Unclassified NewsBoard 1.6.4 SQL Injection / Disclosure

Author girex Homepage girex.altervista.org Date 31/05/2009 CMS Unclassified NewsBoard 1.6.4 and maybe lower Dork "This board is powered by the Unclassified NewsBoard software, 1.6.4" Multiple remote vulnerabilities 1 Remote SQL Injection php.ini regardless 2 Logs File Disclosure registerglobals =...

Unclassified NewsBoard 1.6.4 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ Unclassified NewsBoard 1.6.4 Multiple Remote Vulnerabilities ============================================================ Author girex Date 31/05/2009 CMS Unclassified NewsBoard...

Unclassified NewsBoard 1.6.4 Multiple Remote Vulnerabilities

No description provided by source. Author girex Homepage girex.altervista.org Date 31/05/2009 CMS Unclassified NewsBoard 1.6.4 and maybe lower Dork "This board is powered by the Unclassified NewsBoard software, 1.6.4" Multiple remote vulnerabilities 1 Remote SQL Injection php.ini regardless 2 Log...

unclassified NewsBoard 1.6.4 - Multiple Vulnerabilities

unclassified NewsBoard 1.6.4 - Multiple Vulnerabilities Author girex Homepage girex.altervista.org Date 31/05/2009 CMS Unclassified NewsBoard 1.6.4 and maybe lower Dork "This board is powered by the Unclassified NewsBoard software, 1.6.4" Multiple remote vulnerabilities 1 Remote SQL Injection...

unclassified NewsBoard 1.6.4 - Multiple Vulnerabilities

Author girex Homepage girex.altervista.org Date 31/05/2009 CMS Unclassified NewsBoard 1.6.4 and maybe lower Dork "This board is powered by the Unclassified NewsBoard software, 1.6.4" Multiple remote vulnerabilities 1 Remote SQL Injection php.ini regardless 2 Logs File Disclosure registerglobals =...

Multiple vulnerabilities in YaBook

Здравствуйте 3APA3A! Сообщаю вам о найденных мною SQL Injection, Redirector, HTTP Response Splitting, Information Leakage и Full path disclosure уязвимостях в YaBook. SQL Injection: http://site/guestbook/index.php?action=jump&id=-120union20select20version Redirector через SQL Injection:...

activeCollab XSS and Full Path Disclosure

activeCollab XSS and Full Path Disclosure Vuln. discovered by : r0t Date: 17 May 2009 Vendor:http://www.activecollab.com/ affected versions:2.1, corporate other versions also can be affected. orginal advisory: http://pridels-team.blogspot.com/2009/05/activecollab-xss-and-full-path.html 1.Cross-Si...

Vulnerabilities in OpenX

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Full path disclosure, Cross-Site Scripting и Redirector уязвимостях в OpenX. Full path disclosure: http://site/openx/www/delivery/fc.php?MAXtype=1 XSS: http://site/openx/www/delivery/fc.php?MAXtype=3Cscript3Ealertdocument.cookie3C/script3E XSS обх...

Multiple vulnerabilities in Webglimpse

Здравствуйте 3APA3A! Сообщаю вам о найденных мною множественных уязвимостях в Webglimpse. Это Full path disclosure, Cross-Site Scripting, Directory Traversal и Authorization bypass уязвимости. Уязвимости в админке Webglimpse в которую можно попасть через гостевой аккаунт, или захватив кукис админ...

Invision Power Board (IP.Board) 3.0.0b5 - Active Cross-Site Scripting Full Path Disclosure

Invision Power Board IP.Board 3.0.0b5 - Active Cross-Site Scripting Full Path Disclosure ================================================================================ Found : brainpillow Dork : "Powered By IP.Board 3.0.0 Beta 5" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Greetz:...

Invision Power Board (IP.Board) 3.0.0b5 - Active Cross-Site Scripting / Full Path Disclosure

================================================================================ Found : brainpillow Dork : "Powered By IP.Board 3.0.0 Beta 5" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Greetz: slider, halkfild, m0nzt3r, c411k, ettee Mail : [email protected] Note: works on IE 6,7,8...

moziloCMS 1.11 - Local File Inclusion / Full Path Disclosure / Cross-Site Scripting

moziloCMS 1.11 LFI/PD/XSS Multiple Remote Vulnerabilites + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Local File Inclusion PoC 1 : http://127.0.0.1/index.php?cat=10Willkommen&page=../../../../../BOOTSECT.BAK%00 PoC 2 :...

DEBIAN-CVE-2009-0842

mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to read arbitrary invalid .map files via a full pathname in the map parameter, which triggers the display of partial file contents within an error message, as demonstrated by a /tmp/sekrut.map symlink...

Woltlab Burning Board 3.0.x Multiple Remote Vulnerabilities

No description provided by source. +---------------------------------------------------------------------------+ | Woltlab Burning Board 3.0.x Multiple Remote Vulnerabilities | +---------------------------------------------------------------------------+ | by Juri Gianni aka yeat -...

Woltlab Burning Board 3.0.x Cross Site Scripting

+---------------------------------------------------------------------------+ | Woltlab Burning Board 3.0.x Multiple Remote Vulnerabilities | +---------------------------------------------------------------------------+ | by Juri Gianni aka yeat - stakerathotmaildotit | | thanks to s3rg3770 |...

Woltlab Burning Board 3.0.x Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== Woltlab Burning Board 3.0.x Multiple Remote Vulnerabilities ===========================================================...

woltlab burning board 3.0.x - Multiple Vulnerabilities

woltlab burning board 3.0.x - Multiple Vulnerabilities +---------------------------------------------------------------------------+ | Woltlab Burning Board 3.0.x Multiple Remote Vulnerabilities | +---------------------------------------------------------------------------+ | by Juri Gianni aka...

woltlab burning board 3.0.x - Multiple Vulnerabilities

+---------------------------------------------------------------------------+ | Woltlab Burning Board 3.0.x Multiple Remote Vulnerabilities | +---------------------------------------------------------------------------+ | by Juri Gianni aka yeat - stakerathotmaildotit | | thanks to s3rg3770 |...

Full Path Disclosure In Photolibrary 1.009

============================================================ !vuln Photolibrary 1.009 Previous versions may also be affected. ============================================================ ============================================================ !risk Low There are currently just a few websites...

New vulnerabilities in FCKeditor

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Full path disclosure и Cross-Site Scripting уязвимостях в FCKeditor. Full path disclosure: Если в test.html в поле Current Folder ввести “”, то можно узнать полный путь в системе. Или можно сделать GET-запрос к соответствующему конектору:...