CVE-2006-2676

CVE-2006-2676 affects SiteScape Forum 7.2 and possibly earlier. The vulnerability involves Dispatch.cgi/_user/uservCard/ returning responses that differ in a way that allows remote attackers to enumerate valid usernames. The NVD entry lists a CVSS v2 base score of 5.0 (MEDIUM), with network attac...

CVE-2006-2676: Undefined Security Weakness

Dispatch.cgi/user/uservCard/ in SiteScape Forum 7.2 and possibly earlier generates different responses in a way that allows remote attackers to enumerate valid usernames...

CVE-2006-2677: Undefined Security Weakness

SiteScape Forum 7.2 and possibly earlier stores the avf.rc configuraiton file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive path information...

CVE-2006-2674

Multiple SQL injection vulnerabilities in Tamber Forum 1.9.13 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 frmid parameter to a showforum.asp, 2 a search field to b forumsearch.asp, 3 Email address or 4 Password to c admin/index.asp, 5 frmcatid parameter to d...

Sql injection

Multiple SQL injection vulnerabilities in Tamber Forum 1.9.13 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 frmid parameter to a showforum.asp, 2 a search field to b forumsearch.asp, 3 Email address or 4 Password to c admin/index.asp, 5 frmcatid parameter to d...

CVE-2006-2674

CVE-2006-2674 affects Tamber Forum 1.9.13 and earlier. Multiple SQL injection vulnerabilities exist in the web application, exploitable via parameters and fields in (a) show_forum.asp (frm_id), (b) forum_search.asp (search field), (c) admin/index.asp (Email/Password), (d) browse_forum_cat.asp (fr...

CVE-2006-2674

Multiple SQL injection vulnerabilities in Tamber Forum 1.9.13 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 frmid parameter to a showforum.asp, 2 a search field to b forumsearch.asp, 3 Email address or 4 Password to c admin/index.asp, 5 frmcatid parameter to d...

CVE-2006-2674: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Tamber Forum 1.9.13 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 frmid parameter to a showforum.asp, 2 a search field to b forumsearch.asp, 3 Email address or 4 Password to c admin/index.asp, 5 frmcatid parameter to d...

Speedy ASP Forum(profileupdate.asp) User Pass Change Exploit

Title : Speedy ASP Forumprofileupdate.asp User Pass Change Exploit Dork : Copyright © ASPwebSoft Author : ajann greetz : Nukedx Code: Save to .htm titlePass Change/title script language="JavaScript" //Coded ajann function islemKontrol ifdocument.InputForm.name.value=="" ||...

Speedy ASP Forum (profileupdate.asp) User Pass Change Exploit

Exploit for unknown platform in category web applications ============================================================= Speedy ASP Forum profileupdate.asp User Pass Change Exploit ============================================================= Speedy Forum User Pass Change // ajannUser Name :...

Speedy ASP Forum (profileupdate.asp) User Pass Change Exploit

No description provided by source. !DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"htmlheadMETA http-equiv="Content-Type" content="text/html; charset=utf-8"/headbody div bgcolor="000000" form name="InputForm" method="post" target="blank" onsubmit="return window.confirm"You are...

SpeedyASPForum.txt

Title : Speedy ASP Forumprofileupdate.asp User Pass Change Exploit Dork : Copyright © ASPwebSoft Author : ajann greetz : Nukedx Code: Save to .htm Pass Change //Coded ajann function islemKontrol ifdocument.InputForm.name.value=="" || document.InputForm.email.value=="" ||...

Speedy ASP Forum - 'profileupdate.asp' User Pass Change

Speedy Forum User Pass Change // ajannUser Name : Example: Surname Name User Mail : Example: [email protected] User Ýd : Example: Ýd:1 Admin User Country : Choose Country Turkey Example: Turkey User Pass /f...

Tamber Forum <= 1.9.13 Multiple SQL Injection Vulnerabilities

ENGLISH Title : Tamber Forum = 1.9.13 Multiple SQL Injection Vulnerabilities Author : ajann Exploit; SQL INJECTON-------------------------------------------------------- http://target/path/showforum.asp?frmid=55'SQL TEXT http://target/path/forumsearch.asp SEARCH FOR:SQL TEXT...

Toasts Forums 1.6.44 in Xss

ENGLISH Title : Toast Forums 1.6.44 in Xss Author : ajann Exploit; XSS Example Forum Post Message,Reply.. IMG onmouseover=Javascript:alertdocument.domain src="x.gif" Alert: xxx.com / ajann,Turkey TURKISH Baslk : Toast Forums 1.6.44 in Xss Ac Bulan : ajann Ack bulunan dosyalar; Foruma post...

View Topic Flood phpBB, MercuryBoard, Vbulletin, Ipb

/ ,, / / '-./.-' .--' '--. / / /"" SpiderZ ForumZ Security | | | | / / '..' • Xss Freebb All Version • Author: SpiderZ • Sito: http://www.spiderz.altervista.org • Sito2: https://www.spiderz.netsons.org Xss freebb Sito ufficiale frebb http://www.free-bb.com/fr/ Url :...

zix112.txt

Zix Forum = 1.12 layid SQL Injection Vulnerability Vulnerability: -------------------- SQLInjection: Input passed to the "layid" parameter in 'settings.asp' not properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code...

Zix Forum <= 1.12 (layid) SQL Injection Vulnerability

Zix Forum = 1.12 layid SQL Injection Vulnerability Vulnerability: -------------------- SQLInjection: Input passed to the "layid" parameter in 'settings.asp' not properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code...

Get leadbbs Forum Station webshell after the background of the most simple method-vulnerability warning-the black bar safety net

This article has been published in the hacker Handbook on non-security magazine, are copyright of their have! Reprint note. In fact, the ASP Forum, my favorite is leadbbs, stability, speed, and space occupied is also small, compared to the massive DVBBS can be a small more, speaking of security, ...

[SECURITY] [DSA 1063-1] New phpgroupware packages fix execution of arbitrary web script code

-------------------------------------------------------------------------- Debian Security Advisory DSA 1063-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 8th, 2006 http://www.debian.org/security/faq -...