129 matches found
CVE-2005-2893
CVE-2005-2893 affects PBLang 4.65 (and possibly earlier). The vulnerability is a direct static code injection in setcookie.php where the username parameter (u) is directly injected into a file that is later executed upon login, enabling remote code execution. The available sources identify the vu...
CVE-2005-2895
CVE-2005-2895 affects PBLang 4.65 (and possibly earlier) where setcookie.php accepts a null byte (%00) in the u parameter, enabling remote attackers to cause information disclosure by revealing the path in an error message. This is described in the NVD entry for CVE-2005-2895. The connected docum...
CVE-2005-2894
Cross-site scripting XSS vulnerability in the user registration in PBLang 4.65, and possibly earlier versions, allows remote attackers to inject arbitrary web script or PHP via the location field...
CVE-2005-2894
PBLang 4.65 (and possibly earlier) contains a Cross-site scripting (XSS) vulnerability in the user registration process. The flaw allows remote attackers to inject arbitrary web script or PHP via the location field, as described in CVE-2005-2894. The NVD entry lists this as a MEDIUM-severity issu...
CVE-2005-2892
CVE-2005-2892 affects PBLang 4.65 (and possibly earlier) with a directory traversal weakness in setcookie.php that lets remote attackers read arbitrary files by manipulating the u parameter (using .. and %00). Documents indicate this is a read-privilege vulnerability (partial confidentiality impa...
PBLang 4.65 (possibly prior versions) remote code execution
PBLang 4.65 possibly prior versions remote code execution / administrative credentials disclosure / system information disclosure / cross site scripting / path disclosure software: description: PBLang is a powerful flatfile Bulletin Board System. It combines many features of a professional board,...
PBLang Multiple Vulnerabilities
Binary data 3216.prm...
pblang465.php.txt
php.exe ..\www\r57pblang465.php localhost /pbl/ "pblcookie732128=Pe ng0; PBLsecid=a4c2f845c002ac54f5751440647f3c91;" Peng0 PrSrS $ARGV = $SERVER'argv'; global $ARGV; ifcount$ARGV == 0 echo base64decode"3fLu8iDx6vDo7/Ig5O7r5uXtIOH78vwg5+Dv8/nl7SDo5yDq7uzg7eTt7u...
PBLang < 4.66z Multiple Vulnerabilities
The remote host is running PBLang, a bulletin board system that uses flat files and is written in PHP. According to its banner, the version of PBLang installed on the remote host allows an attacker to inject code and create a user with administrative privileges, certain users to access restricted...
PBLang 4.65 Multiple Vulnerabilities
The remote host is running PBLang, a bulletin board system that uses flat files and is written in PHP. The version of PBLang installed on the remote suffers from several vulnerabilities, including remote code execution, information disclosure, cross-site scripting, and path disclosure...
PBLang 4.65 Bulletin Board System - SetCookie.php Directory Traversal
PBLang 4.65 Bulletin Board System - SetCookie.php Directory Traversal source: https://www.securityfocus.com/bid/14765/info PBLang is affected by a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Exploitation of this...
PBLang 4.65 - Remote Command Execution (2)
php.exe ..\www\r57pblang465.php localhost /pbl/ "pblcookie732128=Pe ng0; PBLsecid=a4c2f845c002ac54f5751440647f3c91;" Peng0 PrSrS $ARGV = $SERVER'argv'; global $ARGV; ifcount$ARGV == 0 echo base64decode"3fLu8iDx6vDo7/Ig5O7r5uXtIOH78vwg5+Dv8/nl7SDo5yDq7uzg7eTt7u...
PBLang 4.65 - Remote Command Execution (2)
PBLang 4.65 - Remote Command Execution 2 php.exe ..\www\r57pblang465.php localhost /pbl/ "pblcookie732128=Pe ng0; PBLsecid=a4c2f845c002ac54f5751440647f3c91;" Peng0 PrSrS $ARGV = $SERVER'argv'; global $ARGV; ifcount$ARGV == 0 echo...
PBLang <= 4.65 Remote Command Execution Exploit
No description provided by source. ?php / PBLang 4.65 possibly prior versions remote code execution by rgod - site: http://rgod.altervista.org make these changes in php.ini if you have troubles with this script: allowcalltimepassreference = on registerglobals = on / errorreporting0;...
PBLang 4.65 - Remote Command Execution (1)
PBLang 4.65 - Remote Command Execution 1 site: http://rgod.altervista.org make these changes in php.ini if you have troubles with this script: allowcalltimepassreference = on registerglobals = on / errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout", 2; obimplicitflush 1; ec...
PBLang <= 4.65 Remote Command Execution Exploit (2)
No description provided by source. ?php | | | PBLang = 4.65 remote commands exec exploit | | tested on 4.65 | | coded by Pengo 2005 RST/GHC | | http://rst.void.ru | | http://ghc.ru | | | WARNING! This exploit is successfully work when magicquotesrpc off = D:\httpd\phpphp.exe ..\www\r57pblang465.p...
PBLang <= 4.65 Remote Command Execution Exploit (2)
Exploit for unknown platform in category web applications =================================================== PBLang php.exe ..\www\r57pblang465.php localhost /pbl/ "pblcookie732128=Pe ng0; PBLsecid=a4c2f845c002ac54f5751440647f3c91;" Peng0 PrSrS $ARGV = $SERVER'argv'; global $ARGV; ifcount$ARGV =...
pblang465.txt
PBLang 4.65 possibly prior versions remote code execution / administrative credentials disclosure / system information disclosure / cross site scripting / path disclosure software: description: PBLang is a powerful flatfile Bulletin Board System. It combines many features of a professional board,...
PBLang <= 4.65 Remote Command Execution Exploit
Exploit for unknown platform in category web applications =============================================== PBLang site: http://rgod.altervista.org make these changes in php.ini if you have troubles with this script: allowcalltimepassreference = on registerglobals = on / errorreporting0;...
PBLang 4.65 - Remote Command Execution (1)
site: http://rgod.altervista.org make these changes in php.ini if you have troubles with this script: allowcalltimepassreference = on registerglobals = on / errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout", 2; obimplicitflush 1; echo 'PBLang 4.65 remote commands execution...