7158 matches found
ITA Forum <= 1.49 SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================= ITA Forum = 1.49 SQL Injection Exploit ======================================= !/usr/bin/perl use LWP::UserAgent; ITA Forum 1.49 sql injection exploit with one char bruteforce by 1dt.w0lf // r57...
ITA Forum 1.49 - SQL Injection
!/usr/bin/perl use LWP::UserAgent; ITA Forum 1.49 sql injection exploit with one char bruteforce by 1dt.w0lf // r57 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: example: r57ita.pl http://127.0.0.1/ITA/ admin 0 ! Exploiting adduser.php...
ITA Forum <= 1.49 SQL Injection Exploit
No description provided by source. !/usr/bin/perl use LWP::UserAgent; ITA Forum 1.49 sql injection exploit with one char bruteforce by 1dt.w0lf // r57 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: example: r57ita.pl http://127.0.0.1/ITA...
ITA Forum 1.49 - SQL Injection
ITA Forum 1.49 - SQL Injection !/usr/bin/perl use LWP::UserAgent; ITA Forum 1.49 sql injection exploit with one char bruteforce by 1dt.w0lf // r57 :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: example: r57ita.pl http://127.0.0.1/ITA/...
mybbSQL.txt
Description: MyBB is a powerful, efficient and free forum package developed in PHP and MySQL. MyBB has been designed with the end users in mind, you and your subscribers. Full control over your discussion system is presented right at the tip of your fingers, from multiple styles and themes to the...
Multiple Vulnerabilities in FlatNuke
CODEBUG Labs Advisory 6 Title: Multiple Vulnerabilities in Flat-nuke Author: Pierquinto 'Mantra' Manco English Version: David 'hanska' Paleino Product: Flat-Nuke 2.5.1 Type: Multiple Vulnerabilities Web: http://www.codebug.org - Software Page www.flatnuke.org "FlatNuke is a CMS Content Management...
CVE-2004-2181
Multiple SQL injection vulnerabilities in WowBB Forum 1.61 allow remote attackers to execute arbitrary SQL commands via the 1 sortby or 2 page parameters to viewuser.php, or the 3 forumid parameter to viewtopic.php. NOTE: the sortby vector was later reported to be present in WowBB 1.65...
CVE-2004-2725
Multiple cross-site scripting XSS vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web script or HTML via 1 the search parameter in a search.php, 2 the email parameter in b subscribe.php, and 3 the return and 4 title parameters in c forum2.php...
CVE-2004-2178
SQL injection vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors...
CVE-2004-2180
Multiple cross-site scripting XSS vulnerabilities in WowBB Forum 1.61 allow remote attackers to inject arbitrary web script or HTML via the 1 country parameter to viewuser.php, 2 show parameter to viewforum.php, 3 letter parameter to viewuser.php, 4 highlight parameter to viewtopic.php, 5 show...
CVE-2004-2177
Cross-site scripting XSS vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
PunBB Detection
The remote host is running PunBB, an open source discussion board written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid15936; scriptversion"1.18"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"PunBB Detection";...
YaBB Shadow BBCode Tag XSS
The remote host is using the YaBB web forum software. According to its version number, the remote version of this software is vulnerable to JavaScript injection issues using shadow or glow tags. This may allow an attacker to inject hostile JavaScript into the forum system, to steal cookie...
CVE-2004-0338
SQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to execute arbitrary SQL queries via the st parameter...
Aztek Forum Multiple Script XSS
The remote host is using Aztek Forum, a web forum written in PHP. A vulnerability exists the remote version of this software - more specifically in the script 'forum2.php', that may allow an attacker to set up a cross-site scripting attack using the remote host. %NASLMINLEVEL 70300 C Tenable...
miniBB index.php user Parameter SQL Injection
The remote host is using the miniBB forum management system. According to its version number, this forum is vulnerable to a SQL injection attack. Input to the 'user' parameter of index.php not properly sanitized. A remote attacker could exploit this to execute arbitrary SQL queries against the...
[SA13202] Aztek Forum Cross-Site Scripting Vulnerabilities
TITLE: Aztek Forum Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA13202 VERIFY ADVISORY: http://secunia.com/advisories/13202/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Aztek Forum http://secunia.com/product/4254/ DESCRIPTION: benji lemien has...
Aztek Forum 4.0 - Multiple Input Validation Vulnerabilities
Aztek Forum 4.0 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/11654/info Aztek Forum is reported prone to multiple input validation vulnerabilities. These issues may allow an attacker to carry out cross-site scripting and possibly other attacks. All version...
Aztek Forum 4.0 - Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/11654/info Aztek Forum is reported prone to multiple input validation vulnerabilities. These issues may allow an attacker to carry out cross-site scripting and possibly other attacks. All versions of Aztek Forum are considered vulnerable at the moment...
vbul30x.txt
hi all, a new SQL injection found in VBulletin Forums 3.0.x the Vulnerabilite found in last.php, last 10 topics hack. last.php?fsel=,user.password%20as%20title,user.%20 %20%20%20username%20as%20lastposter%20FROM%20user, thread%20%20%20%20%20WHERE%20usergroupid=6%20LIMIT %201 to solve the problem...