Gravity Board X v2.0 BETA (Public Release 3) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Gravity Board X v2.0 BETA Public Release 3 SQL Injection Vulnerability ======================================================================== !/usr/bin/perl Exploit...

CVE-2009-1278

Static code injection vulnerability in forms/ajax/configure.php in Gravity Board X GBX 2.0 BETA allows remote attackers to inject arbitrary PHP code into config.php via the configure action to index.php...

CVE-2009-1277

SQL injection vulnerability in index.php in Gravity Board X GBX 2.0 BETA allows remote attackers to execute arbitrary SQL commands via the memberid parameter in a viewprofile action. NOTE: the boardid issue is already covered by CVE-2008-2996.2...

Sql injection

SQL injection vulnerability in index.php in Gravity Board X GBX 2.0 BETA allows remote attackers to execute arbitrary SQL commands via the memberid parameter in a viewprofile action. NOTE: the boardid issue is already covered by CVE-2008-2996.2...

CVE-2009-1278

Gravity Board X (GBX) 2.0 BETA has a static code injection in forms/ajax/configure.php that allows remote attackers to inject arbitrary PHP code into config.php via the configure action to index.php. Affected: GBX 2.0 BETA; vulnerable file: forms/ajax/configure.php. Root cause: configuration work...

CVE-2009-1278

Static code injection vulnerability in forms/ajax/configure.php in Gravity Board X GBX 2.0 BETA allows remote attackers to inject arbitrary PHP code into config.php via the configure action to index.php...

CVE-2009-1277

SQL injection vulnerability in index.php in Gravity Board X GBX 2.0 BETA allows remote attackers to execute arbitrary SQL commands via the memberid parameter in a viewprofile action. NOTE: the boardid issue is already covered by CVE-2008-2996.2...

CVE-2009-1277

CVE-2009-1277 concerns Gravity Board X (GBX) 2.0 Beta. The vulnerability is a SQL injection in index.php via the member_id parameter in a viewprofile action, enabling remote attackers to execute arbitrary SQL commands. The entry notes that a separate board_id issue is covered by CVE-2008-2996. Co...

CVE-2009-1277: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Gravity Board X GBX 2.0 BETA allows remote attackers to execute arbitrary SQL commands via the memberid parameter in a viewprofile action. NOTE: the boardid issue is already covered by CVE-2008-2996.2...

CVE-2009-1278: Improper Control of Generation of Code

Static code injection vulnerability in forms/ajax/configure.php in Gravity Board X GBX 2.0 BETA allows remote attackers to inject arbitrary PHP code into config.php via the configure action to index.php...

Gravity Board X Detection

This host is running Gravity Board X, a free forum software written in PHP and MySQL. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

Gravity Board X Multiple SQLi Vulnerabilities and RCE Vulnerability

Gravity Board X is prone to multiple SQL injection SQLi vulnerabilities and a remote command execution RCE because it fails to sufficiently sanitize user- supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a...

Gravity Board X Multiple SQL Injection Vulnerabilities and Remote Command Execution Vulnerability

Gravity Board X is prone to multiple SQL-injection vulnerabilities and a remote command-execution because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to execute arbitrary code, compromise the application...

Gravity Board X 2.0b SQL Injection / Post Auth Code Execution

No description provided by source. ================================================================================ Found : brainpillow Dork : "Powered By Gravity Board X v2.0 BETA" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Mail : [email protected]...

Gravity Board X 2.0 Beta - SQL Injection / (Authenticated) Code Execution

================================================================================ Found : brainpillow Dork : "Powered By Gravity Board X v2.0 BETA" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Mail : [email protected]...

Gravity Board X 2.0b SQL Injection / Post Auth Code Execution

Exploit for unknown platform in category web applications ============================================================= Gravity Board X 2.0b SQL Injection / Post Auth Code Execution =============================================================...

Gravity Board X 2.0 Beta - SQL Injection (Authenticated) Code Execution

Gravity Board X 2.0 Beta - SQL Injection Authenticated Code Execution ================================================================================ Found : brainpillow Dork : "Powered By Gravity Board X v2.0 BETA" Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Mail : [email protected]...

CVE-2008-5962

Directory traversal vulnerability in library/setup/rpc.php in Gravity Getting Things Done GTD 0.4.5 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the objectname parameter...

CVE-2008-5963

Eval injection vulnerability in library/setup/rpc.php in Gravity Getting Things Done GTD 0.4.5 and earlier allows remote attackers to execute arbitrary PHP code via the objectname parameter...

Directory traversal

Directory traversal vulnerability in library/setup/rpc.php in Gravity Getting Things Done GTD 0.4.5 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the objectname parameter...