8132 matches found
CVE-2007-6014
SQL injection vulnerability in post.php in Beehive Forum 0.7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the tdedupe parameter...
CVE-2007-6014: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in post.php in Beehive Forum 0.7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the tdedupe parameter...
SYMSA-2007-014: SQL Injection Vulnerability in Beehive Forum Software
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-014 Advisory Title: SQL Injection Vulnerability in Beehive Forum Software Author: Nick Bennett Robert Brown / [email protected] Release...
CVE-2007-6241: Undefined Security Weakness
Multiple unspecified vulnerabilities in Beehive Forum 0.7.1 have unknown "critical" impact and attack vectors, different issues than CVE-2007-6014...
snitz-sql.txt
WwW.BugReport.IR AmnPardaz Security Research & Penetration Testing Group Title: A user can gain admin level in snitz 2000 by SQL Injection vendor: http://forum.snitz.com/ Googling: "Powered by Snitz" 2,440,000 victims Last bug report in 2007-02-16 with 4692 visitors Exploit: Available Fix...
Snitz Forum < 3.4.0.07 active.asp BuildTime Parameter SQL Injection
Binary data 4306.prm...
Snitz Forums 2000 - Active.asp SQL Injection
Snitz Forums 2000 - Active.asp SQL Injection WwW.BugReport.IR AmnPardaz Security Research & Penetration Testing Group Title: A user can gain admin level in snitz 2000 by SQL Injection vendor: http://forum.snitz.com/ Googling: "Powered by Snitz" 2,440,000 victims Last bug report in 2007-02-16 with...
Snitz Forums 2000 - 'Active.asp' SQL Injection
WwW.BugReport.IR AmnPardaz Security Research & Penetration Testing Group Title: A user can gain admin level in snitz 2000 by SQL Injection vendor: http://forum.snitz.com/ Googling: "Powered by Snitz" 2,440,000 victims Last bug report in 2007-02-16 with 4692 visitors Exploit: Available Fix...
JLMForo System (modificarPerfil.php) Cross-Site Scripting Vulnerability
JLMForo System modificarPerfil.php Cross-Site Scripting Vulnerability Download: http://www.miscodigos.com/aplicaciones/JLMForo20System/ Bug found by Jose Luis Gуngora Fernбndez / JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join...
jlmforo-xss.txt
JLMForo System modificarPerfil.php Cross-Site Scripting Vulnerability Download: http://www.miscodigos.com/aplicaciones/JLMForo%20System/ Bug found by Jose Luis Góngora Fernández / JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join...
pblang499-exec.txt
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg Original Here: http://www.inj3ct-it.org/exploit/pbl.txt...
smf-upload.txt
====================================================================== SMF Forum Exploit every Version ====================================================================== Author: masbloon Status: patch not available yet Works on : By Default, Admin always disable "encrypt filenames option"...
Softbiz Freelancers Script v.1 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Softbiz Freelancers Script V.1 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Dr.Crash &nb...
icebb-database.txt
./includes/functions.php, line 73 $ip = empty$SERVER'HTTPXFORWARDEDFOR' ? $SERVER'REMOTEADDR' : $SERVER'HTTPXFORWARDEDFOR'; $ip = $this-cleankey$ip; $input'ICEBBUSERIP' = $ip; ./icebb.php, line 169 $icebb-clientip = $input'ICEBBUSERIP'; ./admin/index.php, line 112 $icebb-adsess =...
CVE-2004-2756: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in viewtopic.php in Xoops 2.x, possibly 2 through 2.0.5, allows remote attackers to inject arbitrary web script or HTML via the 1 forum and 2 topicid parameters...
Free Forum Search SQL注入漏洞
Free Forum是一款基于PHP的WEB应用程序。 Free Forum不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于搜索脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或可能操作数据库。 New Vision Enterprise Free Forum 目前没有解决方案提供： http://www.nvecs.com/freeforum.asp...
Unfixed XSS vulnerability at www.argus.nu
Security researcher Uber0n, has submitted on 15/11/2007 a cross-site-scripting XSS vulnerability affecting www.argus.nu, which at the time of submission ranked 812420 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is currently...
CVE-2007-5943
Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...
CVE-2007-5943
Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...
CVE-2007-5943: Undefined Security Weakness
Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...