CVE-2012-4873

Cross-site scripting XSS vulnerability in the filedownload function in GNUBoard before 4.34.21 allows remote attackers to inject arbitrary web script or HTML via the filename parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the filedownload function in GNUBoard before 4.34.21 allows remote attackers to inject arbitrary web script or HTML via the filename parameter...

CVE-2012-4873

Cross-site scripting XSS vulnerability in the filedownload function in GNUBoard before 4.34.21 allows remote attackers to inject arbitrary web script or HTML via the filename parameter...

CVE-2012-4873

GNUBoard is vulnerable to an XSS in the file_download function via the filename parameter, affecting versions before 4.34.21. The root cause is improper handling of the filename input leading to script/HTML injection. Remediation: upgrade to GNUBoard 4.34.21 or apply the provided patch. Public re...

GNUBoard <= 4.34.30 Cross Site Scripting vulnerabilities

Exploit for php platform in category web applications Exploit Title: GNUBoard alert"XSS"?srows=10&grid=&sfl=wrsubject%7C%7Cwrcontent&stx=a&sop=and second case: normal http://127.0.0.1/gnuboard2/bbs/point.php?&page=2&page=1 attack need next page for attack...

GNUBoard 4.34.20 - download.php HTML Injection

GNUBoard 4.34.20 - download.php HTML Injection source: https://www.securityfocus.com/bid/52622/info Gnuboard is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script co...

GNUBoard 4.34.20 - 'download.php' HTML Injection

source: https://www.securityfocus.com/bid/52622/info Gnuboard is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the context of the affected...

Gnuboard 4.34.20 Cross Site Scripting

Exploit Title: gnuboard = 4.34.20 XSS vulnerability via arbitrary file name Date: 2012-03-12 Author: wh1ant Software Link: http://sir.co.kr/bbs/board.php?botable=g4pds&wrid=7108 Version: gnuboard = 4.34.20 Tested on: windows 7 Ultimate K Company: trinitysoft Group: secuholic 1 Vulnerability...

gnuboard <= 4.34.20 XSS vulnerability via arbitrary file name

Exploit for php platform in category web applications Exploit Title: gnuboard = 4.34.20 XSS vulnerability via arbitrary file name Date: 2012-03-12 Author: wh1ant Software Link: http://sir.co.kr/bbs/board.php?botable=g4pds&wrid=7108 Version: gnuboard = 4.34.20 Tested on: windows 7 Ultimate K...

CVE-2011-4066

SQL injection vulnerability in bbs/tb.php in Gnuboard 4.33.02 and earlier allows remote attackers to execute arbitrary SQL commands via the PATHINFO...

Sql injection

SQL injection vulnerability in bbs/tb.php in Gnuboard 4.33.02 and earlier allows remote attackers to execute arbitrary SQL commands via the PATHINFO...

CVE-2011-4066

SQL injection vulnerability in bbs/tb.php in Gnuboard 4.33.02 and earlier allows remote attackers to execute arbitrary SQL commands via the PATHINFO...

CVE-2011-4066

Gnuboard 4.33.02 and earlier contains a PATH_INFO-based SQL injection in bbs/tb.php that allows remote attackers to execute arbitrary SQL commands. Multiple sources (NVD entry CVE-2011-4066, Seebug/Exploit-DB listings) document this vulnerability and provide exploit examples, indicating that expl...

Gnuboard 4.33.02 SQL Injection

Exploit Title: Gnuboard = 4.33.02 PATHINFO SQL INJECTION Vulnerability Google Dork: inurl:gnuboard4/bbs/board.php Date: 2011-2-14 Author: flyh4t Software Link: http://sir.co.kr/main/gnuboard4/ Version: Gnuboard = 4.33.02 Tested on: linux+apache CVE : CVE-2011-4066 Gnuboard = 4.33.02 PATHINFO SQL...

GNUBoard 4.33.02 - tp.php?PATH_INFO SQL Injection

GNUBoard 4.33.02 - tp.php?PATHINFO SQL Injection Exploit Title: Gnuboard = 4.33.02 PATHINFO SQL INJECTION Vulnerability Google Dork: inurl:gnuboard4/bbs/board.php Date: 2011-2-14 Author: flyh4t Software Link: http://sir.co.kr/main/gnuboard4/ Version: Gnuboard = 4.33.02 Tested on: linux+apache CVE...

GNUBoard 4.33.02 - 'tp.php?PATH_INFO' SQL Injection

Exploit Title: Gnuboard = 4.33.02 PATHINFO SQL INJECTION Vulnerability Google Dork: inurl:gnuboard4/bbs/board.php Date: 2011-2-14 Author: flyh4t Software Link: http://sir.co.kr/main/gnuboard4/ Version: Gnuboard = 4.33.02 Tested on: linux+apache CVE : CVE-2011-4066 Gnuboard = 4.33.02 PATHINFO SQL...

Gnuboard <= 4.33.02 tp.php PATH_INFO SQL Injection

Exploit for php platform in category web applications Exploit Title: Gnuboard = 4.33.02 PATHINFO SQL INJECTION Vulnerability Google Dork: inurl:gnuboard4/bbs/board.php Date: 2011-2-14 Author: flyh4t Software Link: http://sir.co.kr/main/gnuboard4/ Version: Gnuboard = 4.33.02 Tested on: linux+apach...

South Korea Gnuboard 0day&Exp-vulnerability warning-the black bar safety net

Still from 棒子国=.= ? php echo" +----------------------------------------------------------------+\r\n"; echo" "; echo" +----------------------------------------------------------------+\r\n"; for $ii=1;$ii=9 9;$ii++ $c=int$ii1 0+1; $a="web.search.naver.com"; $b="/search. naver?...

gnuboard 4 Remote Upload Vulnerability

Exploit for php platform in category web applications ====================================== gnuboard 4 Remote Upload Vulnerability ====================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/...

South Korea gnuboard Forum vulnerability EXP and the use of method-vulnerability warning-the black bar safety net

The machine is set up the PHP environment 2.将EXP程序保存为akt.php 3. CMD is executed under php akt.php 4. Generated akt. txt records in the success URL 5.http://目标URL/data/hardison.php password: akteam with PHP connection EXP: Copy the code ? php echo"...