PBLang <= 4.99.17.q Remote File Rewriting / Command Execution

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org...

PBLang Bulletin Board System 4.6 Search.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12631/info PBLang is reportedly affected by a cross-site scripting vulnerability. This issue exists because the application fails to properly sanitize user-supplied input. As a result of this vulnerability, it is possible...

PBLang 4.65 Bulletin Board System SetCookie.PHP Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14765/info PBLang is affected by a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Exploitation of this vulnerability could lead to a loss of...

PBLang local file include vulnerability

Exploit for php platform in category web applications ||\ || || || |-\ //-| || \ || || || | |\ //| | | \ | | |/ / || \ || || || | | \ // | | | \ | | / / || \ || || || | | \ // | | | | | | | /'\ / / || \ || || || | | \ // | | | | | \ \ / / / || \ || |||| | | \// | | | | | | | \ \ / /...

PBLang Bulletin Board System - Local File Inclusion

||\ || || || |-\ //-| || \ || || || | |\ //| | | \ | | |/ / || \ || || || | | \ // | | | \ | | / / || \ || || || | | \ // | | | | | | | /'\ / / || \ || || || | | \ // | | | | | \ \ / / / || \ || |||| | | \// | | | | | | | \ \ / / || \|| || || || |/ || // // Exploit Title: PBLang...

PBLang Bulletin Board System - Local File Inclusion

PBLang Bulletin Board System - Local File Inclusion ||\ || || || |-\ //-| || \ || || || | |\ //| | | \ | | |/ / || \ || || || | | \ // | | | \ | | / / || \ || || || | | \ // | | | | | | | /'\ / / || \ || || || | | \ // | | | | | \ \ / / / || \ || |||| | | \// | | | | | | | \ \ / / ||...

PBLang 4.67.16.a Local File Inclusion

||\ || || || |-\ //-| || \ || || || | |\ //| | | \ | | |/ / || \ || || || | | \ // | | | \ | | / / || \ || || || | | \ // | | | | | | | /'\ / / || \ || || || | | \ // | | | | | \ \ / / / || \ || |||| | | \// | | | | | | | \ \ / / || \|| || || || |/ || // // Exploit Title: PBLang...

PBLang NTopic.PHP任意文件上传漏洞

PBLang是一款基于PHP的WEB应用程序。 PBLang不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞上传任意文件，并以WEB权限执行。 问题是由于'NTopic.PHP'脚本对用户提交的WEB参数缺少过滤，提交包含多个"../"字符作为参数数据，可绕过WEB ROOT限制，上传任意文件，并以WEB权限执行。 PBLang PBLang 4.66 z PBLang PBLang 4.66 PBLang PBLang 4.65 PBLang PBLang 4.63 PBLang PBLang 4.56 4.5 RC 2 PBLang PBLang 4.6 PBLang PBLa...

pblang499-exec.txt

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg Original Here: http://www.inj3ct-it.org/exploit/pbl.txt...

PBLang &lt;= 4.99.17.q Remote File Rewriting / Remote Command Execution

--------------------------------------------------------------- / | | / | / |/ | | |/ | | / | | | | | |/ | | // | || | ||| /| / / | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg Original Here:...

PBLang &lt;= 4.99.17.q Remote File Rewriting / Command Execution

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...

PBLang 4.99.17.q - Remote File Rewriting Command Execution

PBLang 4.99.17.q - Remote File Rewriting Command Execution --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

PBLang <= 4.99.17.q Remote File Rewriting / Command Execution

Exploit for unknown platform in category web applications ============================================================= PBLang | |||| /| / / --------------------------------------------------------------- PBLang = 4.99.17.q Remote File Rewriting / Remote Command Execution...

PBLang 4.99.17.q - Remote File Rewriting / Command Execution

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- PBLang The...

PBLang <= 4.67.16.a login.php lang Parameter Traversal Local File Inclusion

Binary data 4078.prm...

PBLang login.php lang Parameter Local File Inclusion

The remote host is running PBLang, a bulletin board system that uses flat files and is written in PHP. The version of PBLang installed on the remote host fails to sanitize user input to the 'lang' parameter before using it to include PHP code in 'login.php'. Regardless of PHP's 'registerglobals'...

Directory traversal

Directory traversal vulnerability in login.php in PBLang PBL 4.67.16.a and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

CVE-2007-3096

Directory traversal vulnerability in login.php in PBLang PBL 4.67.16.a and earlier, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

CVE-2007-3096

PBLang up to version 4.67.16.a is affected by a directory traversal/local file inclusion in login.php, exploitable via the lang parameter when magic_quotes_gpc is disabled. An unauthenticated, remote attacker could cause the server to include and potentially execute local PHP files, subject to we...

PBLang 4.67.16.a - Remote Code Execution

PBLang 4.67.16.a - Remote Code Execution !/usr/bin/php -q -d shortopentag=on ?php errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; if $argc4 print "-------------------------------------------------------------------------\r\n"; print " PBLang = 4.67.16.a Remote Code...