106 matches found
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in admin.php in PBBoard 2.1.4 allow remote attackers to hijack the authentication of administrators for requests that 1 upload a file via an add action or 2 change the contents of a file via a dit action...
CVE-2012-1216
Multiple cross-site request forgery CSRF vulnerabilities in admin.php in PBBoard 2.1.4 allow remote attackers to hijack the authentication of administrators for requests that 1 upload a file via an add action or 2 change the contents of a file via a dit action...
CVE-2012-1216
PBBoard 2.1.4 and likely earlier versions have multiple vulnerabilities tied to CVE-2012-1216: a CSRF flaw in admin.php that can hijack administrator sessions to perform actions (e.g., file upload via add action or file content modification via edit action), and it is linked to other issues (CVE-...
CVE-2012-1216: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in admin.php in PBBoard 2.1.4 allow remote attackers to hijack the authentication of administrators for requests that 1 upload a file via an add action or 2 change the contents of a file via a dit action...
PBBoard v2.1.4 <= Multiple Vulnerabilites
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
PBBoard 2.1.4 Cross Site Request Forgery / Shell Upload
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...
PBBoard 2.1.1 SQL Injection / Cross Site Scripting / Shell Upload
================================================== PBBoard 2.1.1 Multiple Remote Vulnerabilities ================================================== |=-----------------------------------------------------=| |=-------------= JIKO |No-exploit.Com| =-----------=|...
pbboard 2.1.1 - Multiple Vulnerabilities
================================================== PBBoard 2.1.1 Multiple Remote Vulnerabilities ================================================== |=-----------------------------------------------------=| |=-------------= JIKO |No-exploit.Com| =-----------=|...
pbboard 2.1.1 - Multiple Vulnerabilities
pbboard 2.1.1 - Multiple Vulnerabilities ================================================== PBBoard 2.1.1 Multiple Remote Vulnerabilities ================================================== |=-----------------------------------------------------=| |=-------------= JIKO |No-exploit.Com|...
PBBoard 2.0.5 Add Administrator / Shell Upload
======================================================================================== | Title : PBBoard Version 2.0.5 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com | Web Site : http://www.pbboard.com/PBBoardv2.0.5.zip | Dork : Powered by...
PBBoard Version 2.0.5 Mullti Vulnerability
Exploit for unknown platform in category web applications ========================================== PBBoard Version 2.0.5 Mullti Vulnerability ========================================== ======================================================================================== | Title : PBBoard...
PBBoard 2.0.5 - Multiple Vulnerabilities
PBBoard 2.0.5 - Multiple Vulnerabilities ======================================================================================== | Title : PBBoard Version 2.0.5 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com | Web Site :...
PBBoard 2.0.5 - Multiple Vulnerabilities
======================================================================================== | Title : PBBoard Version 2.0.5 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com | Web Site : http://www.pbboard.com/PBBoardv2.0.5.zip | Dork : Powered by...
Cross site scripting
Cross-site scripting XSS vulnerability in forums/index.php in Power Bulletin Board PBBoard 2.0.2 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter in a newtopic action...
CVE-2009-3649
PBBoard (Power Bulletin Board) suffers a cross-site scripting (XSS) vulnerability in forums/index.php, affecting version 2.0.2 and earlier. The issue arises in the id parameter of the "new_topic" action, allowing remote attackers to inject arbitrary web script or HTML. Affected software is PBBoar...
PBBoard <=2.0.2 - XSS in Topic
No description provided by source. Sec-Area Advisorypbboard =2.0.2 - XSS in Topic Details ======= Product: PHP = PBBoard Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.pbboard.com Credits ============ Discovered by: rUnViRuS site: http://www.sec-area.com Affected Products:...
PBBoard <=2.0.2 Full Path Disclosure
No description provided by source. AdvisoryPBBoard =2.0.2 - Full Path Disclosure Details ======= Product: PHP = PBBoard Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.pbboard.com Credits ============ Discovered by: rUnViRuS site: http://www.sec-area.com Affected Products:...
PBBoard <=2.0.2 - Full Path Disclosure
No description provided by source. AdvisoryPBBoard =2.0.2 - Full Path Disclosure Details ======= Product: PHP = PBBoard Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.pbboard.com Credits ============ Discovered by: rUnViRuS site: http://www.sec-area.com Affected Products:...
PBBoard 2.0.2 Cross Site Scripting
Sec-Area Advisorypbboard Back to forums You will find the code works -------------------------------------------- World Defacers Team http://www.Sec-area.com --------------------------------------------...
PBBoard 2.0.2 - Full Path Disclosure
PBBoard 2.0.2 - Full Path Disclosure AdvisoryPBBoard GET as $sqlget if eregi"select", $sqlget or eregi"union", $sqlget or eregi"%", $sqlget $this-error'?? ¨¹??? ± ?´±?¹?!'; ================ ================ 2. Full Path Disclosure ----------------------------------- allow attackers to gather the...