl,...
CVE-2006-5630
Hosting Controller 6.1 before Hotfix 3.3 allows remote attackers to 1 delete the virtual directory of an arbitrary site via a modified ForumID parameter in a disableforum action in DisableForum.asp and 2 create an arbitrary forum virtual directory via an empty ForumID parameter in an enableforum...
CVE-2006-5630
CVE-2006-5630 affects Hosting Controller 6.1 before Hotfix 3.3. The vulnerability enables remote deletion of a site’s virtual directory by tampering with the ForumID in DisableForum.asp, and creation of an arbitrary forum virtual directory via an empty ForumID in EnableForum.asp. Root cause: impr...
Hosting Controller 6.1 Hotfix <= 3.2 Vulnerability
Hosting Controller 'EnableForum.asp' and 'DisableForum.asp' Scripts Let Remote Users Create or Delete Forums and Virtual Directories advisory : http://www.kapda.ir/advisory-442.html http://securitytracker.com/alerts/2006/Oct/1017103.html...
Easy File Sharing Web Server 4 - Remote Information Stealer
Easy File Sharing Web Server 4 - Remote Information Stealer / =================================================================== 0-day Alternative File Stream Exploit for Easy File Share Server 4 =================================================================== Exploit allows malicious users t...