8131 matches found
[Full-disclosure] iDefense Security Advisory 06.12.07: YaBB Forum member.vars CRLF Injection Privilege Escalation Vulnerability
YaBB Forum member.vars CRLF Injection Privilege Escalation Vulnerability iDefense Security Advisory 06.12.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 12, 2007 I. BACKGROUND YaBB Yet another Bulletin Board is an Open Source community forum system written in Perl. More information...
Fuzzylime Forum 1.0 (low.php topic) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl -w Fuzzylime Forum 1.0 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code low.php: $gettopicid = mysqlquery"SELECT FROM $tableprefixthreads WHERE...
Sporum Forum XSS vuln.
Sporum Forum XSS vuln. Vuln. discovered by : r0t Date: 12 June 2007 vendor:http://sporum.js-x.com/ affected versions: 3.0.9 and prior orginal advisory: http://pridels-team.blogspot.com/2007/06/sporum-forum-xss-vuln.html Sporum Forum contains a flaw that allows a remote Cross-Site Scripting...
Fuzzylime Forum 1.0 (low.php topic) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================ Fuzzylime Forum 1.0 low.php topic Remote SQL Injection Exploit ================================================================ !/usr/bin/perl -w Fuzzylime Forum 1.0 SQL...
Fuzzylime Forum 1.0 - 'low.php?topic' SQL Injection
!/usr/bin/perl -w Fuzzylime Forum 1.0 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code low.php: $gettopicid = mysqlquery"SELECT FROM $tableprefixthreads WHERE threadid='$GETtopic'"; PoC:...
Beehive Forum 0.7.1 - links.php Multiple Cross-Site Scripting Vulnerabilities
Beehive Forum 0.7.1 - links.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/24413/info Beehive Forum is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may levera...
Beehive Forum 0.7.1 - 'links.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/24413/info Beehive Forum is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage any of these issues to execute arbitrary script code in the browser of an...
Use the telnet method export, import, Forum mysql database-vulnerability warning-the black bar safety net
To 1. The method presented here is mainly applicable to VB and other forums. Use the TELNET method can be existing on the server database to export,then import this data to another server,use this method can achieve the Forum in two Server Migration; or the server existing on the forum moved to...
Unfixed XSS vulnerability at www.mjturkiye.net
Security researcher cyber, has submitted on 06/04/2007 a cross-site-scripting XSS vulnerability affecting www.mjturkiye.net, which at the time of submission ranked 17802 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/04/2007. It is currentl...
CVE-2007-2942
SQL injection vulnerability in user.php in My Little Forum 1.7 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in user.php in My Little Forum 1.7 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-2942
CVE-2007-2942 : A SQL injection vulnerability exists in the file user.php of My Little Forum 1.7 and earlier . The issue allows remote attackers to execute arbitrary SQL commands via the id parameter. The connected documents confirm the affected software and the attack vector, but do not provide ...
CVE-2007-2942: Undefined Security Weakness
SQL injection vulnerability in user.php in My Little Forum 1.7 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
vBulletin vBGSiteMap 2.41 (root) Remote File Inclusion Vulnerabilities
No description provided by source. ============================================= vBulletin Google Site Map Creator base Remote File Include Vulnerability ============================================= Found by : Host4vb.com & Cold z3ro Contact : [email protected] , [email protected] Homepage :...
NavBoard 2.6.0 - Remote Code Execution
"; print ""; print ""; print "Main forum settings"; print ""; print "Board Title"; print ""; print ""; print ""; print "Admin email address blank will not display"; print ""; print "input type=text name="adminemail" value="$configarr...
Hacking techniques: Flash Trojans is how to practice into-vulnerability warning-the black bar safety net
On the site watch the Flash animation, received a“friend”sent to a Flash greeting card, even a QQ magic expression, a inattentive it is a Trojan! Flash animation Trojan can be said to be everywhere, attacking power and coverage is extremely broad. Many friends want to learn Flash Trojan the...
Experts dissect hacker how to pass the Google attacks-vulnerability warning-the black bar safety net
Google is a powerful search engine, through a predefined command or some special character search, you can query to the incredible results. Use Google to search the Smart Search, you can even enter the part of the remote server to obtain the secret, and search sensitive information, cause...
Easily bypass the PW Forum app high-risk vulnerabilities offensive and defensive explanation-vulnerability warning-the black bar safety net
Vulnerability description The PW forums have serious vulnerabilities, mainly because of the forum directory in the passportclient. php file inside the variable without initialization settings, so attackers can easily bypass those judgments. Exploit Due to the vulnerability of the program quickly...