549 matches found
Phorum HTML Injection Vulnerability
Phorum HTML Injection Vulnerability Phorum is a web based message board written in PHP. Phorum is designed with high-availability and visitor ease of use in mind. Features such as mailing list integration, easy customization and simple installation make Phorum a powerful add-in to any website...
Phorum < 5.1.19 register.php XSS
Binary data 3898.prm...
CVE-2006-6550
PHP remote file inclusion vulnerability in common.php in Phorum 3.2.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the dbfile parameter. NOTE: CVE disputes this vulnerability because dbfile is defined before use...
CVE-2006-6550
CVE-2006-6550 affects Phorum 3.2.11 and earlier, describing a PHP remote file inclusion vulnerability in common.php that could allow an attacker to execute arbitrary PHP code via a URL in the db_file parameter. The CVE entry notes a dispute about the vulnerability because db_file is defined befor...
PT-2006-7153 · Phorum · Phorum
Name of the Vulnerable Software and Affected Versions: Phorum versions 3.2.11 and earlier Description: A remote file inclusion issue allows attackers to execute arbitrary PHP code via a URL in the db file parameter. Recommendations: For Phorum versions 3.2.11 and earlier, at the moment, there is ...
CVE-2006-6550: Undefined Security Weakness
PHP remote file inclusion vulnerability in common.php in Phorum 3.2.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the dbfile parameter. NOTE: CVE disputes this vulnerability because dbfile is defined before use...
Phorum <= 3.2.11 (common.php) Remote File Include Vulnerability
No description provided by source. ===========================================================br / Yee7TeaMbr / br / WwW.Yee7.CoMbr / ===========================================================br / br / Software: Phorum v3.2.11br / br / Vendor: http://www.phorum.org/br / br / Download:...
Phorum <= 3.2.11 (common.php) Remote File Include Vulnerability
=========================================================== Yee7TeaM WwW.Yee7.CoM =========================================================== Software: Phorum v3.2.11 Vendor: http://www.phorum.org/ Download: http://skrypty.webpc.pl/pobierz274.html Dork: "Copyright C 2000 Phorum Development Team"...
Phorum <= 3.2.11 (common.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =============================================================== Phorum // $dbfile = './db/postgresql65.php'; Exploit: http://localhost/paTh/common.php?dbfile=Ev!lScript =========================================================== By: Mr-m07...
Phorum 3.2.11 - common.php Remote File Inclusion
Phorum 3.2.11 - common.php Remote File Inclusion =========================================================== Yee7TeaM WwW.Yee7.CoM =========================================================== Software: Phorum v3.2.11 Vendor: http://www.phorum.org/ Download: http://skrypty.webpc.pl/pobierz274.html...
Phorum 3.2.11 - 'common.php' Remote File Inclusion
=========================================================== Yee7TeaM WwW.Yee7.CoM =========================================================== Software: Phorum v3.2.11 Vendor: http://www.phorum.org/ Download: http://skrypty.webpc.pl/pobierz274.html Dork: "Copyright C 2000 Phorum Development Team"...
Cross-Site Scripting and Local File Inclusion in Phorum
Some vulnerabilities have been discovered in Phorum, which can be exploited by malicious people to conduct cross-site scripting attacks, disclose sensitive information, and potentially compromise a vulnerable system. 1 Input passed to the "template" parameter in pm.php isn't properly verified,...
phorum5114local.txt
Some vulnerabilities have been discovered in Phorum, which can be exploited by malicious people to conduct cross-site scripting attacks, disclose sensitive information, and potentially compromise a vulnerable system. 1 Input passed to the "template" parameter in pm.php isn't properly verified,...
Phorum 5.1.14 XSS SQL injection Vulnerability
Phorum 5.1.14 http://www.phorum.org -------------------------- Cross Site Scripting XSS -------------------------- POST http://target.xx:80/posting.php HTTP/1.0 Accept: / Content-Type: application/x-www-form-urlencoded Host: target.xx Content-Length: 447...
CVE-2006-3612
Cross-site scripting XSS vulnerability in Phorum 5.1.14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2006-3615
Multiple PHP remote file inclusion vulnerabilities in Phorum 5.1.14, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via unspecified vectors related to an uninitialized variable...
phorum5114.txt
Phorum 5.1.14 http://www.phorum.org -------------------------- Cross Site Scripting XSS -------------------------- POST http://target.xx:80/posting.php HTTP/1.0 Accept: / Content-Type: application/x-www-form-urlencoded Host: target.xx Content-Length: 447...
CVE-2006-3615
Multiple PHP remote file inclusion vulnerabilities in Phorum 5.1.14, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via unspecified vectors related to an uninitialized variable...
CVE-2006-3611
Directory traversal vulnerability in pm.php in Phorum 5 allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the GLOBALStemplate parameter, as demonstrated by injecting PHP sequences into a log file, which is then included by pm.php...
CVE-2006-3612
CVE-2006-3612 affects Phorum 5.1.14, with a reported Cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Red Hat and NVD entries corroborate the XSS issue in Phorum 5.1.14. The available metrics indicate a low overa...