Cross site scripting

Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via the image variable...

CVE-2006-0877

The CVE-2006-0877 entry refers to a Cross-Site Scripting vulnerability in Easy Forum 2.5 allowing remote injection of arbitrary script via the image variable. Connected sources confirm affected software (Easy Forum 2.5) and vulnerable script join.php with unsanitized image data; exploit code is a...

CVE-2006-0877

Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via the image variable...

CVE-2006-0851

SQL injection vulnerability in the forum module of ilchClan 1.05g and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter, when creating a newpost...

Sql injection

SQL injection vulnerability in the forum module of ilchClan 1.05g and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter, when creating a newpost...

CVE-2006-0851

SQL injection vulnerability in the forum module of ilchClan 1.05g and earlier allows remote attackers to execute arbitrary SQL via the pid parameter when creating a newpost. Root cause: unsanitized input in the pid field. Impact: partial confidentiality/integrity/availability. Affected: ilchClan ...

CVE-2006-0851

SQL injection vulnerability in the forum module of ilchClan 1.05g and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter, when creating a newpost...

Zorum Forum 3.5 - rollid SQL Injection

Zorum Forum 3.5 - rollid SQL Injection !/usr/bin/perl use LWP::UserAgent; ------------------------------------------------------------------------------------------- Zorum forum http://zorum.phpoutsourcing.com/ version 3.5 sql injection exploit by 1dt.w0lf // RusH security team work on all mysql...

Gravity Board X 1.1 - 'csscontent' Remote Code Execution

!/usr/bin/perl Gravity Board X v1.1 possibly prior versions remote code execution exploit coded by 1dt.w0lf 14.08.2005 RST/GHC http://rst.void.ru http://ghc.ru use LWP::UserAgent; if@ARGVnew or die; $res = $gr-get$path.'editcss.php?csscontent='; if$res-asstring = /unable to save changes/ print...

Gravity Board X <= 1.1 (csscontent) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl Gravity Board X v1.1 possibly prior versions remote code execution exploit coded by 1dt.w0lf 14.08.2005 RST/GHC http://rst.void.ru http://ghc.ru use LWP::UserAgent; if@ARGV1 exit0; $path = $ARGV0; header; print "Creating shell... Please wait\n"; $...

Gravity Board X <= 1.1 (csscontent) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ================================================================= Gravity Board X new or die; $res = $gr-get$path.'editcss.php?csscontent='; if$res-asstring = /unable to save changes/ print "Forum unable to save changes in css template...

Gravity Board X 1.1 - csscontent Remote Code Execution

Gravity Board X 1.1 - csscontent Remote Code Execution !/usr/bin/perl Gravity Board X v1.1 possibly prior versions remote code execution exploit coded by 1dt.w0lf 14.08.2005 RST/GHC http://rst.void.ru http://ghc.ru use LWP::UserAgent; if@ARGVnew or die; $res =...

Zorum Forum 3.5 (rollid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================== Zorum Forum 3.5 rollid Remote SQL Injection Exploit ===================================================== !/usr/bin/perl use LWP::UserAgent;...

MyBB 1.03 Multible xss and sql injections

Multible Injections in MyBB 1.03 All injections and vulnerabilities discovered by : HACKERS PAL two days ago i thought to download the new Mybb forum new version files .. and there were the desaster there is many xss and sql injections in the new protected version ... and i made a exploit which g...

MyBulletinBoard (MyBB) <= 1.03 Multiple SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================= MyBulletinBoard MyBB = 1.03 Multiple SQL Injection Exploit ============================================================= !/bin/env perl...

CVE-2006-0669

Multiple SQL injection vulnerabilities in archive.asp in GA's Forum Light allow remote attackers to execute arbitrary SQL commands via the 1 Forum and 2 pages parameter. NOTE: SecurityTracker says that the vendor has disputed this issue, saying that GA Forum Light does not use an SQL database...

Sql injection

DISPUTED Multiple SQL injection vulnerabilities in archive.asp in GA's Forum Light allow remote attackers to execute arbitrary SQL commands via the 1 Forum and 2 pages parameter. NOTE: SecurityTracker says that the vendor has disputed this issue, saying that GA Forum Light does not use an SQL...

CVE-2006-0669

Multiple SQL injection vulnerabilities in archive.asp in GA's Forum Light allow remote attackers to execute arbitrary SQL commands via the 1 Forum and 2 pages parameter. NOTE: SecurityTracker says that the vendor has disputed this issue, saying that GA Forum Light does not use an SQL database...

CVE-2006-0669

The CVE-2006-0669 entry concerns GA’s Forum Light with multiple SQL injection vulnerabilities in archive.asp, exploitable via the Forum and pages parameters. The trusted sources in the connected documents indicate that remote attackers could execute arbitrary SQL commands through these inputs, wi...

PT-2006-1725 · Ga · Ga'S Forum Light

Name of the Vulnerable Software and Affected Versions: GA's Forum Light affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands via the Forum and pages parameters in the archive.asp file. However, the vendor has disputed this issue, stating...