7166 matches found
CVE-2006-2677
SiteScape Forum 7.2 and possibly earlier stores the avf.rc configuraiton file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive path information...
Sql injection
Multiple SQL injection vulnerabilities in Tamber Forum 1.9.13 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 frmid parameter to a showforum.asp, 2 a search field to b forumsearch.asp, 3 Email address or 4 Password to c admin/index.asp, 5 frmcatid parameter to d...
CVE-2006-2674
Multiple SQL injection vulnerabilities in Tamber Forum 1.9.13 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 frmid parameter to a showforum.asp, 2 a search field to b forumsearch.asp, 3 Email address or 4 Password to c admin/index.asp, 5 frmcatid parameter to d...
CVE-2006-2674
Multiple SQL injection vulnerabilities in Tamber Forum 1.9.13 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 frmid parameter to a showforum.asp, 2 a search field to b forumsearch.asp, 3 Email address or 4 Password to c admin/index.asp, 5 frmcatid parameter to d...
CVE-2006-2674
CVE-2006-2674 affects Tamber Forum 1.9.13 and earlier. Multiple SQL injection vulnerabilities exist in the web application, exploitable via parameters and fields in (a) show_forum.asp (frm_id), (b) forum_search.asp (search field), (c) admin/index.asp (Email/Password), (d) browse_forum_cat.asp (fr...
Speedy ASP Forum(profileupdate.asp) User Pass Change Exploit
Title : Speedy ASP Forumprofileupdate.asp User Pass Change Exploit Dork : Copyright © ASPwebSoft Author : ajann greetz : Nukedx Code: Save to .htm titlePass Change/title script language="JavaScript" //Coded ajann function islemKontrol ifdocument.InputForm.name.value=="" ||...
SpeedyASPForum.txt
Title : Speedy ASP Forumprofileupdate.asp User Pass Change Exploit Dork : Copyright © ASPwebSoft Author : ajann greetz : Nukedx Code: Save to .htm Pass Change //Coded ajann function islemKontrol ifdocument.InputForm.name.value=="" || document.InputForm.email.value=="" ||...
Speedy ASP Forum (profileupdate.asp) User Pass Change Exploit
Exploit for unknown platform in category web applications ============================================================= Speedy ASP Forum profileupdate.asp User Pass Change Exploit ============================================================= Speedy Forum User Pass Change // ajannUser Name :...
Speedy ASP Forum (profileupdate.asp) User Pass Change Exploit
No description provided by source. !DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"htmlheadMETA http-equiv="Content-Type" content="text/html; charset=utf-8"/headbody div bgcolor="000000" form name="InputForm" method="post" target="blank" onsubmit="return window.confirm"You are...
Speedy ASP Forum - 'profileupdate.asp' User Pass Change
Speedy Forum User Pass Change // ajannUser Name : Example: Surname Name User Mail : Example: [email protected] User Ýd : Example: Ýd:1 Admin User Country : Choose Country Turkey Example: Turkey User Pass /f...
Toasts Forums 1.6.44 in Xss
ENGLISH Title : Toast Forums 1.6.44 in Xss Author : ajann Exploit; XSS Example Forum Post Message,Reply.. IMG onmouseover=Javascript:alertdocument.domain src="x.gif" Alert: xxx.com / ajann,Turkey TURKISH Baslk : Toast Forums 1.6.44 in Xss Ac Bulan : ajann Ack bulunan dosyalar; Foruma post...
Tamber Forum <= 1.9.13 Multiple SQL Injection Vulnerabilities
ENGLISH Title : Tamber Forum = 1.9.13 Multiple SQL Injection Vulnerabilities Author : ajann Exploit; SQL INJECTON-------------------------------------------------------- http://target/path/showforum.asp?frmid=55'SQL TEXT http://target/path/forumsearch.asp SEARCH FOR:SQL TEXT...
View Topic Flood phpBB, MercuryBoard, Vbulletin, Ipb
/ ,, / / '-./.-' .--' '--. / / /"" SpiderZ ForumZ Security | | | | / / '..' • Xss Freebb All Version • Author: SpiderZ • Sito: http://www.spiderz.altervista.org • Sito2: https://www.spiderz.netsons.org Xss freebb Sito ufficiale frebb http://www.free-bb.com/fr/ Url :...
Zix Forum <= 1.12 (layid) SQL Injection Vulnerability
Zix Forum = 1.12 layid SQL Injection Vulnerability Vulnerability: -------------------- SQLInjection: Input passed to the "layid" parameter in 'settings.asp' not properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code...
zix112.txt
Zix Forum = 1.12 layid SQL Injection Vulnerability Vulnerability: -------------------- SQLInjection: Input passed to the "layid" parameter in 'settings.asp' not properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code...
Get leadbbs Forum Station webshell after the background of the most simple method-vulnerability warning-the black bar safety net
This article has been published in the hacker Handbook on non-security magazine, are copyright of their have! Reprint note. In fact, the ASP Forum, my favorite is leadbbs, stability, speed, and space occupied is also small, compared to the massive DVBBS can be a small more, speaking of security, ...
[SECURITY] [DSA 1063-1] New phpgroupware packages fix execution of arbitrary web script code
-------------------------------------------------------------------------- Debian Security Advisory DSA 1063-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 8th, 2006 http://www.debian.org/security/faq -...
AspBB Forum "profile.asp & default.asp" XSS Vulnerability
This xss works on Aspbb Forums Homapage : http://www.aspbb.org Version : 0.5.2 Exploit: http://www.example.com/default.asp?action="scriptalert'Xss Vulnerability';/script http://www.example.com/profila.asp?get="scriptalert'Xss Vulnerability';/script&URL=2FDefault2Easp3F TeufeL // Netkabus.Com...
Zix Forum <= 1.12 (layid) SQL Injection Vulnerability
No description provided by source. Zix Forum = 1.12 layid SQL Injection Vulnerability Vulnerability: -------------------- SQLInjection: Input passed to the "layid" parameter in 'settings.asp' not properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries ...
