GNUBoard 4.33.02 - 'tp.php?PATH_INFO' SQL Injection

Exploit Title: Gnuboard = 4.33.02 PATHINFO SQL INJECTION Vulnerability Google Dork: inurl:gnuboard4/bbs/board.php Date: 2011-2-14 Author: flyh4t Software Link: http://sir.co.kr/main/gnuboard4/ Version: Gnuboard = 4.33.02 Tested on: linux+apache CVE : CVE-2011-4066 Gnuboard = 4.33.02 PATHINFO SQL...

Gnuboard 4.33.02 SQL Injection

Exploit Title: Gnuboard = 4.33.02 PATHINFO SQL INJECTION Vulnerability Google Dork: inurl:gnuboard4/bbs/board.php Date: 2011-2-14 Author: flyh4t Software Link: http://sir.co.kr/main/gnuboard4/ Version: Gnuboard = 4.33.02 Tested on: linux+apache CVE : CVE-2011-4066 Gnuboard = 4.33.02 PATHINFO SQL...

Gnuboard <= 4.33.02 tp.php PATH_INFO SQL Injection

Exploit for php platform in category web applications Exploit Title: Gnuboard = 4.33.02 PATHINFO SQL INJECTION Vulnerability Google Dork: inurl:gnuboard4/bbs/board.php Date: 2011-2-14 Author: flyh4t Software Link: http://sir.co.kr/main/gnuboard4/ Version: Gnuboard = 4.33.02 Tested on: linux+apach...

South Korea Gnuboard 0day&Exp-vulnerability warning-the black bar safety net

Still from 棒子国=.= ? php echo" +----------------------------------------------------------------+\r\n"; echo" "; echo" +----------------------------------------------------------------+\r\n"; for $ii=1;$ii=9 9;$ii++ $c=int$ii1 0+1; $a="web.search.naver.com"; $b="/search. naver?...

gnuboard 4 Remote Upload Vulnerability

Exploit for php platform in category web applications ====================================== gnuboard 4 Remote Upload Vulnerability ====================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/...

South Korea gnuboard Forum vulnerability EXP and the use of method-vulnerability warning-the black bar safety net

The machine is set up the PHP environment 2.将EXP程序保存为akt.php 3. CMD is executed under php akt.php 4. Generated akt. txt records in the success URL 5.http://目标URL/data/hardison.php password: akteam with PHP connection EXP: Copy the code ? php echo"...

South Korea gnuboard Forum vulnerability EXP and method of use-vulnerability warning-the black bar safety net

Excerpt from: the Red section of the network security http://bbs.honkwin.com 1. The machine is set up the PHP environment 2.将EXP程序保存为akt.php 3. CMD is executed under php akt.php 4. Generated akt. txt records in the success URL 5.http://目标URL/data/hardison.php password: akteam with PHP connection...

South Korea Gnuboard 0day&Exp-vulnerability warning-the black bar safety net

Still from 棒子国=.= ? php echo" +----------------------------------------------------------------+\r\n"; echo" http://www.t00ls.net\r\n"; echo" +----------------------------------------------------------------+\r\n"; for $ii=1;$ii=9 9;$ii++ $c=int$ii1 0+1; $a="web.search.naver.com"; $b="/search...

GnuBoard 文件包含漏洞&amp;远程代码执行漏洞

GnuBoard是韩国比较常见的一个论坛，存在较多的漏洞，其中common.php存在一个文件包含漏洞 看common.php代码 @extract$GET; @extract$POST; @extract$SERVER; …… if !$g4path || pregmatch"/:///", $g4path die"meta http-equiv='content-type' content='text/html; charset=$g4charset'script language='JavaScript' alert'肋给等 规过栏肺 函荐啊 沥狼登菌嚼聪促.';...

ZeroBoard4 LFI / SQL Injection / Bypass

ZeroBoard4 pl8 07.12.17 Multiple Remote/Local Vulnerability bY [email protected] thx to : Flyh4t / ZeroBoard4 VERSION pl8 07.12.17is most famous and widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL. There are Remote File Inclusion?,...

GNUBoard 4.31.04 (09.01.30) - Multiple LocalRemote Vulnerabilities

GNUBoard 4.31.04 09.01.30 - Multiple LocalRemote Vulnerabilities GNUBoard V4.31.04 09.01.30 Multiple Local/Remote Vulnerability bY [email protected] / SIR GNUBoard VERSION 4.31.04 09.01.30is a widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP...

GNUBoard 4.31.04 LFI / SQL Injection

GNUBoard V4.31.04 09.01.30 Multiple Local/Remote Vulnerability bY [email protected] / SIR GNUBoard VERSION 4.31.04 09.01.30is a widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL. But we find a file include vulnerability affects SIR...

GNUBoard 4.31.04 (09.01.30) Multiple Local/Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= GNUBoard 4.31.04 09.01.30 Multiple Local/Remote Vulnerabilities ================================================================= GNUBoard V4.31.04 09.01.30 Multiple...

CVE-2009-0290

Directory traversal vulnerability in common.php in SIR GNUBoard 4.31.03 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the g4path parameter. NOTE: in some environments, this can be leveraged for remote code execution via a data: URI or a UNC share pathnam...

Directory traversal

Directory traversal vulnerability in common.php in SIR GNUBoard 4.31.03 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the g4path parameter. NOTE: in some environments, this can be leveraged for remote code execution via a data: URI or a UNC share pathnam...

CVE-2009-0290

CVE-2009-0290 concerns a directory traversal in SIR GNUBoard 4.31.03, where an attacker can use a .. in the g4_path parameter to include and execute local files. The vulnerability allows potential remote code execution via data: URIs or UNC paths in certain environments. Affected software is GNUB...

CVE-2009-0290: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in common.php in SIR GNUBoard 4.31.03 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the g4path parameter. NOTE: in some environments, this can be leveraged for remote code execution via a data: URI or a UNC share pathnam...

GNUBoard 4.31.03 Local File Inclusion

GNUBoard V4.31.03 08.12.29 Local/Remote File Include Vulnerability BY flyh4thotmail.com Thx to qiuren/rayt TEAM:Wolves Security Team SITE:http://bbs.wolvez.org/ / SIR GNUBoard VERSION 4.31.03 08.12.29is a widely used bulletin board system of Korea. It is freely available for all platforms that...

GNUBoard 4.31.03 (08.12.29) Local File Inclusion Vulnerability

No description provided by source. GNUBoard V4.31.03 08.12.29 Local/Remote File Include Vulnerability BY flyh4thotmail.com Thx to qiuren/rayt TEAM:Wolves Security Team SITE:http://bbs.wolvez.org/ / SIR GNUBoard VERSION 4.31.03 08.12.29is a widely used bulletin board system of Korea. It is freely...

GNUBoard 4.31.03 (08.12.29) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================== GNUBoard 4.31.03 08.12.29 Local File Inclusion Vulnerability ============================================================== GNUBoard V4.31.03 08.12.29 Local/Remote File Include...