MyBulletinBoard (MyBB) 1.1.3 - Remote Code Execution

MyBulletinBoard MyBB 1.1.3 - Remote Code Execution !/usr/bin/perl Tue Jun 13 12:37:12 CEST 2006 [email protected] Exploit HOWTO - read this before flood my Inbox you bitch! - First you need to create the special user to do this use: ./mybibi.pl --host=http://www.example.com --dir=/mybb -1 this st...

Improper access control

Dmx Forum 2.1a stores includes/bd.inc under the web root with insufficient access control, which allows remote attackers to obtain database username and password information...

CVE-2006-2946

Dmx Forum 2.1a stores includes/bd.inc under the web root with insufficient access control, which allows remote attackers to obtain database username and password information...

Sql injection

SQL injection vulnerability in incheader.asp in Snitz Forum 3.4.05 and earlier allows remote attackers to execute arbitrary SQL commands via the %strCookieURL%.GROUP parameter in a cookie...

CVE-2006-2947

Dmx Forum 2.1a allows remote attackers to obtain username and password information via a direct request to pops/edit.php with a modified membre parameter...

CVE-2006-2959

SQL injection vulnerability in incheader.asp in Snitz Forum 3.4.05 and earlier allows remote attackers to execute arbitrary SQL commands via the %strCookieURL%.GROUP parameter in a cookie...

CVE-2006-2959

SQL injection vulnerability in incheader.asp in Snitz Forum 3.4.05 and earlier allows remote attackers to execute arbitrary SQL commands via the %strCookieURL%.GROUP parameter in a cookie...

CVE-2006-2947

Dmx Forum 2.1a allows remote attackers to obtain username and password information via a direct request to pops/edit.php with a modified membre parameter...

CVE-2006-2946

CVE-2006-2946 affects Dmx Forum 2.1a, where the file path _includes/bd.inc is stored under the web root with insufficient access control. This allows remote attackers to access the database credentials (username and password). The NVD entry notes a network attack with low complexity and a partial...

CVE-2006-2946

Dmx Forum 2.1a stores includes/bd.inc under the web root with insufficient access control, which allows remote attackers to obtain database username and password information...

CVE-2006-2959

The provided connected documents confirm CVE-2006-2959 affects Snitz Forum 3.4.05 and earlier, via an SQL injection in inc_header.asp. The vulnerability is triggered through the %strCookieURL%.GROUP parameter in a cookie, enabling remote attackers to execute arbitrary SQL commands. The NVD entry ...

CVE-2006-2947

CVE-2006-2947 affects Dmx Forum 2.1a. Remote attackers can obtain usernames/passwords via a direct request to pops/edit.php with a modified membre parameter. CVSS v2 score 5.0 (Medium) — Network, Low complexity, No authentication, Partial confidentiality impact. The provided documents do not incl...

PT-2006-3886 · Viart · Viart Shop

Name of the Vulnerable Software and Affected Versions: ViArt Shop Free version 2.5.5 Description: The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the forum id parameter in "forum.php", which is not properly handled in "block forum topics.php", an...

PT-2006-3887 · Viart · Viart Shop

Name of the Vulnerable Software and Affected Versions: ViArt Shop Free version 2.5.5 Description: A SQL injection issue might allow remote attackers to execute arbitrary SQL commands, possibly involving the forum id parameter. Recommendations: For version 2.5.5, at the moment, there is no...

[KAPDA::#47] - Snitz Forum <= 3.4.05 SQL-Injection Vulnerability

KAPDA::47 - Snitz Forum = 3.4.05 SQL-Injection Vulnerability KAPDA New advisory Advisory Number: 47 Vulnerable products : Snitz Forum = 3.4.05 Vendor: http://forum.snitz.com Vulnerability: SQLInjection Date : -------------------- Found : 2006/01/12 Vendor Contacted : 2006/06/03 Release Date :...

[NOBYTES.COM: #12] ViArt Shop v2.5.5 - XSS Vulnerability

ViArt Shop v2.5.5 Free and possibly Light, Standard, and Enterprise Authors Site: http://www.codetosell.com/ +-Examples:--------------------------------------------------+ XSS: /forum.php?forumid="scriptalert'XSS';/script&categoryid=1...

Cross site scripting

Cross-site scripting XSS vulnerability in forumsearch.asp in Intelligent Solutions Inc. ASP Discussion Forum allows remote attackers to inject arbitrary web script or HTML via the search variable...

CVE-2006-2870

Cross-site scripting XSS vulnerability in forumsearch.asp in Intelligent Solutions Inc. ASP Discussion Forum allows remote attackers to inject arbitrary web script or HTML via the search variable...

CVE-2006-2870

Cross-site scripting XSS vulnerability in forumsearch.asp in Intelligent Solutions Inc. ASP Discussion Forum allows remote attackers to inject arbitrary web script or HTML via the search variable...

CVE-2006-2807

ASPwebSoft Speedy Asp Discussion Forum allows remote attackers to change the password of any account via a modified account id and possibly arbitrary values of the name, email, country, password, and passwordre parameters to profileupdate.asp...