Lucene search
+L

7169 matches found

CVE
CVE
added 2006/09/06 10:00 p.m.51 views

CVE-2006-4585

The CVE-2006-4585 entry describes an SQL injection in Tr Forum 2.0, specifically in admin/editer.php via the id2 parameter. The vulnerability allows remote authenticated users to execute arbitrary SQL commands, and the note indicates this could be leveraged with other Tr Forum vulnerabilities to ...

9CVSS8.8AI score0.02427EPSS
SaveExploits1References10Affected Software1
Cvelist
Cvelist
added 2006/09/06 10:00 p.m.29 views

CVE-2006-4584

Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and password parameters to admin/insertadmin.php...

7.2AI score0.04694EPSS
SaveExploits3References10
CVE
CVE
added 2006/09/06 10:00 p.m.43 views

CVE-2006-4584

Tr Forum 2.0 is affected by CVE-2006-4584, where remote attackers can bypass authentication and add an administrative account via login and password parameters to admin/insert_admin.php. The vulnerability allows partial confidentiality, integrity, and availability impact (CVSS v2 base score 7.5, ...

7.5CVSS7.6AI score0.04694EPSS
SaveExploits3References10Affected Software1
Cvelist
Cvelist
added 2006/09/06 10:00 p.m.28 views

CVE-2006-4585

SQL injection vulnerability in admin/editer.php in Tr Forum 2.0 allows remote authenticated users to execute arbitrary SQL commands via the id2 parameter. NOTE: this can be leveraged with other Tr Forum vulnerabilities to allow unauthenticated attackers to gain privileges...

8.4AI score0.02427EPSS
SaveExploits1References10
NVD
NVD
added 2006/09/06 1:04 a.m.23 views

CVE-2006-4564

SQL injection vulnerability in Sources/ManageBoards.php in Simple Machines Forum 1.1 RC3 allows remote attackers to execute arbitrary SQL commands via the curcat parameter...

5.1CVSS8.4AI score0.01071EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2006/09/06 1:00 a.m.33 views

CVE-2006-4564

SQL injection vulnerability in Sources/ManageBoards.php in Simple Machines Forum 1.1 RC3 allows remote attackers to execute arbitrary SQL commands via the curcat parameter...

8.4AI score0.01071EPSS
SaveExploits0References5
zdt
zdt
added 2006/09/05 12:00 a.m.24 views

Zix Forum <= 1.12 (RepId) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ Zix Forum = 1.12 RepId Remote SQL Injection Vulnerability ============================================================ ZIXForum 1.12 = "RepId" Remote SQL Injection - - - - - - - ...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2006/09/05 12:00 a.m.15 views

Zix Forum <= 1.12 (RepId) Remote SQL Injection Vulnerability

No description provided by source. ©ZIXForum 1.12 = "RepId" Remote SQL Injection - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Credit by | Chironex Fleckeri Mail | [email protected] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Username :...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2006/09/05 12:00 a.m.33 views

Zix Forum 1.12 - 'RepId' SQL Injection (1)

©ZIXForum 1.12 = "RepId" Remote SQL Injection - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Credit by | Chironex Fleckeri Mail | [email protected] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Username :...

7.5CVSS5.8AI score0.01264EPSS
SaveExploits2
exploitpack
exploitpack
added 2006/09/05 12:00 a.m.14 views

Zix Forum 1.12 - RepId SQL Injection (1)

Zix Forum 1.12 - RepId SQL Injection 1 ©ZIXForum 1.12 = "RepId" Remote SQL Injection - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Credit by | Chironex Fleckeri Mail | [email protected] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Username :...

0.5AI score
SaveExploits0
seebug.org
seebug.org
added 2006/09/04 12:00 a.m.34 views

Tr Forum 2.0 SQL Injection / Bypass Security Restriction Exploit

No description provided by source. !/usr/bin/perl Affected.scr..: Tr Forum V2.0 Poc.ID........: 10060903 Type..........: SQL Injection, Bypass Security Restriction Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: comscripts.com/scripts/php.tr-forum.1579.html Poc.link......:...

7.1AI score
SaveExploits0
zdt
zdt
added 2006/09/04 12:00 a.m.32 views

Tr Forum 2.0 SQL Injection / Bypass Security Restriction Exploit

Exploit for unknown platform in category web applications ================================================================ Tr Forum 2.0 SQL Injection / Bypass Security Restriction Exploit ================================================================ !/usr/bin/perl Affected.scr..: Tr Forum V2.0...

7.1AI score
SaveExploits0
NVD
NVD
added 2006/08/31 8:04 p.m.27 views

CVE-2006-4467

Simple Machines Forum SMF 1.1RCx before 1.1RC3, and 1.0.x before 1.0.8, does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to perform directory traversal attacks to read...

7.5CVSS6.5AI score0.01815EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2006/08/31 8:00 p.m.36 views

CVE-2006-4467

Simple Machines Forum SMF 1.1RCx before 1.1RC3, and 1.0.x before 1.0.8, does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to perform directory traversal attacks to read...

6.5AI score0.01815EPSS
SaveExploits0References6
CVE
CVE
added 2006/08/31 8:00 p.m.64 views

CVE-2006-4467

The CVE-2006-4467 entry applies to Simple Machines Forum (SMF) 1.1RCx prior to 1.1RC3 and 1.0.x prior to 1.0.8. The issue is a variable-unsetting flaw where input data containing a numeric parameter with a value that matches an alphanumeric parameter’s hash value prevents SMF from unsetting the c...

7.5CVSS6.8AI score0.01815EPSS
SaveExploits0References6Affected Software1
Packet Storm
Packet Storm
added 2006/08/27 12:00 a.m.46 views

lforum240.txt

Title: l-forum = 2.4.0 Remote File Inclusion Vulnerability The bug is Discovered by Minus-Power Mail: minus-power at myway dot com Date: 19.Aug 2006 -= Republic of IRAN =- Thank you : R00TATI - Stansar & members of RS Damn to : All Arab & Turkish hackers...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2006/08/27 12:00 a.m.30 views

asspxss.txt

Author:-=Mizo=- script:Forum Software © ASPPlayground.NET Advanced Edition 2.4.5 Unicode bug:-www.XXX./forum/calendar.asp?calendarID=|Xss| greetz to Mahbub,Lezr.com,3asfh.net and ReMoTer...

7.4AI score
SaveExploits0
exploitpack
exploitpack
added 2006/08/22 12:00 a.m.53 views

Simple Machines Forum (SMF) 1.1 rc2 - Lock Topics

Simple Machines Forum SMF 1.1 rc2 - Lock Topics !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i;...

0.1AI score
SaveExploits0
seebug.org
seebug.org
added 2006/08/22 12:00 a.m.22 views

Simple Machines Forum &lt;= 1.1 rc2 Lock Topics Remote Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- Simple Machines Forum = 1.1.RC2 "lock"/ZendHashDelKeyOrIndex Vulnerability by rgod [email protected] site:...

7.1AI score
SaveExploits0
zdt
zdt
added 2006/08/22 12:00 a.m.566 views

Simple Machines Forum <= 1.1 rc2 Lock Topics Remote Exploit

Exploit for unknown platform in category web applications =========================================================== Simple Machines Forum = 1.1 rc2 Lock Topics Remote Exploit =========================================================== !/usr/bin/php -q -d shortopentag=on ? printr'...

7.1AI score
SaveExploits0
Rows per page
Query Builder