GNUBoard 4.31.03 (08.12.29) - Local File Inclusion

GNUBoard 4.31.03 08.12.29 - Local File Inclusion GNUBoard V4.31.03 08.12.29 Local/Remote File Include Vulnerability BY flyh4thotmail.com Thx to qiuren/rayt TEAM:Wolves Security Team SITE:http://bbs.wolvez.org/ / SIR GNUBoard VERSION 4.31.03 08.12.29is a widely used bulletin board system of Korea...

GNUBoard 4.31.03 (08.12.29) - Local File Inclusion

GNUBoard V4.31.03 08.12.29 Local/Remote File Include Vulnerability BY flyh4thotmail.com Thx to qiuren/rayt TEAM:Wolves Security Team SITE:http://bbs.wolvez.org/ / SIR GNUBoard VERSION 4.31.03 08.12.29is a widely used bulletin board system of Korea. It is freely available for all platforms that...

GNUBoard上传漏洞

GNUBoard是在韩国的一个应用广泛的BBS系统，由于一些程序对输入缺少过滤，可以导致任意文件上传，甚至以WEB权限执行系统命令，WEB权限默认情况下是nobody。 GNUBoard 暂无 $source = array "/.php/", "/.htm/", "/.cgi/", "/.pl/"; $target = array ".phpx", ".htmx", ".cgix", &q...

CVE-2005-0269

The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowercase letters, which allows remote attackers to upload arbitrary files via file extensions that include uppercase letters...

CVE-2004-1403

CVE-2004-1403 affects GNUBoard ≤3.39; a PHP remote file inclusion in index.php via the doc parameter lets an attacker reference a URL on a remote server to execute arbitrary PHP code. The issue is a remote inclusion flaw enabling code execution with web server privileges; connected Nessus/SIR ent...

CVE-2004-1403: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in GNUBoard 3.39 and earlier allows remote attackers to execute arbitrary PHP code by modifying the doc parameter to reference a URL on a remote web server that contains the code...

CVE-2005-0269

The CVE-2005-0269 vulnerability affects GNUBoard versions 3.40 and earlier, where a file extension check only validates lowercase-letter extensions. This allows remote attackers to upload arbitrary files by using file extensions that contain uppercase letters. The root cause is a case-sensitive c...

CVE-2005-0269

The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowercase letters, which allows remote attackers to upload arbitrary files via file extensions that include uppercase letters...

PT-2005-1347 · Gnu · Gnuboard

Name of the Vulnerable Software and Affected Versions: GNUBoard versions 3.40 and earlier Description: The issue allows remote attackers to upload arbitrary files by exploiting a weakness in the file extension check, which only verifies extensions containing all lowercase letters. This enables...

CVE-2005-0269: Improper Handling of Case Sensitivity

The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowercase letters, which allows remote attackers to upload arbitrary files via file extensions that include uppercase letters...

STG Security Advisory: [SSA-20041224-21] File extensions restriction bypass vulnerability in GNUBoard

STG Security Advisory: SSA-20041224-21 File extensions restriction bypass vulnerability in GNUBoard. Revision 1.0 Date Published: 2004-12-24 KST Last Update: 2005-01-03 Disclosed by SSR Team [email protected] Summary ======== GNUBoard is one of widely used web BBS applications in Korea...

CVE-2004-1403

PHP remote file inclusion vulnerability in index.php in GNUBoard 3.39 and earlier allows remote attackers to execute arbitrary PHP code by modifying the doc parameter to reference a URL on a remote web server that contains the code...

STG Security Advisory 2004-12-14.14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20041214-14 GNUBoard PHP injection vulnerability. Revision 1.0 Date Published: 2004-12-14 KST Last Update: 2004-12-14 Disclosed by SSR Team [email protected] Summary ======== GNUBoard is one of widely used web BBS...

STG Security Advisory: [SSA-20041214-14] GNUBoard PHP injection vulnerability

STG Security Advisory: SSA-20041214-14 GNUBoard PHP injection vulnerability Revision 1.0 Date Published: 2004-12-14 KST Last Update: 2004-12-14 Disclosed by SSR Team [email protected] Summary ======== GNUBoard is one of widely used web BBS applications in Korea. Because of an input...

SIR GNUBoard Remote File Inclusion

It is possible to make the remote web server read arbitrary files by using the GNUBoard CGI suite which is installed. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable Network Security,...