Gravity Board X Multiple SQL Injection Vulnerabilities and Remote Command Execution Vulnerability

Gravity Board X is prone to multiple SQL-injection vulnerabilities and a remote command-execution because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to execute arbitrary code, compromise the application...

Gravity Board X Multiple SQLi Vulnerabilities and RCE Vulnerability

Gravity Board X is prone to multiple SQL injection SQLi vulnerabilities and a remote command execution RCE because it fails to sufficiently sanitize user- supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a...

Gravity Board X Detection

This host is running Gravity Board X, a free forum software written in PHP and MySQL. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

Gravity Board X 2.0b SQL Injection / Post Auth Code Execution

No description provided by source. ================================================================================ Found : brainpillow Dork : "Powered By Gravity Board X v2.0 BETA" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Mail : [email protected]...

Gravity Board X 2.0 Beta - SQL Injection (Authenticated) Code Execution

Gravity Board X 2.0 Beta - SQL Injection Authenticated Code Execution ================================================================================ Found : brainpillow Dork : "Powered By Gravity Board X v2.0 BETA" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Mail : [email protected]...

Gravity Board X 2.0 Beta - SQL Injection / (Authenticated) Code Execution

================================================================================ Found : brainpillow Dork : "Powered By Gravity Board X v2.0 BETA" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Mail : [email protected]...

Gravity Board X 2.0b SQL Injection / Post Auth Code Execution

Exploit for unknown platform in category web applications ============================================================= Gravity Board X 2.0b SQL Injection / Post Auth Code Execution =============================================================...

CVE-2008-5962

Directory traversal vulnerability in library/setup/rpc.php in Gravity Getting Things Done GTD 0.4.5 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the objectname parameter...

CVE-2008-5963

Eval injection vulnerability in library/setup/rpc.php in Gravity Getting Things Done GTD 0.4.5 and earlier allows remote attackers to execute arbitrary PHP code via the objectname parameter...

Directory traversal

Directory traversal vulnerability in library/setup/rpc.php in Gravity Getting Things Done GTD 0.4.5 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the objectname parameter...

CVE-2008-5963

Eval injection vulnerability in library/setup/rpc.php in Gravity Getting Things Done GTD 0.4.5 and earlier allows remote attackers to execute arbitrary PHP code via the objectname parameter...

CVE-2008-5962

CVE-2008-5962 affects Gravity Getting Things Done (GTD) up to version 0.4.5. The vulnerability is in library/setup/rpc.php, where the objectname parameter can be crafted to trigger a directory traversal, allowing remote attackers to include and execute arbitrary local files. This is a classic loc...

CVE-2008-5963

Gravity GTD (Getting Things Done) up to version 0.4.5 is affected by an eval-injection vulnerability in library/setup/rpc.php that allows remote attackers to execute arbitrary PHP code via the objectname parameter. This CVE (CVE-2008-5963) is rated high by NVD (base score 10.0) with network attac...

gravitygtd-lfiexec.txt

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl gravity-gtd = 0.4.5 LFI/RCE Vulnerability Script: An open source list manager for tracking action items according to the principles...

Gravity GTD <= 0.4.5 (rpc.php objectname) LFI/RCE Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl gravity-gtd = 0.4.5 LFI/RCE Vulnerability Script: An open source list manager for tracking actio...

Gravity GTD 0.4.5 - Local File Inclusion / Remote Code Execution

:::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl gravity-gtd = 0.4.5 LFI/RCE Vulnerability Script: An open source list manager for tracking action items according to the principles...

Gravity GTD 0.4.5 - Local File Inclusion Remote Code Execution

Gravity GTD 0.4.5 - Local File Inclusion Remote Code Execution :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl gravity-gtd = 0.4.5 LFI/RCE Vulnerability Script: An open source lis...

Gravity GTD <= 0.4.5 (rpc.php objectname) LFI/RCE Vulnerability

Exploit for unknown platform in category web applications =============================================================== Gravity GTD = 0.4.5 rpc.php objectname LFI/RCE Vulnerability =============================================================== :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;;...

Sql injection

Multiple SQL injection vulnerabilities in index.php in Gravity Board X GBX 2.0 Beta, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 searchquery parameter in a getsearch action, and the 2 boardid parameter in a viewboard action...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Gravity Board X GBX 2.0 Beta allows remote attackers to inject arbitrary web script or HTML via the subject parameter in a postnewsubmit aka create new thread action...