8129 matches found
CVE-2006-4564
SQL injection vulnerability in Sources/ManageBoards.php in Simple Machines Forum 1.1 RC3 allows remote attackers to execute arbitrary SQL commands via the curcat parameter...
CVE-2006-4586: Undefined Security Weakness
The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authenticated users to perform unauthorized actions, as demonstrated by modifying user settings via the id parameter to /membres/modifprofil.php, and changing a password via...
CVE-2006-4564: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Sources/ManageBoards.php in Simple Machines Forum 1.1 RC3 allows remote attackers to execute arbitrary SQL commands via the curcat parameter...
CVE-2006-4584: Undefined Security Weakness
Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and password parameters to admin/insertadmin.php...
CVE-2006-4585: Undefined Security Weakness
SQL injection vulnerability in admin/editer.php in Tr Forum 2.0 allows remote authenticated users to execute arbitrary SQL commands via the id2 parameter. NOTE: this can be leveraged with other Tr Forum vulnerabilities to allow unauthenticated attackers to gain privileges...
Zix Forum <= 1.12 (RepId) Remote SQL Injection Vulnerability
No description provided by source. ©ZIXForum 1.12 = "RepId" Remote SQL Injection - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Credit by | Chironex Fleckeri Mail | [email protected] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Username :...
Zix Forum 1.12 - RepId SQL Injection (1)
Zix Forum 1.12 - RepId SQL Injection 1 ©ZIXForum 1.12 = "RepId" Remote SQL Injection - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Credit by | Chironex Fleckeri Mail | [email protected] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Username :...
Zix Forum <= 1.12 (RepId) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================ Zix Forum = 1.12 RepId Remote SQL Injection Vulnerability ============================================================ ZIXForum 1.12 = "RepId" Remote SQL Injection - - - - - - - ...
Zix Forum 1.12 - 'RepId' SQL Injection (1)
©ZIXForum 1.12 = "RepId" Remote SQL Injection - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Credit by | Chironex Fleckeri Mail | [email protected] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Username :...
Tr Forum 2.0 SQL Injection / Bypass Security Restriction Exploit
No description provided by source. !/usr/bin/perl Affected.scr..: Tr Forum V2.0 Poc.ID........: 10060903 Type..........: SQL Injection, Bypass Security Restriction Risk.level....: Medium Vendor.Status.: Unpatched Src.download..: comscripts.com/scripts/php.tr-forum.1579.html Poc.link......:...
Tr Forum 2.0 SQL Injection / Bypass Security Restriction Exploit
Exploit for unknown platform in category web applications ================================================================ Tr Forum 2.0 SQL Injection / Bypass Security Restriction Exploit ================================================================ !/usr/bin/perl Affected.scr..: Tr Forum V2.0...
CVE-2006-4467
Simple Machines Forum SMF 1.1RCx before 1.1RC3, and 1.0.x before 1.0.8, does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to perform directory traversal attacks to read...
CVE-2006-4467
Simple Machines Forum SMF 1.1RCx before 1.1RC3, and 1.0.x before 1.0.8, does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to perform directory traversal attacks to read...
CVE-2006-4467
The CVE-2006-4467 entry applies to Simple Machines Forum (SMF) 1.1RCx prior to 1.1RC3 and 1.0.x prior to 1.0.8. The issue is a variable-unsetting flaw where input data containing a numeric parameter with a value that matches an alphanumeric parameter’s hash value prevents SMF from unsetting the c...
CVE-2006-4467: Undefined Security Weakness
Simple Machines Forum SMF 1.1RCx before 1.1RC3, and 1.0.x before 1.0.8, does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to perform directory traversal attacks to read...
asspxss.txt
Author:-=Mizo=- script:Forum Software © ASPPlayground.NET Advanced Edition 2.4.5 Unicode bug:-www.XXX./forum/calendar.asp?calendarID=|Xss| greetz to Mahbub,Lezr.com,3asfh.net and ReMoTer...
lforum240.txt
Title: l-forum = 2.4.0 Remote File Inclusion Vulnerability The bug is Discovered by Minus-Power Mail: minus-power at myway dot com Date: 19.Aug 2006 -= Republic of IRAN =- Thank you : R00TATI - Stansar & members of RS Damn to : All Arab & Turkish hackers...
Simple Machines Forum <= 1.1 rc2 Lock Topics Remote Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' -------------------------------------------------------------------------------- Simple Machines Forum = 1.1.RC2 "lock"/ZendHashDelKeyOrIndex Vulnerability by rgod [email protected] site:...
Simple Machines Forum (SMF) 1.1 rc2 - Lock Topics
Simple Machines Forum SMF 1.1 rc2 - Lock Topics !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i;...
Simple Machines Forum <= 1.1 rc2 Lock Topics Remote Exploit
Exploit for unknown platform in category web applications =========================================================== Simple Machines Forum = 1.1 rc2 Lock Topics Remote Exploit =========================================================== !/usr/bin/php -q -d shortopentag=on ? printr'...