BK Forum <<--V.4.0 SQL Injection

------------------------------------ foud by:::. CrAzY CrAcKeR..::: Site: http://www.alshmokh.com nono225-mHOn-rageh-port-Lover hacker-Breeeeh-linux r00t ------------------------------------ ---------example: http://www.target.com/forum/member.asp?id=SQL Injection ----------google: Powered by BK...

CVE-2006-1898

CVE-2006-1898 describes multiple cross-site scripting (XSS) vulnerabilities in TinyPHPForum (TPF) 3.6 and earlier. The flaws allow remote attackers to inject arbitrary web script or HTML via (1) the uname parameter in the profile.php view action and (2) a login name. The documents do not provide ...

CVE-2006-1898

Multiple cross-site scripting XSS vulnerabilities in Ralph Capper Tiny PHP Forum TPF 3.6 allow remote attackers to inject arbitrary web script or HTML via 1 the uname parameter in a view action in profile.php and 2 a login name. NOTE: the "Access to hash password" issue is already covered by...

ThWboard 3.0 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17627/info ThWboard is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of ...

Tiny PHP forum - vulns

Summery : ------------------------------ Name : Tiny PHP forum v3.6 Software : http://sourceforge.net/projects/tinyphpforum/ Discovered by : Hessam-x Hessam M.Salehi - www.hessamx.net Vulnerabilities : ------------------------------ I. Cross-site Scripting A.Input code to the "uname" in profile.p...

CVE-2006-1628

Adobe LiveCycle Workflow 7.01 and LiveCycle Forum Manager 7.01 allows users to authenticate and perform privileged actions when their account is marked "OBSOLETE" but the account is also active, within the authentication system...

Authentication flaw

Adobe LiveCycle Workflow 7.01 and LiveCycle Forum Manager 7.01 allows users to authenticate and perform privileged actions when their account is marked "OBSOLETE" but the account is also active, within the authentication system...

CVE-2006-1628

Affected software : Adobe LiveCycle Workflow 7.01 and LiveCycle Forum Manager 7.01. Vulnerability : an authentication flaw where accounts marked as OBSOLETE can still authenticate and perform privileged actions. Root cause : mismatch in account state vs. authentication/authorization in the authen...

CVE-2006-1748

Cross-site scripting XSS vulnerability in XMB Forum 1.9.5 allows remote attackers to inject arbitrary web script or HTML by uploading a Flash .SWF video that contains a getURL function call, which causes the video to be rendered without disabling ActionScript...

Cross site scripting

Cross-site scripting XSS vulnerability in XMB Forum 1.9.5 allows remote attackers to inject arbitrary web script or HTML by uploading a Flash .SWF video that contains a getURL function call, which causes the video to be rendered without disabling ActionScript...

CVE-2006-1748

XSS vulnerability CVE-2006-1748 affects XMB Forum 1.9.5 . A Flash (.SWF) video containing a getURL call can render without ActionScript being disabled, enabling remote attackers to inject arbitrary web script/HTML. Documents confirm the root cause is improper handling of Flash content in the vide...

CVE-2006-1748

Cross-site scripting XSS vulnerability in XMB Forum 1.9.5 allows remote attackers to inject arbitrary web script or HTML by uploading a Flash .SWF video that contains a getURL function call, which causes the video to be rendered without disabling ActionScript...

1 1 4 Forum 2 0 0 5 The official version of the vulnerability-vulnerability warning-the black bar safety net

Keywords: "ALL RIGHTS RESERVED design and production: Web 1 1 4" Vulnerability description: Site 1 1 4 Forum 2 0 0 5 version of the official /edituserdb. asp To submit data and cooikes lack of validation Cause any user can modify the administrator password The default background admin/index. asp...

XMB Forum 1.9.5-Final XSS

XMB Forum 1.9.5 I have not tested this on earlier versions allows users to embed flash .swf videos in their posts. Normally, you could set an option on the object tag to say that ActionScript cannot run, but in this case we don't. The way we execute our code is by making a flash movie containing...

awebBB 1.2 Vuln

SQL Injection /search.php?a=1&q=as&rowstart=1,1020UNION20SELECT200,0,0,username,passwor d,0,0,020from20users/ /search.php?a=1&q=as&rowstart=1,1020UNION20SELECT200,0,0,VERSION,USER ,0,0,0/ If magicquotesgpc is off: /search.php?a=1&q=as&rowstart=1,1020UNION20SELECT200,0,'?20passthru$G...

APT-webshop-system vuln.

APT-webshop-system vuln. Vuln. discovered by : r0t Date: 9 april 2006 vendor:http://www.apt-webservice.de/shopsoftware/ affected versions: 4.0 PRO 3.0 BASIC 3.0 LIGHT orginal advisory: http://pridels.blogspot.com/2006/04/apt-webshop-system-vuln.html Vuln. description: 1. SQL injection vuln...

phpBB 2.0.19 - 'user_sig_bbcode_uid' Remote Code Execution

!/usr/bin/perl r57phpbba2e2.pl - phpBB admin 2 exec exploit version 2 based on usersigbbcodeuid bug tested on 2.0.12 , 2.0.13 , 2.0.19 -------------------------------------------- screen r57phpbba2e2.pl -u http://192.168.0.2/phpBB-2.0.19/ -L admin -P password Command for execute or 'exit' for exi...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Arab Portal 2.0.1 stable allow remote attackers to inject arbitrary web script or HTML via the 1 adminJump and 2 forummiddle parameters in a forum.php, and the 3 form parameter in b members.php, c pm.php, and d mail.php...

classifiedZONE v1.2 XSS vuln.

classifiedZONE v1.2 XSS vuln. Vuln. discovered by : r0t Date: 28 march 2006 vendor:http://www.fusionzone.com/applications/classifieds/ affected versions:v.1.2 and prior Vuln. Description: classifiedZONE contains a flaw that allows a remote cross site scripting attack. This flaw exists because inp...

phpBB v 2.0.X upload html .gif ( "not 2.0.19" )

/ ,, / / '-./.-' .--' '--. / / /"" SpiderZ ForumZ Security | | | | / / '..' = Autore: SpiderZ = phpBB v 2.0.X upload html .gif "not 2.0.19" = Sito: www.spiderz.tk 1° Registrati al seguente forum 2° entra con i tuoi dati 3° vai su "Profilo" su "Carica avatar da PC:" 4° prepara la tua pagina...