CVE-2006-5503

Cross-site scripting XSS vulnerability in index.php in Simple Machines Forum SMF 1.1 RC2 allows remote attackers to inject arbitrary web script or HTML via the action parameter...

CVE-2006-5503: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Simple Machines Forum SMF 1.1 RC2 allows remote attackers to inject arbitrary web script or HTML via the action parameter...

MiniHttpServer Web Forum & File Sharing Server 4.0 Add User Exploit

Exploit for unknown platform in category remote exploits =================================================================== MiniHttpServer Web Forum & File Sharing Server 4.0 Add User Exploit ===================================================================...

Berty Forum <= 1.4 (index.php) Remote Blind SQL Injection Exploit

No description provided by source. % Response.Buffer = True % % On Error Resume Next % % Server.ScriptTimeout = 100 % % '=============================================================================================== 'Script Name: Berty Forum = 1.4index.php Remote Blind SQL Injection Exploit 'Cod...

SoftBB多个远程代码执行及信息泄露漏洞

SoftBB是一款基于WEB的论坛程序。 SoftBB v0.1中存在多个输入验证错误，如下： 1 在SQL查询时没有正确的验证对/addmembre.php文件中groupe参数及/moveto.php文件中select参数的输入，允许攻击者执行SQL注入攻击。 2 在PHP脚本中存储之前没有正确过滤对admin/saveopt.php中多个参数的输入，允许攻击者执行任意PHP代码。成功攻击可能要求管理员权限。 3 对index.php中page参数的输入没有正确的处理空的或无效的参数，允许攻击者判断安装路径。 SoftBB = 0.1...

TR Forum SQL注入及认证绕过漏洞

Tr Forum是一款法语的论坛程序。 Tr Forum中的多个漏洞允许恶意用户执行SQL注入攻击和绕过某些安全限制。 1 admin/insertadmin.php文件中缺少认证，允许创建拥有有限权限的管理员帐号。 2 没有正确过滤对admin/editer.php文件中id2参数的输入，允许攻击者通过注入任意SQL代码操控SQL查询。成功攻击要求某些管理权限。 3 在更新配置文件时缺少访问验证，允许通过更改id参数修改其他用户的设置。 组合使用1和2所述漏洞允许以完全权限访问管理部分。 Tr Forum Tr Forum 2.0 我们建议使用此软件的用户随时关注厂商的主页以获取最新版...

CVE-2006-5504: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Simple Machines Forum SMF allows remote attackers to inject arbitrary web script or HTML via a base64 encoded params value in the action parameter...

MiniHTTPServer Web Forum & File Sharing Server 4.0 - Add User

/================================================================ MiniHTTPServer.NET 's Web Forum & File Sharing Server Power Pack 4 latest version available for sale on their website http://www.minihttpserver.net/bbs/index.php has multiple vulnerabilities with their join.asp page a malicious...

MiniHTTPServer Web Forum File Sharing Server 4.0 - Add User

MiniHTTPServer Web Forum File Sharing Server 4.0 - Add User /================================================================ MiniHTTPServer.NET 's Web Forum & File Sharing Server Power Pack 4 latest version available for sale on their website http://www.minihttpserver.net/bbs/index.php has...

Berty Forum <= 1.4 (index.php) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= Berty Forum exploit1.asp 'Using : Write Target and ID after Submit Click '=============================================================================================== %...

Berty Forum 1.4 - index.php Blind SQL Injection

Berty Forum 1.4 - index.php Blind SQL Injection exploit1.asp 'Using : Write Target and ID after Submit Click '=============================================================================================== % Berty Forum v1.4index.php Blind SQL Injection Exploit function functionControl1...

Berty Forum 1.4 - 'index.php' Blind SQL Injection

exploit1.asp 'Using : Write Target and ID after Submit Click '=============================================================================================== % Berty Forum v1.4index.php Blind SQL Injection Exploit function functionControl1 setTimeout"functionControl2",2000; function...

WSN Forum &lt;= 1.3.4 &#40;pathtoconfig&#41; Remote File Include Exploit / Code Execution Vulnerability

!/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

[Xss] IN SMF 1.1 RC2

InFo ----- Site : www.simplemachines.org Dork : Powered by SMF 1.1 RC2 File : index.php? By : b0rizQ E-Mail : TheFreEKernEl at b0rizQ dot nET email concealed -------------------------------- Xss www.traget.com/index.php?action=login2"scriptalert'xss-by-b0rizQ' /script...

[DRUPAL-SA-2006-024] Drupal 4.6.10 / 4.7.4 fixes multiple XSS issues

------------------------------------------------------------------------ ---- Drupal security advisory DRUPAL-SA-2006-024 ------------------------------------------------------------------------ ---- Project: Drupal core Date: 2006-Oct-18 Security risk: Moderately critical Exploitable from: Remot...

CVE-2006-5438

PHP remote file inclusion vulnerability in adminfoot.php in Comdev Forum 4.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter. NOTE: the provenance of this information is unknown; the details are obtained from third par...

CVE-2006-5438

CVE-2006-5438 : PHP remote file inclusion in adminfoot.php of Comdev Forum 4.1 when register_globals is enabled. An attacker can supply a URL in the path[docroot] parameter to execute arbitrary PHP code remotely. The provided documents do not include explicit remediation steps. Exploitation statu...

CVE-2006-5438

PHP remote file inclusion vulnerability in adminfoot.php in Comdev Forum 4.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter. NOTE: the provenance of this information is unknown; the details are obtained from third par...

CVE-2006-5421

WSN Forum 1.3.4 and earlier allows remote attackers to execute arbitrary PHP code via a modified pathname in the pathtoconfig parameter that points to an avatar image that contains PHP code, which is then accessed from prestart.php. NOTE: this issue has been labeled remote file inclusion, but tha...

CVE-2006-5421

CVE-2006-5421 affects WSN Forum 1.3.4 and earlier. The vulnerability arises when a modified pathname in the pathtoconfig parameter points to an avatar image containing PHP code, which is then accessed by prestart.php, allowing remote attackers to execute arbitrary PHP code. The underlying issue i...