CVE-2006-5129

CVE-2006-5129 affects ph03y3nk just another flat file (JAF) CMS 4.0 RC1. The vulnerabilities are cross-site scripting in two spots: (1) module/shout/jafshout.php (the shoutbox) via the message parameter and related name/email/title/date/ldate/lname variables, and (2) the message body in a forum p...

CVE-2006-5129: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in ph03y3nk just another flat file JAF CMS 4.0 RC1 allow remote attackers to inject arbitrary web script or HTML via 1 the message parameter, and possibly other parameters, in module/shout/jafshout.php aka the shoutbox; and 2 the message body in a...

CVE-2006-5130: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in ph03y3nk just another flat file JAF CMS 4.0 RC1 allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 url, 3 title, and 4 about parameters in a forum post. NOTE: the provenance of this information is unknown; the detai...

CVE-2006-5054

SQL injection vulnerability in uye/uyeayrinti.asp in iyzi Forum 1 Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via the uyenu parameter...

CVE-2006-5054: Undefined Security Weakness

SQL injection vulnerability in uye/uyeayrinti.asp in iyzi Forum 1 Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via the uyenu parameter...

CVE-2006-5054

SQL injection vulnerability in uye/uyeayrinti.asp in iyzi Forum 1 Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via the uyenu parameter...

CVE-2006-5054

The CVE-2006-5054 entry describes a SQL injection vulnerability in the uye/uye_ayrinti.asp component of iyzi Forum 1 Beta 2 and earlier. An attacker can supply the uye_nu parameter to cause arbitrary SQL execution. The issue is tied to inadequate input handling in that ASP page, enabling remote e...

CVE-2006-5043

Multiple PHP remote file inclusion vulnerabilities in the Joomlaboard Forum Component comjoomlaboard before 1.1.2 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the sbp parameter to 1 fileupload.php or 2 imageupload.php, a variant of CVE-2006-3528...

CVE-2006-5043

CVE-2006-5043 affects the Joomlaboard Forum Component (com_joomlaboard) for Joomla! prior to 1.1.2. It enables remote PHP code execution via a URL in the sbp parameter to file_upload.php or image_upload.php (remote file inclusion), a variant of CVE-2006-3528. Root cause: insecure handling of the ...

CVE-2006-5043

Multiple PHP remote file inclusion vulnerabilities in the Joomlaboard Forum Component comjoomlaboard before 1.1.2 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the sbp parameter to 1 fileupload.php or 2 imageupload.php, a variant of CVE-2006-3528...

CVE-2006-5043: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in the Joomlaboard Forum Component comjoomlaboard before 1.1.2 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the sbp parameter to 1 fileupload.php or 2 imageupload.php, a variant of CVE-2006-3528...

JAF CMS 4.0 RC1 multiple vulnerabilities

Hacker: NanoyMaster /|| | || / || Exploit: JAF CMS / || || || / || Version: 4.0 RC1 || | || |/| || / ||| ||| |||/ vulnerabilities: XSS in shoutbox PHP execution XSS in forum m/Propsm/ z3r0phr34k SystemMeltdown THK-GEO & THK-h3x All of Exploitarians...

PT-2006-5784 · Joomla · Joomlaboard Forum

Name of the Vulnerable Software and Affected Versions: Joomlaboard Forum Component com joomlaboard versions prior to 1.1.2 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the sbp parameter to specific PHP files, including file upload.php and image...

CVE-2006-4972

Cross-site scripting XSS vulnerability in archive/index.php/forum-4.html in MyBB aka MyBulletinBoard allows remote attackers to inject arbitrary web script or HTML via the navbitsname parameter...

iyzi Forum s1 b2 (tr) SQL Injection Vulnerability

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + iyzi Forum s1 b2 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download & Info:...

iyzi Forum <= 1.0 Beta 3 (uye_ayrinti.asp) Remote SQL Injection

No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + iyzi Forum s1 b2 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download &...

iyzi Forum <= 1.0 Beta 3 (uye_ayrinti.asp) Remote SQL Injection

Exploit for unknown platform in category web applications =============================================================== iyzi Forum = 1.0 Beta 3 uyeayrinti.asp Remote SQL Injection ===============================================================...

iyzi Forum 1.0 Beta 3 - SQL Injection

iyzi Forum 1.0 Beta 3 - SQL Injection ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + iyzi Forum s1 b2 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download ...

iyzi Forum 1.0 Beta 3 - SQL Injection

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + iyzi Forum s1 b2 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download & Info:...

CVE-2006-4867

SQL injection vulnerability in mods.php in GNUTurk 2G and earlier allows remote attackers to execute arbitrary SQL commands via the tid parameter when the go parameter is "Forum."...