MKPortal 1.0.1 - index.php Directory Traversal

MKPortal 1.0.1 - index.php Directory Traversal source: https://www.securityfocus.com/bid/18707/info MKPortal is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the...

MKPortal 1.0.1 - 'index.php' Directory Traversal

source: https://www.securityfocus.com/bid/18707/info MKPortal is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected...

Sql injection

SQL injection vulnerability in vbboardfunctions.php in MKPortal 1.1, as used with vBulletin 3.5.4 and earlier, allows remote attackers to execute arbitrary SQL commands via the userid parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities pmpopup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin 3.5.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 u1, 2 m1, 3 m2, 4 m3, 5 m4 parameters...

CVE-2006-2066

Multiple cross-site scripting XSS vulnerabilities pmpopup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin 3.5.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 u1, 2 m1, 3 m2, 4 m3, 5 m4 parameters...

CVE-2006-2067

SQL injection vulnerability in vbboardfunctions.php in MKPortal 1.1, as used with vBulletin 3.5.4 and earlier, allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2006-2067

SQL injection vulnerability in vbboardfunctions.php in MKPortal 1.1, as used with vBulletin 3.5.4 and earlier, allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2006-2067

The CVE-2006-2067 entry documents a SQL injection vulnerability in MKPortal 1.1 when used with vBulletin 3.5.4 and earlier. The flaw affects vb_board_functions.php, where the userid parameter can be exploited by remote attackers to execute arbitrary SQL commands. No specific exploit details are p...

CVE-2006-2066

The CVE-2006-2066 entry refers to multiple XSS vulnerabilities in pm_popup.php of MKPortal 1.1 Rc1 and earlier, used with vBulletin 3.5.4 and earlier. The issue is exploitable via the request parameters (1) u1, (2) m1, (3) m2, (4) m3, and (5) m4, enabling remote attackers to inject arbitrary web ...

CVE-2006-2066

Multiple cross-site scripting XSS vulnerabilities pmpopup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin 3.5.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 u1, 2 m1, 3 m2, 4 m3, 5 m4 parameters...

CVE-2006-2066: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities pmpopup.php in MKPortal 1.1 Rc1 and earlier, as used with vBulletin 3.5.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 u1, 2 m1, 3 m2, 4 m3, 5 m4 parameters...

CVE-2006-2067: Undefined Security Weakness

SQL injection vulnerability in vbboardfunctions.php in MKPortal 1.1, as used with vBulletin 3.5.4 and earlier, allows remote attackers to execute arbitrary SQL commands via the userid parameter...

[Full-disclosure] vBulletin <= 3.5.4 with MKPortal 1.1 Remote SQL Injection Vulnerability.

--Security Report-- Advisory: vBulletin = 3.5.4 with MKPortal 1.1 Remote SQL Injection Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 21/04/06 22:36 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: MKPortal...

MKPortal 1.1 - Multiple Input Validation Vulnerabilities

source: https://www.securityfocus.com/bid/17651/info MKPortal is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...

mkportalXSS.txt

Bug finder:spyMASter http://www.mkportal.it contact:[email protected] Website:www.cyber-warrior.org xss is on the read all at the right of the news http://www.example.com/index.php?ind=news&op=newsshowsingle&ide=3 http://www.example.com/index.php?ind=news&op=newsshowsingle&ide=3XSS Express...