CVE-2006-7088

CVE-2006-7088 affects Simple PHP Forum prior to 0.4, with multiple SQL injection vulnerabilities – attackers can craft the username parameter to logon_user.php or update_profile.php to execute arbitrary SQL. The available documents confirm remote exploitation potential and the affected components...

CVE-2007-1187: Undefined Security Weakness

WebAPP before 0.9.9.5 allows remote authenticated users, without admin privileges, to obtain sensitive information via 1 the Forum Archive feature and 2 Recent Searches...

vBulletin 3.6.4 - inlinemod.php?postids SQL Injection

vBulletin 3.6.4 - inlinemod.php?postids SQL Injection input-cleanarraygpc'p', array 'postids' = TYPESTR, ; $postids = exp...

Unfixed XSS vulnerability at kisiselbasari.com

Security researcher St@rExT, has submitted on 28/02/2007 a cross-site-scripting XSS vulnerability affecting kisiselbasari.com, which at the time of submission ranked 58362 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2007. It is...

CVE-2006-7088

Multiple SQL injection vulnerabilities in Simple PHP Forum before 0.4 allow remote attackers to execute arbitrary SQL commands via the username parameter to 1 logonuser.php and 2 updateprofile.php...

CVE-2007-1177: Undefined Security Weakness

WebAPP before 0.9.9.5 does not properly filter certain characters in contexts related to 1 the query string, 2 Profiles, 3 the Forum Post icon field, 4 the Edit Profile, and 5 the Gallery, which has unknown impact and remote attack vectors, possibly related to cross-site scripting XSS...

CVE-2006-7088: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Simple PHP Forum before 0.4 allow remote attackers to execute arbitrary SQL commands via the username parameter to 1 logonuser.php and 2 updateprofile.php...

vBulletin 3.6.4 - 'inlinemod.php?postids' SQL Injection

input-cleanarraygpc'p', array 'postids' = TYPESTR, ; $postids = explode',', $vbulletin-GPC'postids'; foreach $pos...

CVE-2007-1131

PHP remote file inclusion vulnerability in sinapis.php in Sinapis Forum 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the fuss parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in sinapis.php in Sinapis Forum 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the fuss parameter...

CVE-2007-1131

PHP remote file inclusion vulnerability in sinapis.php in Sinapis Forum 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the fuss parameter...

CVE-2007-1131

The CVE-2007-1131 entry affects Sinapis Forum 2.2. A PHP remote file inclusion vulnerability exists in sinapis.php, exploitable via the fuss parameter to execute arbitrary PHP code from a remote URL. Article sources (NVD and CVE lists) corroborate the same description. No remediation or fixed ver...

CVE-2007-1131

PHP remote file inclusion vulnerability in sinapis.php in Sinapis Forum 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the fuss parameter...

CVE-2007-1131: Undefined Security Weakness

PHP remote file inclusion vulnerability in sinapis.php in Sinapis Forum 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the fuss parameter...

Admin Phorum 3.3.1a - 'del.php?include_path' Remote File Inclusion

Admin Phorum 3.3.1.a del.php includepathFile Include Vulnerability Author: GoldM Mahmoodali Homepage: Www.Tryag.Cc Download S : http://www.phpforums.net/admin331.zip Other Info : http://www.phpforums.net/index.php?dir=dld v.Code : Line 3 require "$includepath/deletemessage.php"; Exploit:...

Sinapis Forum 2.2 (sinapis.php fuss) Remote File Include Vulnerability

Sinapis Forum 2.2 Found by kezzap66345 Script: http://www.scripter.ch/start.php?id=41.18.9&pos=forum&title=Sinapis20ForumGstebuch20img20src=/pics/gbscr.gif Dork="Sinapis by scripter.ch" Dork1="inurl:sinapis.php" ERROR: if$fuss != ""include$fuss; rfi coded RFI:...

CVE-2006-7064

CVE-2006-7064 covers a cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) versions 2.1.6 and earlier, specifically in forum/admin.php via the phpinfo parameter. The underlying issue is that the phpinfo input is reflected into the administrator session in a way that allows an a...

sinapis-rfi.txt

Sinapis Forum 2.2 Found by kezzap66345 Script: http://www.scripter.ch/start.php?id=41.18.9&pos=forum&title=Sinapis%20ForumGstebuch%20 Dork="Sinapis by scripter.ch" Dork1="inurl:sinapis.php" ERROR: if$fuss != ""include$fuss; rfi coded RFI: http://SITE.com/path//sinapis.php?fuss=SHELL...

CVE-2006-7064: Undefined Security Weakness

Cross-site scripting XSS vulnerability in forum/admin.php for Invision Power Board IPB 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML as the administrator via the phpinfo parameter...

Sinapis Forum 2.2 (sinapis.php fuss) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Sinapis Forum 2.2 sinapis.php fuss Remote File Include Vulnerability ====================================================================== Sinapis Forum 2.2 Found by...