7169 matches found
iyzi Forum <= 1.0 Beta 3 (uye_ayrinti.asp) Remote SQL Injection
Exploit for unknown platform in category web applications =============================================================== iyzi Forum = 1.0 Beta 3 uyeayrinti.asp Remote SQL Injection ===============================================================...
iyzi Forum <= 1.0 Beta 3 (uye_ayrinti.asp) Remote SQL Injection
No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + iyzi Forum s1 b2 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download &...
iyzi Forum 1.0 Beta 3 - SQL Injection
iyzi Forum 1.0 Beta 3 - SQL Injection ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + iyzi Forum s1 b2 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download ...
iyzi Forum 1.0 Beta 3 - SQL Injection
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + iyzi Forum s1 b2 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download & Info:...
CVE-2006-4867
SQL injection vulnerability in mods.php in GNUTurk 2G and earlier allows remote attackers to execute arbitrary SQL commands via the tid parameter when the go parameter is "Forum."...
Zix Forum <= 1.12 (RepId) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl ZIXForum = v1.12 Exploit Vulnerability found by Chironex Fleckeri Created By: SlimTim10 [email protected] Google dork: intext:"ZIXForum 1.12 by: ZixCom 2002" use IO::Socket::INET; usage unless @ARGV == 2; $host = shift@ARGV; $dir = shift@ARGV;...
Zix Forum <= 1.12 (RepId) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================== Zix Forum new Proto = "tcp", PeerAddr = "$host", PeerPort = "80" || die "-Connect Failed: could not connect to $host\r\n"; show an error! print "+Connecting...\n"; print $socket "GET...
PHP-post Web Forum 0.x.1.0 - pm.php?replyuser Cross-Site Scripting
PHP-post Web Forum 0.x.1.0 - pm.php?replyuser Cross-Site Scripting source: https://www.securityfocus.com/bid/20061/info PHP-Post is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues, because the application...
PHP-post Web Forum 0.x.1.0 - profile.php Multiple SQL Injections
PHP-post Web Forum 0.x.1.0 - profile.php Multiple SQL Injections source: https://www.securityfocus.com/bid/20061/info PHP-Post is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues, because the application fai...
mybbxss.txt
Hello Title : MyBB Full path and Cross site scripting vulnerabilities Discovered by : HACKERS PAL Copyrights : HACKERS PAL Website : WwW.SoQoR.NeT Email : [email protected] xss archive/index.php/forum-4.html?GLOBALS=1&navbitsname=33&navbitsname=alertdocument.cookie; full path inc/plugins/hello.p...
PHP-post Web Forum 0.x.1.0 - 'pm.php?replyuser' Cross-Site Scripting
source: https://www.securityfocus.com/bid/20061/info PHP-Post is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues, because the application fails to sanitize user-supplied input. A successful exploit of these...
PHP-post Web Forum 0.x.1.0 - 'profile.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/20061/info PHP-Post is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues, because the application fails to sanitize user-supplied input. A successful exploit of these...
Snitz Forums 2000 v3.4.06
ENGLISH Title : Snitz Forums 3.4.06 XSS Vulnerability Author : ajann HomePage : http://forum.snitz.com CODE http://target.com/path/forum.asp?FORUMID=1&ARCHIVE=true&sortfield=lastpost&sortorder="scriptfunction20xssbaslatalert"Xss20Here";/scriptbody20onload="xssbaslat" etc...
Update Protection against MiniBB Remote File Vulnerabilities
MiniBB is a free forum software, an original PHP message board script that a user can build online community on. Vulnerabilities in MiniBB Forum may allow a remote attacker to execute arbitrary PHP code via a specially crafted URL...
trforum20.txt
!/usr/bin/perl Affected.scr..: Tr Forum V2.0 Poc.ID........: 10060903 Type..........: SQL Injection, Bypass Security Restriction Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: comscripts.com/scripts/php.tr-forum.1579.html Poc.link......: acid-root.new.fr/poc/10060903.txt...
CVE-2006-4585
SQL injection vulnerability in admin/editer.php in Tr Forum 2.0 allows remote authenticated users to execute arbitrary SQL commands via the id2 parameter. NOTE: this can be leveraged with other Tr Forum vulnerabilities to allow unauthenticated attackers to gain privileges...
CVE-2006-4584
Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and password parameters to admin/insertadmin.php...
CVE-2006-4586
The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authenticated users to perform unauthorized actions, as demonstrated by modifying user settings via the id parameter to /membres/modifprofil.php, and changing a password via...
CVE-2006-4586
The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authenticated users to perform unauthorized actions, as demonstrated by modifying user settings via the id parameter to /membres/modifprofil.php, and changing a password via...
CVE-2006-4586
CVE-2006-4586 affects the Tr Forum 2.0 admin panel, where authentication can be done by supplying a username and password hash. This enables remote authenticated users to perform unauthorized actions such as modifying user profile settings via /membres/modif_profil.php (id parameter) and changing...