Snitz Forums 2000 - Multiple Cross-Site Scripting Vulnerabilities

Application: Snitz Forums 2000 Version affected: 3.4.07 Website: http://forum.snitz.com/ Discovered By: Andrea Fabrizi Email: andrea.fabrizi gmail com Web: http://www.andreafabrizi.it Vuln: Multiple Cross-Site Scripting PERMANENT XSS If sound tag is allowed: soundhttp://urltovalidmp3orm3ufile.m3u...

Snitz Forums 2000 3.4.7 - Sound Tag Onload Attribute Cross-Site Scripting

source: https://www.securityfocus.com/bid/36710/info Snitz Forums 2000 is prone to a cross-site scripting vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the...

PT-2009-5921 · Power · Power Bulletin Board

Name of the Vulnerable Software and Affected Versions: Power Bulletin Board versions 2.0.2 and earlier Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the id parameter in a "new topic" action. This occurs in the forums/index.php file...

Malware Flea Market Pays Hackers to Hijack PCs

Among a slew of online cybercrime forums, Pay-Per-Install.org stands out as a malware flea market where shadowy pushers of Trojan downloaders and tools for evading detection are bargaining with thousands of would-be “affiliates” willing to compromise victims’ computers globally and get paid for i...

Directory traversal

Directory traversal vulnerability in the getlang function in global.php in Quicksilver Forums 1.4.2 and earlier, as used in QSF Portal before 1.4.5, when running on Windows, allows remote attackers to include and execute arbitrary local files via a "" backslash in the lang parameter to index.php,...

CVE-2008-7064

Directory traversal vulnerability in the getlang function in global.php in Quicksilver Forums 1.4.2 and earlier, as used in QSF Portal before 1.4.5, when running on Windows, allows remote attackers to include and execute arbitrary local files via a "" backslash in the lang parameter to index.php,...

CVE-2008-7064

CVE-2008-7064 affects Quicksilver Forums 1.4.2 and earlier and QSF Portal before 1.4.5. The vulnerability is a directory traversal via the lang parameter in index.php that accepts a backslash () in Windows, bypassing a protection that only checks for forward slashes and can lead to including/exec...

CVE-2008-7064

Directory traversal vulnerability in the getlang function in global.php in Quicksilver Forums 1.4.2 and earlier, as used in QSF Portal before 1.4.5, when running on Windows, allows remote attackers to include and execute arbitrary local files via a "" backslash in the lang parameter to index.php,...

PT-2009-2533 · Quicksilver +1 · Quicksilver Forums +2

Name of the Vulnerable Software and Affected Versions: Quicksilver Forums versions 1.4.2 and earlier QSF Portal versions prior to 1.4.5 Description: The issue allows remote attackers to include and execute arbitrary local files via a "" backslash in the lang parameter to "index.php". This bypasse...

Joomla Component Kunena Forums (com_kunena) bSQL Injection Exploit

No description provided by source. ?php iniset"maxexecutiontime",0; printr' Joomla Kunena Forums func Blind SQL Injection Exploit MEFISTO a.k.a ilkerkandemir mefisto at hackermail . com IMT imhatimi.org Usage: target.php siteSQL '; if $argc 1 $url = $argv1; $r =...

Joomla! Component Kunena Forums (com_kunena) - Blind SQL Injection

Joomla! Component Kunena Forums comkunena - Blind SQL Injection 1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0--"; $t = abs100-$w/$r100; echo "Username: "; for $i=1; $i $t-1 $count = $i; $i = 30; for $j = 1; $j $t-1...

Joomla Kunena Forums SQL Injection

1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0--"; $t = abs100-$w/$r100; echo "Username: "; for $i=1; $i $t-1 $count = $i; $i = 30; for $j = 1; $j $t-1 $laenge =...

Joomla! Component Kunena Forums (com_kunena) - Blind SQL Injection

1 $url = $argv1; $r = strlenfilegetcontents$url."+and+1=1--"; echo "\nExploiting:\n"; $w = strlenfilegetcontents$url."+and+1=0--"; $t = abs100-$w/$r100; echo "Username: "; for $i=1; $i $t-1 $count = $i; $i = 30; for $j = 1; $j $t-1 $laenge =...

Snitz Forums 2000 <= 3.4.07 register.asp 'Email' Parameter SQL Injection

The remote version of Snitz Forums 2000 is vulnerable to a SQL injection attack. The domain name of the email address passed to the 'Email' parameter of 'register.asp' is not sanitized before being used in a SQL query. A remote attacker could exploit this to execute arbitrary SQL queries. Note th...

Snitz Forums 2000 Detection

Snitz Forums 2000, a free discussion forum application written in ASP, was detected on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid40469; scriptversion"1.17"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12";...

Snitz Forums 2000 'register.asp' SQL注入漏洞

Bugraq ID: 35764 Snitz Forums 2000是一款基于ASP的论坛程序。 Snitz Forums 2000不正确处理用户输入，远程攻击者可以利用漏洞获得敏感信息或对数据库进行操作。 register.asp脚本对"Email"参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或对数据库进行操作。 Snitz Forums 2000 Snitz Forums 2000 3.4.7 目前没有解决方案提供： http://forum.snitz.com/...

CVE-2008-6872

ASPThai.NET ASPThai Forums 8.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/aspthaiForum.mdb...

Improper access control

ASPThai.NET ASPThai Forums 8.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/aspthaiForum.mdb...

CVE-2008-6872

ASPThai.NET ASPThai Forums 8.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/aspthaiForum.mdb...

CVE-2008-6872

Affected software: ASPThai.NET ASPThai Forums 8.5. The vulnerability is improper access control that lets an attacker access the webroot-stored database file database/aspthaiForum.mdb via a direct request, exposing sensitive data. This is the underlying cause: insecure storage and access control ...