1501 matches found
Remote file inclusion
PHP remote file inclusion vulnerability in db/mysql.php in the Eve-Nuke 0.1 EN-Forums module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
Eve-Nuke Forums MySQL.PHP远程文件包含漏洞
Eve-Nuke Forums是一款基于PHP的WEB应用程序。 Eve-Nuke Forums不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'MySQL.PHP'脚本对用户提交的WEB参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Eve-Nuke Eve-Nuke Forum beta.01 目前没有解决方案提供： http://eve-nuke.sourceforge.net/...
Across the station through the kill vulnerability:support for the latest phpwind forums such as the.- Vulnerability warning-the black bar safety net
Information source: the Black art group Finishing editor: B. S. T As long as the back of the domain name is changed you have to jump on the domain names can be... Support wmv Forum the following post: wmv=314,256,1http://www.rootkit.com.cn/qq.swf?url=http://www.rootkit.com.cn/wmv Other forums...
Web Wiz Forums字符串过滤SQL注入漏洞
Web Wiz Forums是一款基于ASP的WEB应用程序。 Web Wiz Forums不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'page.asp'脚本对用户提交的'NewsID'参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 Web Wiz Forums 8.05a之前版本 升级到最新版本： http://www.webwizguide.info/news/newsitem.asp?NewsID=103 form method="post"...
Web Wiz Forums 8.05 (MySQL version) SQL Injection
There is a vulnerability in MySQL version of Web Wiz Forums, free ASP bulletin board system software, enabling SQL injection. The vulnerability is in the code used to filter string parameters prior to including them in the SQL queries: 'Format SQL Query funtion Private Function formatSQLInputByVa...
webwiz805-sql.txt
There is a vulnerability in MySQL version of Web Wiz Forums, free ASP bulletin board system software, enabling SQL injection. The vulnerability is in the code used to filter string parameters prior to including them in the SQL queries: 'Format SQL Query funtion Private Function formatSQLInputByVa...
CVE-2007-1548
SQL injection vulnerability in functions/functionsfilters.asp in Web Wiz Forums before 8.05a MySQL version does not properly filter certain characters in SQL commands, which allows remote attackers to execute arbitrary SQL commands via "' backslash double-quote quote sequences, which are collapse...
Sql injection
SQL injection vulnerability in functions/functionsfilters.asp in Web Wiz Forums before 8.05a MySQL version does not properly filter certain characters in SQL commands, which allows remote attackers to execute arbitrary SQL commands via "' backslash double-quote quote sequences, which are collapse...
CVE-2007-1548
CVE-2007-1548 : SQL injection in Web Wiz Forums (functions/functions_filters.asp) prior to version 8.05a (MySQL) due to improper filtering of certain characters in SQL commands. This allows remote attackers to execute arbitrary SQL via crafted input (e.g., the name parameter to forum/pop_up_membe...
CVE-2007-1548
SQL injection vulnerability in functions/functionsfilters.asp in Web Wiz Forums before 8.05a MySQL version does not properly filter certain characters in SQL commands, which allows remote attackers to execute arbitrary SQL commands via "' backslash double-quote quote sequences, which are collapse...
Web Wiz Forums 8.05 - String Filtering SQL Injection
Web Wiz Forums 8.05 - String Filtering SQL Injection source: https://www.securityfocus.com/bid/23051/info Web Wiz Forums is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
Web Wiz Forums 8.05 - String Filtering SQL Injection
source: https://www.securityfocus.com/bid/23051/info Web Wiz Forums is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modif...
webSPELL PHP Code Execution-vulnerability warning-the black bar safety net
Summary "webSPELL is a free Content Management System CMS for clans and gaming communities, providing all needed features like forums, gallery, clanwar system and co." There is a PHP code execution vulnerability in webSPELL. Credit: The information has been provided by milw0rm. The original artic...
Cross site scripting
Cross-site scripting XSS vulnerability in popprofile.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web script or HTML via the MSN parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-1374
Cross-site scripting XSS vulnerability in popprofile.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web script or HTML via the MSN parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2007-1374
This entry documents a Cross-site scripting (XSS) vulnerability in Snitz Forums 2000, version 3.4.06, specifically in the pop_profile.asp component where an attacker can inject arbitrary script or HTML via the MSN parameter. The vulnerability is described consistently across CVE and NVD sources, ...
CVE-2007-1374
Cross-site scripting XSS vulnerability in popprofile.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web script or HTML via the MSN parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
webspell40-multi.txt
WebSpell Authentication Bypass and arbitrary code execution Vendor : WebSpell URL : http://www.webspell.org/ Version : All Risk : SQL Injection, unchecked file upload Description: webSPELL is a free Content Management System CMS for clans and gaming communities, providing all needed features like...
JBrowser acces to admin/config files
JBrowser acces to admin/config files By : sn0oPy Risk : high Dork : inurl:"JBrowser/index.php" exploit : juste replace the http://www.target.ma/jbrowser/index.php by http://www.target.ma/jbrowser/admin/ contact : [email protected] greetz : subzero, Avg...