Apple Safari 2.0.4 - Cross-Domain Browser Location Information Disclosure

source: https://www.securityfocus.com/bid/24121/info Apple Safari is prone to an information-disclosure vulnerability because it fails to properly enforce cross-domain JavaScript restrictions. Exploiting this issue may allow attackers to access locations that a user visits, even if it's in a...

NavBoard 2.6.0 Remote Code Execution Exploit

Exploit for unknown platform in category web applications ============================================ NavBoard 2.6.0 Remote Code Execution Exploit ============================================ "; print ""; print ""; print "Main forum settings"; print ""; print "Board Title"; print ""; print "";...

NavBoard 2.6.0 - Remote Code Execution

"; print ""; print ""; print "Main forum settings"; print ""; print "Board Title"; print ""; print ""; print ""; print "Admin email address blank will not display"; print ""; print "input type=text name="adminemail" value="$configarr...

RealPlayer 10 - '.ra' Remote Denial of Service

!/usr/bin/python Real player 10 Gold .Ra file remote Dos. Credits to n00b for finding this bug This bug is a nasty memory leak with in Real player 10 gold please remember if your guna test it out save all your info you need first..Coz your probly guna have to reboot also remember all other...

Remote file inclusion

PHP remote file inclusion vulnerability in db/mysql.php in the Eve-Nuke 0.1 EN-Forums module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

Eve-Nuke Forums MySQL.PHP远程文件包含漏洞

Eve-Nuke Forums是一款基于PHP的WEB应用程序。 Eve-Nuke Forums不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'MySQL.PHP'脚本对用户提交的WEB参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Eve-Nuke Eve-Nuke Forum beta.01 目前没有解决方案提供： http://eve-nuke.sourceforge.net/...

CVE-2007-1778: Undefined Security Weakness

PHP remote file inclusion vulnerability in db/mysql.php in the Eve-Nuke 0.1 EN-Forums module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

Across the station through the kill vulnerability:support for the latest phpwind forums such as the.- Vulnerability warning-the black bar safety net

Information source: the Black art group Finishing editor: B. S. T As long as the back of the domain name is changed you have to jump on the domain names can be... Support wmv Forum the following post: wmv=314,256,1http://www.rootkit.com.cn/qq.swf?url=http://www.rootkit.com.cn/wmv Other forums...

Web Wiz Forums字符串过滤SQL注入漏洞

Web Wiz Forums是一款基于ASP的WEB应用程序。 Web Wiz Forums不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'page.asp'脚本对用户提交的'NewsID'参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 Web Wiz Forums 8.05a之前版本 升级到最新版本： http://www.webwizguide.info/news/newsitem.asp?NewsID=103 form method="post"...

Web Wiz Forums 8.05 (MySQL version) SQL Injection

There is a vulnerability in MySQL version of Web Wiz Forums, free ASP bulletin board system software, enabling SQL injection. The vulnerability is in the code used to filter string parameters prior to including them in the SQL queries: 'Format SQL Query funtion Private Function formatSQLInputByVa...

webwiz805-sql.txt

There is a vulnerability in MySQL version of Web Wiz Forums, free ASP bulletin board system software, enabling SQL injection. The vulnerability is in the code used to filter string parameters prior to including them in the SQL queries: 'Format SQL Query funtion Private Function formatSQLInputByVa...

CVE-2007-1548

SQL injection vulnerability in functions/functionsfilters.asp in Web Wiz Forums before 8.05a MySQL version does not properly filter certain characters in SQL commands, which allows remote attackers to execute arbitrary SQL commands via "' backslash double-quote quote sequences, which are collapse...

Sql injection

SQL injection vulnerability in functions/functionsfilters.asp in Web Wiz Forums before 8.05a MySQL version does not properly filter certain characters in SQL commands, which allows remote attackers to execute arbitrary SQL commands via "' backslash double-quote quote sequences, which are collapse...

CVE-2007-1548

CVE-2007-1548 : SQL injection in Web Wiz Forums (functions/functions_filters.asp) prior to version 8.05a (MySQL) due to improper filtering of certain characters in SQL commands. This allows remote attackers to execute arbitrary SQL via crafted input (e.g., the name parameter to forum/pop_up_membe...

CVE-2007-1548

SQL injection vulnerability in functions/functionsfilters.asp in Web Wiz Forums before 8.05a MySQL version does not properly filter certain characters in SQL commands, which allows remote attackers to execute arbitrary SQL commands via "' backslash double-quote quote sequences, which are collapse...

CVE-2007-1548: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in functions/functionsfilters.asp in Web Wiz Forums before 8.05a MySQL version does not properly filter certain characters in SQL commands, which allows remote attackers to execute arbitrary SQL commands via "' backslash double-quote quote sequences, which are collapse...

Web Wiz Forums 8.05 - String Filtering SQL Injection

source: https://www.securityfocus.com/bid/23051/info Web Wiz Forums is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modif...

Web Wiz Forums 8.05 - String Filtering SQL Injection

Web Wiz Forums 8.05 - String Filtering SQL Injection source: https://www.securityfocus.com/bid/23051/info Web Wiz Forums is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

webSPELL PHP Code Execution-vulnerability warning-the black bar safety net

Summary "webSPELL is a free Content Management System CMS for clans and gaming communities, providing all needed features like forums, gallery, clanwar system and co." There is a PHP code execution vulnerability in webSPELL. Credit: The information has been provided by milw0rm. The original artic...

CVE-2007-1374

Cross-site scripting XSS vulnerability in popprofile.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web script or HTML via the MSN parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...