CVE-2005-3584

CVE-2005-3584 is a cross-site scripting (XSS) vulnerability in PhpWebThings 1.4.4, exploitable through forum.php via the forum parameter. The underlying issue is insufficient input sanitization for that parameter, enabling remote attackers to inject arbitrary web script or HTML. The connected doc...

CVE-2005-3584: Undefined Security Weakness

Cross-site scripting XSS vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to inject arbitrary web script or HTML via the forum parameter...

PHPWebThings <= 1.4 (forum) SQL Injection Exploit

No description provided by source. !/bin/bin/perl ----------------------------------------------------- - SQL injection in phpwebthing v 1.4.4 - Founder by Qptan & Exploting by AhLam - www.leZe.Com Only For Geek Hacker's - coded by AhLaM A.1.M|at|hotmail.com -...

CVE-2005-3585: Undefined Security Weakness

SQL injection vulnerability in forum.php in PhpWebThings 1.4.4 allows remote attackers to execute arbitrary SQL commands via the forum parameter...

PHPWebThings 1.4 - forum SQL Injection

PHPWebThings 1.4 - forum SQL Injection !/bin/bin/perl ----------------------------------------------------- - SQL injection in phpwebthing v 1.4.4 - Founder by Qptan & Exploting by AhLam - www.leZe.Com Only For Geek Hacker's - coded by AhLaM A.1.M|at|hotmail.com -...

PHPWebThings <= 1.4 (msg/forum) SQL Injection Exploit

No description provided by source. ?php ---phpwebth14xpl.php 10.47 16/11/2005 PHPWebThings 1.4 "msg" and "forum" SQL injection / Administrative credentials disclosure and remote commands execution coded by rgod site: http://rgod.altervista.org based on http://secunia.com/advisories/17410/, but he...

CVE-2002-2200: Undefined Security Weakness

Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the "subpath" variablein 1 entete.php, 2 enteteacceuil.php, 3 index.php, or 4 newtopic.php...

CVE-2002-2190: Undefined Security Weakness

ArtsCore Studios CuteCast Forum 1.2 stores passwords in plaintext under the web document root, which allows remote attackers to obtain the passwords via an HTTP request to a .user file...

CVE-2005-3552: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PHPKIT 1.6.1 R2 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple vectors in 1 login/profile.php, 2 login/userinfo.php, 3 admin/admin.php, 4 imcenter.php, and the 5 referer statistics, the 6 HTML title eleme...

wizzSQL.txt

Hello,, Multible Sql injections in Wizz Forum ,, Discovered by : HACKERS PAL Thanks For :: DeviL-00 - AbducterAbducterMinds - almaster -=-=-=-=-=-=-=-=-=-=-=-=-=-=- file : ForumAuthDetails.php...

Multible Sql injections in Wizz Forum

Hello,, Multible Sql injections in Wizz Forum ,, Discovered by : HACKERS PAL Thanks For :: DeviL-00 - AbducterAbducterMinds - almaster -=-=-=-=-=-=-=-=-=-=-=-=-=-=- file : ForumAuthDetails.php...

Multiple Bugs in MyBB 1.0 PR2 Rev 686(Updated Nov 1, 2005)

Description: MyBB is a powerful, efficient and free forum package developed in PHP and MySQL. MyBB has been designed with the end users in mind, you and your subscribers. Full control over your discussion system is presented right at the tip of your fingers, from multiple styles and themes to the...

Wizz Forum 1.20 (TopicID) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================== Wizz Forum 1.20 TopicID Remote SQL Injection Exploit ====================================================== !/bin/env perl //-----------------------------------------------------------...

Wizz Forum 1.20 (TopicID) Remote SQL Injection Exploit

No description provided by source. !/bin/env perl //----------------------------------------------------------- // Wizz Forum SQL Injection Exploit .. By HACKERS PAL // Greets For Devil-00 - Abducter - Almaster // http://WwW.SoQoR.NeT //-----------------------------------------------------------...

Wizz Forum 1.20 - TopicID SQL Injection

Wizz Forum 1.20 - TopicID SQL Injection !/bin/env perl //----------------------------------------------------------- // Wizz Forum SQL Injection Exploit .. By HACKERS PAL // Greets For Devil-00 - Abducter - Almaster // http://WwW.SoQoR.NeT...

Wizz Forum - ForumAuthDetails.php?AuthID SQL Injection

Wizz Forum - ForumAuthDetails.php?AuthID SQL Injection source: https://www.securityfocus.com/bid/15410/info Wizz Forum is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Cyphor 0.19 (show.php id) Remote SQL Injection Exploit

No description provided by source. !/bin/env perl //----------------------------------------------------------- // Cyphor Forum SQL Injection Exploit .. By HACKERS PAL // Greets For Devil-00 - Abducter - Almaster // http://WwW.SoQoR.NeT //----------------------------------------------------------...

Wizz Forum - 'forumreply.php?TopicID' SQL Injection

source: https://www.securityfocus.com/bid/15410/info Wizz Forum is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise o...

Wizz Forum 1.20 - 'TopicID' SQL Injection

!/bin/env perl //----------------------------------------------------------- // Wizz Forum SQL Injection Exploit .. By HACKERS PAL // Greets For Devil-00 - Abducter - Almaster // http://WwW.SoQoR.NeT //----------------------------------------------------------- use LWP::Simple; print "\n"; print...

Wizz Forum - 'ForumAuthDetails.php?AuthID' SQL Injection

source: https://www.securityfocus.com/bid/15410/info Wizz Forum is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise o...