Lucene search
+L

1501 matches found

zdt
zdt
added 2007/12/03 12:0 a.m.31 views

Snitz Forums 2000 Active.asp Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Snitz Forums 2000 Active.asp Remote SQL Injection Vulnerability =============================================================== AmnPardaz Security Research & Penetration Testi...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2007/12/03 12:0 a.m.17 views

Snitz Forums 2000 Active.asp Remote SQL Injection Vulnerability

No description provided by source. WwW.BugReport.IR AmnPardaz Security Research & Penetration Testing Group Title: A user can gain admin level in snitz 2000 by SQL Injection vendor: http://forum.snitz.com/ Googling: "Powered by Snitz" 2,440,000 victims Last bug report in 2007-02-16 with 4692...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/12/03 12:0 a.m.34 views

Snitz Forums 2000 - 'Active.asp' SQL Injection

WwW.BugReport.IR AmnPardaz Security Research & Penetration Testing Group Title: A user can gain admin level in snitz 2000 by SQL Injection vendor: http://forum.snitz.com/ Googling: "Powered by Snitz" 2,440,000 victims Last bug report in 2007-02-16 with 4692 visitors Exploit: Available Fix...

7.5CVSS5.8AI score0.01024EPSS
SaveExploits2
Prion
Prion
added 2007/11/15 10:46 p.m.11 views

Sql injection

SQL injection vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewcat s action on the forums page...

7.5CVSS9AI score0.01133EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2007/11/15 10:0 p.m.26 views

CVE-2007-5992

SQL injection vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewcat s action on the forums page...

8.3AI score0.01133EPSS
SaveExploits2References4
Packet Storm
Packet Storm
added 2007/11/15 12:0 a.m.30 views

freeforums-sql.txt

http://Aria-Security.net Aria-Security Team ------------------------------------ Free Forums Sql Injection Vendor: http://www.nvecs.com/forums the search parameter hast an sql injection example: 'having 1=1-- result: MicrosoftODBC Microsoft Access Driver Syntax error missing operator in query...

7.4AI score
SaveExploits0
Prion
Prion
added 2007/11/14 1:46 a.m.18 views

Code injection

Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...

5CVSS7.1AI score0.01064EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2007/11/14 1:46 a.m.12 views

CVE-2007-5943

Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...

5CVSS6.5AI score0.01064EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2007/11/14 1:0 a.m.20 views

CVE-2007-5943

Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...

6.5AI score0.01064EPSS
SaveExploits0References2
securityvulns
securityvulns
added 2007/11/14 12:0 a.m.49 views

Free Forums "search" Sql Injection

http://Aria-Security.net Aria-Security Team ------------------------------------ Free Forums Sql Injection Vendor: http://www.nvecs.com/forums the search parameter hast an sql injection example: 'having 1=1-- result: MicrosoftODBC Microsoft Access Driver Syntax error missing operator in query...

0.9AI score
SaveExploits0
CVE
CVE
added 2007/11/01 5:0 p.m.34 views

CVE-2002-2398

The vulnerability CVE-2002-2398 affects APBoard versions 2.02 and 2.03, where the new thread posting page allows remote attackers to post messages in protected forums by modifying the insertinto parameter. This is the only detail available in the provided documents; no root cause, affected file/f...

5CVSS7.1AI score0.01232EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2007/11/01 5:0 p.m.24 views

CVE-2002-2398

The new thread posting page in APBoard 2.02 and 2.03 allows remote attackers to post messages to protected forums by modifying the insertinto parameter...

6.7AI score0.01232EPSS
SaveExploits1References4
NVD
NVD
added 2007/10/29 7:46 p.m.27 views

CVE-2007-5688

Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums aka Multi Host Forum Pro module 1.3.3, for phpBB and Invision Power Board IPB or IP.Board, allow remote attackers to execute arbitrary SQL commands via the 1 go and 2 cat parameters...

7.5CVSS8.6AI score0.01002EPSS
SaveExploits2References5
Prion
Prion
added 2007/10/29 7:46 p.m.20 views

Sql injection

Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums aka Multi Host Forum Pro module 1.3.3, for phpBB and Invision Power Board IPB or IP.Board, allow remote attackers to execute arbitrary SQL commands via the 1 go and 2 cat parameters...

7.5CVSS9.3AI score0.01002EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
added 2007/10/29 7:0 p.m.39 views

CVE-2007-5688

Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums aka Multi Host Forum Pro module 1.3.3, for phpBB and Invision Power Board IPB or IP.Board, allow remote attackers to execute arbitrary SQL commands via the 1 go and 2 cat parameters...

8.6AI score0.01002EPSS
SaveExploits2References5
CVE
CVE
added 2007/10/29 7:0 p.m.66 views

CVE-2007-5688

CVE-2007-5688: Multiple SQL injection vulnerabilities in the Multi-Forums (aka Multi Host Forum Pro) module 1.3.3 for phpBB/IPB, in directory.php, allow remote attackers to execute arbitrary SQL via the (1) go and (2) cat parameters. Affected software is the Multi-Forums module version 1.3.3; roo...

7.5CVSS8.6AI score0.01002EPSS
SaveExploits2References5Affected Software3
exploitpack
exploitpack
added 2007/10/25 12:0 a.m.11 views

Multi-Forums - Directory.php Multiple SQL Injections

Multi-Forums - Directory.php Multiple SQL Injections source: https://www.securityfocus.com/bid/26213/info Multi-Forums is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in SQL queries. Exploiting these issues could allo...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/10/25 12:0 a.m.24 views

Multi-Forums - 'Directory.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/26213/info Multi-Forums is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in SQL queries. Exploiting these issues could allow an attacker to compromise the application, access o...

7.5CVSS5.8AI score0.01002EPSS
SaveExploits2
NVD
NVD
added 2007/10/24 11:46 p.m.20 views

CVE-2007-5676

PHP remote file inclusion vulnerability in modules/Forums/favorites.php in PHP-Nuke Platinum 7.6.b.5 allows remote attackers to execute arbitrary PHP code via a URL in the nukebbrootpath parameter...

6.8CVSS7.5AI score0.02291EPSS
SaveExploits1References3
Prion
Prion
added 2007/10/24 11:46 p.m.11 views

Remote file inclusion

PHP remote file inclusion vulnerability in modules/Forums/favorites.php in PHP-Nuke Platinum 7.6.b.5 allows remote attackers to execute arbitrary PHP code via a URL in the nukebbrootpath parameter...

6.8CVSS8AI score0.02291EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder